Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
File: pBM1JPJKSooh1GwGwQJfQPNK0no.mft (raw, json)
Hash identifier: h+rJ6NAhI+RXUnzOlPLb4Q4sUvxFDkUmP7A37fdOE5E=
Subject key identifier: 8D:AC:77:40:60:6B:83:7C:90:B4:65:F3:5A:DA:AB:1A:E8:4D:C6:FA
Authority key identifier: A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
Certificate issuer: /CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Certificate serial: 019896A5ED2927CFA18438CFFA7D86A67DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:01:52 +0000
Manifest this update: Mon 11 Aug 2025 01:01:52 +0000
Manifest next update: Tue 12 Aug 2025 01:01:52 +0000
Files and hashes: 1: hDhJ2OmuACmi7Q_Pysi0Uy5-CBg.roa (hash: IpPR6/fjcqfY1Wb9zSV7h6VOKADAG8xAFr0zyQ+Kgzs=)
2: pBM1JPJKSooh1GwGwQJfQPNK0no.crl (hash: KwefYoKAX4wn6NrhxzjA71xQAnt5iVVuGkbGtXiDaJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:ed:29:27:cf:a1:84:38:cf:fa:7d:86:a6:7d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4133524f24a4a8a21d46c06c1025f40f34ad27a
Validity
Not Before: Aug 11 01:01:52 2025 GMT
Not After : Aug 12 01:01:52 2025 GMT
Subject: CN=8dac7740606b837c90b465f35adaab1ae84dc6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fe:bd:b7:8a:e9:7c:08:a7:f0:14:bc:48:2c:
60:dd:2d:ad:cc:70:b4:0d:2f:44:8d:7b:ce:c8:71:
d5:aa:97:5f:5a:cb:95:8a:96:c4:3c:7b:fc:2d:06:
02:3a:62:ea:71:72:73:a9:9f:29:64:1c:cb:bb:77:
03:de:97:83:fc:10:e2:67:f6:44:4e:7f:8a:54:b0:
fc:92:d9:54:a4:c9:01:50:5f:d9:48:b5:39:b2:24:
d6:e3:72:c1:4e:23:64:d0:09:25:e4:87:cb:26:f8:
7d:a1:46:7b:36:77:56:18:89:69:96:36:4a:bc:e2:
86:49:12:9e:1a:72:4f:dc:0a:66:f4:37:4d:0f:6e:
57:5d:da:57:5c:28:ab:67:84:80:71:d0:b1:06:ff:
cc:3a:7f:13:f6:8e:fb:d8:34:9d:3d:2e:53:96:d0:
c6:00:29:11:db:b0:73:43:7c:a3:c3:63:df:9c:13:
e3:78:19:26:ff:18:e0:32:df:fe:31:f8:47:0f:fa:
eb:b9:ca:fb:d4:36:e2:8b:95:bc:63:38:48:68:3b:
d4:d6:be:95:f3:7c:f7:f7:76:25:01:1c:ca:55:7b:
0e:8f:c1:32:51:19:82:86:f8:26:69:14:11:36:14:
78:03:4f:73:58:3e:77:90:70:9e:7b:dd:1c:9b:96:
58:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AC:77:40:60:6B:83:7C:90:B4:65:F3:5A:DA:AB:1A:E8:4D:C6:FA
X509v3 Authority Key Identifier:
keyid:A4:13:35:24:F2:4A:4A:8A:21:D4:6C:06:C1:02:5F:40:F3:4A:D2:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pBM1JPJKSooh1GwGwQJfQPNK0no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/3c24be-266e-4522-97d6-7d9e62afc444/1/pBM1JPJKSooh1GwGwQJfQPNK0no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3c:f1:e9:cf:38:94:ac:20:fe:a9:60:92:6e:e2:ab:91:16:
ed:33:88:72:ae:72:ec:38:56:3a:e1:b8:0e:06:b7:83:22:ef:
bb:ad:a1:46:d4:dc:21:70:ba:37:25:5d:f3:dc:d5:fb:7e:49:
9d:78:0d:9c:dc:46:b6:21:2a:86:05:08:80:57:03:96:a1:95:
f5:e2:56:1c:57:7e:d9:2a:e5:88:56:64:34:3d:91:e5:4a:7a:
61:1e:fd:94:45:a5:db:a1:70:ac:e0:5e:4d:fd:89:38:e4:69:
63:03:7d:8a:e3:1b:72:88:67:06:7c:11:a6:20:7c:31:70:5b:
dd:ea:1f:e6:34:84:c9:a1:66:ba:28:20:b2:53:de:3c:f7:20:
4d:83:d7:4f:b7:f0:68:74:fd:39:fe:7d:22:dc:41:bc:b3:99:
aa:11:ed:f7:37:ba:26:39:8a:39:c2:f7:4a:fb:fc:56:e1:a8:
12:ea:68:f6:3f:b8:20:9a:34:25:e8:42:a8:73:e3:41:bd:ec:
83:24:69:b3:2d:b2:a5:73:5c:b9:ed:7f:1f:40:41:44:73:b5:
a3:a2:8d:a5:6e:a1:c9:1f:69:4b:8a:cb:88:3d:8a:ba:2a:87:
e1:7c:7d:23:74:d9:c5:44:b8:1c:bc:a4:34:fa:75:b1:b5:75:
d6:9d:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:14:20 2025 by rpki-client