Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
File: pmJGuAbomrpA5-WIiPNXZROjk0o.mft (raw, json)
Hash identifier: bHbA36Ar7Mdpk13OvRye8okuzP1b4VgeSvisviEWx3c=
Subject key identifier: AD:55:06:CF:55:F4:8E:3D:1D:90:A3:1A:15:AE:E5:69:67:D6:59:13
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 01988C8F04E86EC94E4AA7FA076D00A8EA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
Manifest number: 162B
Signing time: Sat 09 Aug 2025 02:00:39 +0000
Manifest this update: Sat 09 Aug 2025 02:00:39 +0000
Manifest next update: Sun 10 Aug 2025 02:00:39 +0000
Files and hashes: 1: 6W6gmSc4k57Y4v5MIcHO8sDy0Nk.roa (hash: aByrM29yQlmUSgYmIxuh2nCAQIQ4+06fpCqZWYYHHbE=)
2: WwtbLNZ8w3CZaCckJBj7-wgL_Wg.roa (hash: awi9blZyXe6dA7Vb92PcI70MUj14FAGRwBheENnmVNg=)
3: pmJGuAbomrpA5-WIiPNXZROjk0o.crl (hash: X51b/l4hORHVPWypedmFPNVYuOo7j53hgpjruSCmBao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:04:e8:6e:c9:4e:4a:a7:fa:07:6d:00:a8:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Aug 9 02:00:39 2025 GMT
Not After : Aug 10 02:00:39 2025 GMT
Subject: CN=ad5506cf55f48e3d1d90a31a15aee56967d65913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:03:f9:42:65:e8:1a:ce:ae:0e:be:b3:65:
6c:89:46:df:89:68:a3:37:be:14:6f:a6:22:72:53:
ec:93:2c:e5:4b:33:ff:52:f6:9f:40:ea:06:e7:da:
c6:8c:23:49:12:35:de:47:f3:2a:ce:0d:e1:0b:03:
71:2d:47:bf:ce:0e:64:9c:4c:b7:a9:d4:ff:2a:63:
6f:a7:4f:34:2d:14:8b:16:7c:64:58:b6:b7:4d:ee:
f4:9f:e7:6d:8e:28:63:44:4d:68:57:c8:9c:e7:97:
ce:f6:78:cf:ec:ac:20:98:6b:f1:3e:e9:ea:5d:f2:
e2:09:8b:38:19:d8:e6:db:e6:dd:8a:1d:87:e2:99:
80:ab:e5:0f:8b:e9:2f:2c:1f:fb:e2:cc:e3:6d:43:
1a:52:4d:1a:a7:3c:f5:d3:ff:71:e7:79:4b:44:20:
d7:1b:e2:22:c1:1d:6c:f8:49:b4:15:8e:67:da:f6:
f2:5d:61:ea:f8:85:a8:d7:33:58:89:48:8b:9b:e2:
5d:4a:d4:14:e4:0f:68:41:89:a9:22:16:0a:89:83:
e2:91:53:de:ca:3f:3f:c4:f1:6c:32:2d:da:c6:90:
11:5d:11:ce:6f:33:2b:9d:de:c1:9f:33:bd:4f:c9:
22:18:a3:a3:72:22:49:8b:cc:b4:d0:9f:70:fc:be:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:06:CF:55:F4:8E:3D:1D:90:A3:1A:15:AE:E5:69:67:D6:59:13
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:56:1a:80:10:bf:1e:0e:d4:df:15:cb:81:a6:04:20:f6:ef:
ee:98:a6:5f:33:e7:a0:ce:3f:c8:b0:1c:3d:39:04:84:32:fc:
6d:ad:84:a3:09:bc:6f:83:5d:72:5e:0e:89:e9:1f:3f:40:78:
a6:5e:93:ba:ec:3a:2d:51:00:7b:9e:f3:5e:a7:5b:bd:68:f9:
29:0b:fc:76:57:a9:1f:0a:bc:69:52:4d:13:0d:7d:45:7f:18:
0f:b0:ed:fa:43:13:cc:71:63:82:b7:b9:be:12:bc:a7:fa:39:
88:a1:79:e1:5c:d3:d2:c4:59:bb:75:98:6d:6e:3b:b4:6b:38:
36:fe:34:c7:28:38:77:4f:8d:f7:b0:c0:95:c1:05:69:04:ba:
bf:84:60:d5:0c:41:64:32:51:1b:f8:82:35:82:ac:dd:ed:7d:
2e:92:20:29:77:16:e5:c1:f8:48:80:0d:4d:ac:ea:2c:ff:9d:
8d:4c:97:77:51:16:33:64:ea:eb:c3:0b:6a:d5:57:22:e5:4c:
1b:b1:73:53:ac:b8:17:2b:8a:c4:cb:c6:46:b8:a5:2b:51:6a:
b1:ed:5a:b6:85:48:0e:5d:ff:c3:31:14:9e:b5:30:15:5c:49:
ea:28:09:53:9b:8b:50:0e:01:be:f2:bc:99:14:24:fa:6b:be:
44:c2:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:48:10 2025 by rpki-client