Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: AX7ERgFdNt25qthnnDJ2cxRz/ulvSmDJyqwBazBZ4gQ=
Subject key identifier: C2:79:CC:92:15:2D:23:B5:EC:5E:4F:4C:61:22:96:19:03:AD:CE:8F
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 01976D06CAD328510BC968B442C208C05CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 06:00:50 +0000
Manifest this update: Sat 14 Jun 2025 06:00:50 +0000
Manifest next update: Sun 15 Jun 2025 06:00:50 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: MNK9dlLf4tDFWRI4GWmpku2jNXbWpQ5zNFhpK3Zl4GE=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:ca:d3:28:51:0b:c9:68:b4:42:c2:08:c0:5c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Jun 14 06:00:50 2025 GMT
Not After : Jun 15 06:00:50 2025 GMT
Subject: CN=c279cc92152d23b5ec5e4f4c6122961903adce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:08:ed:02:ea:d6:d9:6e:77:93:14:99:14:
ea:ef:62:e7:40:93:a8:56:8a:3e:f9:20:2b:9f:8d:
fd:29:fe:22:4b:35:bd:10:c6:2d:8e:8f:9a:98:6d:
b7:cb:d4:1b:a6:fd:e4:7a:09:ad:f6:12:5b:a8:8e:
89:f8:79:79:32:30:25:a4:c4:a8:de:b7:db:3c:38:
13:25:77:b4:9a:88:e2:ed:c5:68:34:5f:53:03:1e:
72:0b:69:61:50:9e:9f:8c:de:f4:dd:2d:2e:f2:5b:
f6:a2:3d:83:ac:f1:73:79:cc:1d:60:25:c2:a0:83:
f5:de:3a:19:28:24:34:65:23:75:b4:76:7e:dc:ac:
14:66:1a:76:e1:40:3f:35:6d:81:95:01:1a:0d:a9:
85:16:86:60:b2:6a:22:95:24:8b:43:c1:59:3b:97:
7f:48:36:05:3b:14:83:7f:78:19:ba:dc:42:69:50:
3f:62:db:65:65:3f:82:9f:1e:67:e6:fd:13:94:d7:
85:3c:c7:23:aa:d8:8b:63:0d:c2:22:a3:52:7b:6c:
f0:63:ac:df:98:a8:51:71:e0:8e:23:e7:6f:58:7c:
80:a2:7f:94:53:a9:66:eb:c0:3c:89:e6:30:17:9f:
3a:fa:e9:c2:14:6f:60:11:f3:93:ac:54:02:3b:86:
f2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:CC:92:15:2D:23:B5:EC:5E:4F:4C:61:22:96:19:03:AD:CE:8F
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:47:72:ad:22:85:b6:fa:86:44:e5:27:96:fe:88:fe:45:b2:
dd:d8:cf:f9:62:d5:09:14:be:39:b9:f2:89:3e:53:b9:40:8c:
1b:c9:c6:38:f3:29:d4:ae:c3:a2:f5:d8:c0:91:2b:eb:35:bc:
5b:1c:2c:bd:9c:e0:fd:81:36:10:ba:59:78:b0:26:ff:a4:4b:
78:6b:48:cc:67:2f:48:37:32:7e:58:14:8d:44:25:f4:3e:44:
e1:9b:20:1c:fb:95:7a:3f:85:c9:5d:fb:01:77:bc:2b:a5:a9:
e2:29:e2:3b:b7:c4:4d:56:df:b3:79:a1:08:08:72:05:91:cf:
a1:d3:80:e8:cc:3d:02:3b:c4:85:b2:a6:4e:6a:af:56:1c:5c:
df:92:d3:16:a9:69:82:f6:57:85:21:af:84:07:0d:69:34:d4:
c0:94:79:2a:40:c7:13:c6:e1:18:19:27:85:7e:1e:cd:2d:74:
30:35:a4:1e:6f:ca:dc:4d:3e:29:15:4d:5b:d9:4a:87:4a:de:
8f:37:d0:10:58:d6:9a:5c:e1:07:4d:1b:ec:a7:2c:10:77:f1:
3a:55:37:18:4d:14:a7:52:9a:2e:d7:b4:53:83:50:7d:dd:52:
d5:6f:0d:77:3b:19:f6:00:a3:20:62:d6:a5:89:ae:84:2b:6c:
39:b0:10:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBsrTKFELyWi0QsIIwFzwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YzkzYWIzNjRjODc4MzJlNzc3NjIyNmVlZTZjMTMxZGJl
MTUzYmIwHhcNMjUwNjE0MDYwMDUwWhcNMjUwNjE1MDYwMDUwWjAzMTEwLwYDVQQD
EyhjMjc5Y2M5MjE1MmQyM2I1ZWM1ZTRmNGM2MTIyOTYxOTAzYWRjZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX0I7QLq1tlud5MUmRTq72LnQJOo
Voo++SArn439Kf4iSzW9EMYtjo+amG23y9Qbpv3kegmt9hJbqI6J+Hl5MjAlpMSo
3rfbPDgTJXe0moji7cVoNF9TAx5yC2lhUJ6fjN703S0u8lv2oj2DrPFzecwdYCXC
oIP13joZKCQ0ZSN1tHZ+3KwUZhp24UA/NW2BlQEaDamFFoZgsmoilSSLQ8FZO5d/
SDYFOxSDf3gZutxCaVA/YttlZT+Cnx5n5v0TlNeFPMcjqtiLYw3CIqNSe2zwY6zf
mKhRceCOI+dvWHyAon+UU6lm68A8ieYwF586+unCFG9gEfOTrFQCO4byDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ5zJIVLSO17F5PTGEilhkDrc6PMB8GA1UdIwQY
MBaAFKTJOrNkyHgy53diJu7mwTHb4VO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEt
ZTI1MzNjZGQyNWFmLzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy80OWRmZWEtYzc4OS00NDAxLWEyNTEtZTI1MzNjZGQyNWFm
LzEvcE1rNnMyVEllRExuZDJJbTd1YkJNZHZoVTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0dyrSKF
tvqGROUnlv6I/kWy3djP+WLVCRS+ObnyiT5TuUCMG8nGOPMp1K7DovXYwJEr6zW8
WxwsvZzg/YE2ELpZeLAm/6RLeGtIzGcvSDcyflgUjUQl9D5E4ZsgHPuVej+FyV37
AXe8K6Wp4iniO7fETVbfs3mhCAhyBZHPodOA6Mw9AjvEhbKmTmqvVhxc35LTFqlp
gvZXhSGvhAcNaTTUwJR5KkDHE8bhGBknhX4ezS10MDWkHm/K3E0+KRVNW9lKh0re
jzfQEFjWmlzhB00b7KcsEHfxOlU3GE0Up1KaLte0U4NQfd1S1W8NdzsZ9gCjIGLW
pYmuhCtsObAQkg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:04 2025 by rpki-client