Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: ieMN1rUJz3DdB1mvDLnIWjCiKlZ2xvWkIHoLwnz3OUE=
Subject key identifier: B4:48:84:27:93:9A:64:C2:6B:73:09:6B:49:E6:93:A9:EC:A8:F7:F1
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 019A01480F639AB58E4DBF547C9909E4559E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 0734
Signing time: Mon 20 Oct 2025 11:01:30 +0000
Manifest this update: Mon 20 Oct 2025 11:01:30 +0000
Manifest next update: Tue 21 Oct 2025 11:01:30 +0000
Files and hashes: 1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: i+Y5u9/ATelDwHi26z7Fdb84f0s2FVRl/uXHigfjmec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:0f:63:9a:b5:8e:4d:bf:54:7c:99:09:e4:55:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Oct 20 11:01:30 2025 GMT
Not After : Oct 21 11:01:30 2025 GMT
Subject: CN=b4488427939a64c26b73096b49e693a9eca8f7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:8b:54:2d:1b:c1:ef:02:fc:1c:14:af:06:
58:f7:bc:41:64:3c:48:b1:01:d0:8f:6e:82:86:12:
90:af:09:71:3d:36:13:8a:8b:5b:39:15:71:de:9f:
63:0e:fc:d0:f8:de:32:0f:ec:87:b2:6b:86:98:b4:
40:f7:f5:0f:20:ca:80:11:07:6e:70:7e:80:8a:b3:
c0:f4:dd:c1:b8:89:7d:55:b0:76:fd:ed:09:25:d7:
7d:60:75:f9:89:b2:57:d1:66:cf:85:66:a9:72:3e:
9f:ab:6e:5b:31:16:d2:2d:a1:ea:a1:51:19:8e:f7:
9b:19:3f:d7:3c:ef:99:22:c0:3a:a7:16:3b:bc:7b:
3e:7d:7d:81:84:fc:76:04:8b:d8:6c:21:3a:47:2b:
91:c1:ba:d6:a1:89:5d:af:f0:9f:4f:8f:04:95:9e:
f5:37:13:96:aa:5d:bb:8d:24:0b:5f:1f:3c:5f:26:
b7:58:e5:b1:b1:99:ce:66:18:01:08:49:a8:f2:ff:
2c:01:1f:33:9c:5a:6b:fb:85:cb:90:2e:09:64:b6:
e0:5b:75:4b:67:41:58:0a:86:56:2a:1e:66:cf:65:
3d:c8:19:c3:4b:ae:51:30:8c:bb:1d:6c:74:44:dd:
ce:6c:95:d0:e2:7b:41:39:75:94:f6:66:16:d3:6d:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:84:27:93:9A:64:C2:6B:73:09:6B:49:E6:93:A9:EC:A8:F7:F1
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b8:79:7d:b5:76:10:9f:28:f1:88:8f:f3:e2:45:32:28:57:
49:3a:91:bb:71:66:bc:4e:41:9e:f7:c7:3a:b3:59:d2:85:e7:
d3:03:1d:7a:6a:1f:31:a2:97:b1:47:12:53:87:5c:ae:a3:c1:
d1:b8:e3:1e:81:6d:50:0d:66:48:ab:82:65:5c:a1:93:66:74:
f6:24:15:6f:27:44:41:3f:19:bd:80:3e:19:a7:8f:2f:44:0e:
5b:ee:f5:b4:16:00:70:e2:6d:b8:a3:0b:01:08:8d:36:05:86:
c6:8b:81:47:81:a0:6b:fe:6a:ea:8d:c2:f9:1f:f4:f2:cf:74:
88:50:8a:84:e2:4a:ff:2c:a6:0a:6a:17:91:5c:8b:f8:be:7f:
99:94:9b:65:a0:ac:c7:f7:58:1a:46:ef:2e:66:7d:55:88:7a:
95:5f:e4:f1:a7:92:87:e9:a7:7a:d8:70:f7:3a:d7:96:0e:49:
10:0c:79:9c:42:c9:a9:3f:aa:2b:f3:07:6f:0a:7c:85:cd:86:
cb:a8:f9:6c:3e:36:c6:74:3d:82:8d:e0:f3:6a:ad:96:b9:39:
ac:29:3d:95:4c:49:2f:85:fd:8f:07:18:bc:74:fd:84:9b:75:
be:a5:37:fb:83:1e:20:ef:c1:95:00:23:99:97:e6:63:70:57:
f9:f3:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:56 2025 by rpki-client