Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: ox+VOejyGEqiZDrSpU1L+D6URMaXoOLuxXqPPiaghRI=
Subject key identifier: 8A:76:59:DC:20:88:C9:95:29:71:75:DF:48:8E:8C:D5:A3:9A:C5:E1
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0197B96A73D2CCFD353E024295097CA81322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 086D
Signing time: Sun 29 Jun 2025 02:00:50 +0000
Manifest this update: Sun 29 Jun 2025 02:00:50 +0000
Manifest next update: Mon 30 Jun 2025 02:00:50 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: Ig+dxDWyMM+g3qrGag4+loE4Zpdf7kr8qIyiSaGyGOM=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:73:d2:cc:fd:35:3e:02:42:95:09:7c:a8:13:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jun 29 02:00:50 2025 GMT
Not After : Jun 30 02:00:50 2025 GMT
Subject: CN=8a7659dc2088c995297175df488e8cd5a39ac5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:19:ef:29:c5:12:10:7e:7f:f5:19:64:a1:77:
06:75:0c:ef:0f:69:a3:cb:4f:af:f8:ed:97:30:c9:
71:86:4f:1c:a7:1a:e8:79:07:21:f6:73:72:fc:2d:
c6:f6:71:07:d1:2e:27:3a:57:df:07:2a:fd:54:42:
9f:81:52:da:0b:d4:f2:eb:a7:cf:27:0e:1d:b6:2e:
7c:76:70:da:c9:78:00:3f:7d:f7:32:26:0b:57:b4:
e5:46:fa:91:5c:48:66:df:6c:6a:f3:49:b2:e4:ec:
b2:53:22:51:e4:2b:a3:cf:43:18:93:e2:91:9f:ca:
17:53:36:67:1f:c5:c8:1d:db:0b:85:4c:f8:49:8e:
d1:8f:69:ba:ce:80:e3:16:48:48:79:b6:ac:6d:e7:
95:47:ae:ba:69:27:72:6b:78:b7:5a:20:17:40:f4:
25:e7:c9:05:3a:22:af:13:b1:8c:37:4c:dc:74:16:
76:ef:9f:2d:48:3b:4d:96:49:f1:7d:ca:f0:ce:47:
e7:6a:41:0c:e8:b2:f6:55:02:f1:ae:a0:c1:4c:d8:
99:c4:9f:0e:d5:e8:91:34:4b:63:9c:f7:92:53:bb:
36:bf:59:85:38:e4:44:2b:67:1c:49:b6:5a:a4:63:
2e:92:01:94:51:dd:b3:44:ee:1f:23:1d:78:6b:5c:
d8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:59:DC:20:88:C9:95:29:71:75:DF:48:8E:8C:D5:A3:9A:C5:E1
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:30:c5:04:ec:b1:96:00:ff:cd:12:c6:f5:2d:5e:eb:42:
91:7a:be:7d:29:8f:4a:e0:b6:4e:70:67:38:fc:85:30:b4:ed:
d6:17:00:45:62:0e:41:80:3f:f4:ec:79:b1:93:02:d1:c9:82:
76:3f:d7:e7:7b:7c:b9:17:36:32:33:78:f5:5d:85:c8:58:e0:
18:6c:3a:9d:63:a1:98:27:6a:49:92:51:66:03:91:5b:7b:ea:
4f:9e:57:84:35:79:23:e3:20:4f:ed:1a:ff:a1:6f:d6:2b:45:
23:bd:53:1f:77:1c:ea:85:0a:2f:ea:80:8f:34:57:3f:df:2a:
80:1f:49:af:97:8c:a4:ae:d4:50:e1:54:ef:8e:74:7a:57:f3:
92:4c:36:8c:57:71:36:12:8e:42:a8:d2:40:d0:ae:a7:76:13:
b3:0b:1c:43:81:f9:ac:b9:b9:27:09:0d:e6:58:c2:cd:d6:01:
70:46:de:4c:01:c5:2f:b1:5f:d3:24:e2:aa:7f:0b:a0:71:d6:
35:52:db:de:7e:bf:dc:20:89:15:05:ec:20:8d:41:8e:bd:ae:
a9:33:cb:02:1b:69:bd:90:03:d3:72:79:ce:2a:11:dd:5e:e1:
f1:7f:e6:b8:28:8f:ef:74:11:63:f2:53:7d:7a:16:a3:8b:18:
47:8e:4d:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5anPSzP01PgJClQl8qBMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGNjZDI1MDQ3YjljYjhiNmYwMTg2N2NkZWRlODI1NmY3
MzRhMjMwHhcNMjUwNjI5MDIwMDUwWhcNMjUwNjMwMDIwMDUwWjAzMTEwLwYDVQQD
Eyg4YTc2NTlkYzIwODhjOTk1Mjk3MTc1ZGY0ODhlOGNkNWEzOWFjNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xnvKcUSEH5/9RlkoXcGdQzvD2mj
y0+v+O2XMMlxhk8cpxroeQch9nNy/C3G9nEH0S4nOlffByr9VEKfgVLaC9Ty66fP
Jw4dti58dnDayXgAP333MiYLV7TlRvqRXEhm32xq80my5OyyUyJR5Cujz0MYk+KR
n8oXUzZnH8XIHdsLhUz4SY7Rj2m6zoDjFkhIebasbeeVR666aSdya3i3WiAXQPQl
58kFOiKvE7GMN0zcdBZ2758tSDtNlknxfcrwzkfnakEM6LL2VQLxrqDBTNiZxJ8O
1eiRNEtjnPeSU7s2v1mFOOREK2ccSbZapGMukgGUUd2zRO4fIx14a1zYZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIp2WdwgiMmVKXF130iOjNWjmsXhMB8GA1UdIwQY
MBaAFD4MzSUEe5y4tvAYZ83t6CVvc0ojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjkt
OWNkMDE3MjQzYTA2LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC85Yzg2MzEtZGM2YS00NWMyLWJjZjktOWNkMDE3MjQzYTA2
LzEvUGd6TkpRUjduTGkyOEJobnplM29KVzl6U2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg0wwxQTs
sZYA/80SxvUtXutCkXq+fSmPSuC2TnBnOPyFMLTt1hcARWIOQYA/9Ox5sZMC0cmC
dj/X53t8uRc2MjN49V2FyFjgGGw6nWOhmCdqSZJRZgORW3vqT55XhDV5I+MgT+0a
/6Fv1itFI71TH3cc6oUKL+qAjzRXP98qgB9Jr5eMpK7UUOFU7450elfzkkw2jFdx
NhKOQqjSQNCup3YTswscQ4H5rLm5JwkN5ljCzdYBcEbeTAHFL7Ff0yTiqn8LoHHW
NVLb3n6/3CCJFQXsII1Bjr2uqTPLAhtpvZAD03J5zioR3V7h8X/muCiP73QRY/JT
fXoWo4sYR45Ncw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:41:21 2025 by rpki-client