Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: Sq4RjAbkodUY4YFBYbTlgDG2yqPPXcQwWBWM1uV+AvI=
Subject key identifier: 5D:D0:70:91:F3:49:24:84:76:0C:32:83:57:00:87:A7:7A:A4:9E:5F
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 0198D54E9EC357804BB433F0F7C91DAD4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0900
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: kZT3vNbYaPhCpR3q3/dvH9HzAcB3jPlgobQXFFiMGI8=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9e:c3:57:80:4b:b4:33:f0:f7:c9:1d:ad:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=5dd07091f3492484760c3283570087a77aa49e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:42:f7:08:84:90:5d:bf:37:76:e1:ea:a0:
4e:2d:19:1d:70:30:44:1b:59:6b:6c:a3:11:ca:da:
28:c9:d7:df:e8:e2:65:03:73:0f:cd:65:0f:5f:2c:
33:37:d1:ae:14:83:2b:c5:4b:25:95:6f:83:5e:a7:
3c:d7:cd:e8:52:f6:8c:36:73:cd:13:54:47:b6:5b:
81:70:ab:21:a3:d2:f1:39:a2:2c:f4:b3:27:c8:e4:
a9:c8:21:95:21:b7:66:92:6e:a3:11:ee:e8:8e:80:
ad:58:cb:b0:bb:5a:f2:ac:8d:b4:b2:c8:96:d8:19:
f8:aa:5d:2e:93:02:22:c9:ef:86:3b:56:3b:cc:5c:
51:b7:51:d7:57:d7:04:62:84:d0:f6:03:3c:f5:40:
54:6b:1a:3a:54:c8:9f:4b:40:58:62:7c:f6:12:d4:
8e:53:77:74:0d:77:fa:fe:c2:f4:5f:92:bd:3b:d7:
ee:ce:e6:05:ac:e2:fc:44:76:43:a3:08:75:4a:76:
c2:8f:29:3c:3a:ae:16:3a:fd:ae:23:e0:c8:8e:f9:
f5:b4:bc:5c:68:17:01:a9:eb:dd:86:06:17:de:87:
fd:cb:c4:28:fc:c9:0a:12:b8:c2:ac:5c:a1:5b:06:
5f:2b:08:d4:3b:bb:6e:9e:6e:ce:27:9b:cc:a6:d6:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:70:91:F3:49:24:84:76:0C:32:83:57:00:87:A7:7A:A4:9E:5F
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:51:20:22:4f:05:bb:7d:d7:ce:49:56:7b:97:98:cf:87:f0:
da:9c:c7:e8:c4:41:91:3a:22:26:7d:8b:ce:0a:90:77:e6:19:
b5:e9:c7:cd:52:5c:76:da:b7:8f:8a:b8:58:49:e2:f6:46:12:
70:ba:7f:0a:d9:7c:a5:b5:81:64:db:33:79:8b:0a:c8:d4:8c:
9e:4c:90:47:d4:e0:95:32:6a:af:08:77:99:71:3c:d2:ef:fe:
f9:7c:a2:8c:71:da:df:f1:d3:7c:06:f1:df:bd:ce:33:c4:ba:
ea:4a:d9:1d:a9:05:1d:d3:71:95:75:f4:10:9f:b1:1d:16:0b:
77:5c:26:d1:ac:7a:be:d3:6a:84:d4:90:89:5f:a9:41:4a:62:
d1:ba:e7:59:25:9c:20:66:db:77:6b:ae:b6:85:0f:41:4e:d5:
18:68:c0:76:11:00:b7:9f:8b:da:ae:40:02:95:32:d5:28:11:
4c:e9:75:f5:56:58:58:1a:45:34:07:72:b9:71:1a:21:19:fa:
fe:b8:dc:d7:2a:3e:56:84:f0:2d:8b:e7:59:b7:93:ac:71:dd:
0e:cd:e3:37:f8:aa:28:ad:3f:b3:5c:b3:3c:01:1b:8b:6c:a6:
26:22:2c:6e:55:94:22:2f:3f:b1:b8:6b:23:b6:0e:05:47:c6:
14:db:4c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:12 2025 by rpki-client