Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File: pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier: 32TvOaFo7slHPuqzZ9RySjpiB+H2dKVuZgA/5k5mLoo=
Subject key identifier: EC:CF:1B:06:7D:0C:B3:9A:98:63:6D:38:E8:F8:D7:17:95:F3:37:61
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer: /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial: 01976EF4D19B45DAD81733B2E4B1FCF9C6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number: 063C
Signing time: Sat 14 Jun 2025 15:00:27 +0000
Manifest this update: Sat 14 Jun 2025 15:00:27 +0000
Manifest next update: Sun 15 Jun 2025 15:00:27 +0000
Files and hashes: 1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: l5EQoyqv9VGNjFWBceRetPb04xvhvG2MIq1b43LmrPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:d1:9b:45:da:d8:17:33:b2:e4:b1:fc:f9:c6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
Validity
Not Before: Jun 14 15:00:27 2025 GMT
Not After : Jun 15 15:00:27 2025 GMT
Subject: CN=eccf1b067d0cb39a98636d38e8f8d71795f33761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:7f:da:10:48:d7:2d:6f:f9:c5:75:8f:44:
53:8b:9f:62:cd:7c:d1:60:ed:56:e3:2a:fb:02:82:
8d:49:3e:d7:54:00:87:70:06:41:f7:e1:4e:8e:16:
9e:e7:3f:5b:2a:7e:27:96:b3:0f:86:54:16:ad:a3:
64:2a:2e:59:42:4e:a2:c0:57:3a:d2:c3:98:d5:27:
a5:e4:74:59:e7:55:7c:76:fd:98:56:d2:99:ae:80:
77:31:e8:fe:34:38:86:ac:ae:e2:de:ec:f9:63:7a:
b0:fc:4b:65:21:b3:04:67:b8:b4:fc:43:d6:a0:0a:
1a:36:6b:65:47:07:43:de:a1:a1:8f:08:ee:d6:b6:
9e:b8:a2:d0:a4:cd:49:53:45:4e:3d:c5:39:fb:37:
ad:30:34:46:a4:d1:14:d5:cd:49:ca:c7:78:b4:ab:
d5:7e:61:57:4a:6d:71:d1:ef:a3:8c:91:d5:5a:74:
be:a0:4c:32:18:01:f9:99:56:77:2e:de:70:e0:ca:
b6:ba:df:0c:07:07:f2:8f:c7:0e:40:a5:96:c6:84:
84:87:4b:e3:fa:d4:b9:a8:38:11:8f:db:94:77:8e:
c2:5a:b0:d2:2d:51:c8:c5:bd:e2:f7:60:3d:52:da:
22:d2:f5:c5:ae:55:97:a0:ff:9d:16:53:a9:d6:bf:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CF:1B:06:7D:0C:B3:9A:98:63:6D:38:E8:F8:D7:17:95:F3:37:61
X509v3 Authority Key Identifier:
keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:65:c6:0b:83:6c:fe:81:06:b0:de:f1:06:2e:0a:eb:b1:9d:
2b:a8:9c:3b:cd:95:28:b8:cd:a7:7d:4c:e4:3c:62:7b:8a:1e:
b7:af:10:0a:93:fe:e1:28:a9:9b:36:da:8f:67:2f:24:07:52:
19:f4:74:84:03:e5:07:e9:60:f8:89:11:77:aa:d0:bc:54:b1:
c1:1f:36:12:7f:db:16:e5:16:9a:b2:4b:3c:18:3c:d5:aa:32:
cf:d3:f7:2b:09:81:83:c8:ef:f0:b1:ba:fe:f8:52:ce:9f:a6:
d2:cf:e0:e6:45:71:37:e1:79:45:5e:67:1f:2b:a4:de:d1:3b:
96:b9:17:53:88:46:07:29:27:26:65:fc:2f:a3:aa:4b:34:02:
c0:37:84:08:6c:d6:fc:f9:81:b3:0d:04:de:35:1e:f3:51:79:
a4:04:4c:72:3c:ae:41:59:b4:cb:6c:96:ab:f7:68:19:c5:76:
0b:dc:a3:96:79:27:24:61:89:b0:76:66:97:c2:b8:a5:e9:d5:
5c:1e:a7:8e:b7:8e:79:ec:18:45:a3:ca:2b:ef:59:8d:27:75:
87:78:b7:18:8e:d9:f1:0b:03:a3:77:22:b5:66:9c:8a:e9:7e:
3d:c1:b1:0f:36:68:cd:43:17:c9:ba:eb:6e:e8:9d:e5:a3:11:
72:54:92:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9NGbRdrYFzOy5LH8+cbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OTMyZmE0OTU2NGE1NzZhNjE0M2U0NWY4MTU2NjhmMjAw
ZDc2MzcwHhcNMjUwNjE0MTUwMDI3WhcNMjUwNjE1MTUwMDI3WjAzMTEwLwYDVQQD
EyhlY2NmMWIwNjdkMGNiMzlhOTg2MzZkMzhlOGY4ZDcxNzk1ZjMzNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijh/2hBI1y1v+cV1j0RTi59izXzR
YO1W4yr7AoKNST7XVACHcAZB9+FOjhae5z9bKn4nlrMPhlQWraNkKi5ZQk6iwFc6
0sOY1Sel5HRZ51V8dv2YVtKZroB3Mej+NDiGrK7i3uz5Y3qw/EtlIbMEZ7i0/EPW
oAoaNmtlRwdD3qGhjwju1raeuKLQpM1JU0VOPcU5+zetMDRGpNEU1c1Jysd4tKvV
fmFXSm1x0e+jjJHVWnS+oEwyGAH5mVZ3Lt5w4Mq2ut8MBwfyj8cOQKWWxoSEh0vj
+tS5qDgRj9uUd47CWrDSLVHIxb3i92A9Utoi0vXFrlWXoP+dFlOp1r8vzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzPGwZ9DLOamGNtOOj41xeV8zdhMB8GA1UdIwQY
MBaAFKSTL6SVZKV2phQ+RfgVZo8gDXY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2Et
YzdjMzI2ZDdhMzY0LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGFiNDYtODNmMy00MTViLTg4M2EtYzdjMzI2ZDdhMzY0
LzEvcEpNdnBKVmtwWGFtRkQ1Ri1CVm1qeUFOZGpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWXGC4Ns
/oEGsN7xBi4K67GdK6icO82VKLjNp31M5Dxie4oet68QCpP+4Sipmzbaj2cvJAdS
GfR0hAPlB+lg+IkRd6rQvFSxwR82En/bFuUWmrJLPBg81aoyz9P3KwmBg8jv8LG6
/vhSzp+m0s/g5kVxN+F5RV5nHyuk3tE7lrkXU4hGByknJmX8L6OqSzQCwDeECGzW
/PmBsw0E3jUe81F5pARMcjyuQVm0y2yWq/doGcV2C9yjlnknJGGJsHZml8K4penV
XB6njreOeewYRaPKK+9ZjSd1h3i3GI7Z8QsDo3citWaciul+PcGxDzZozUMXybrr
buid5aMRclSSrA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:58:26 2025 by rpki-client