Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: NIO8RMt6HM9KuJ83epVmgN2adb78lb9l9kqMIFfrVhg=
Subject key identifier: AB:B1:D5:D9:1C:F2:86:D1:7A:1E:43:34:88:64:60:88:EE:8C:9B:F4
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 0199FCFD5F73C6EC33514A5588E85F64401A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 159A
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: 59caEYvuJYIrWzCOVywJkMuIbt+hu5sCdSHngBsVgc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:5f:73:c6:ec:33:51:4a:55:88:e8:5f:64:40:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=abb1d5d91cf286d17a1e433488646088ee8c9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:5a:48:7e:b4:b6:eb:1f:c1:fb:57:87:6b:
86:82:06:50:41:0b:42:14:29:90:ef:1f:99:22:8c:
36:fe:9f:86:10:e7:7f:ef:73:ab:12:17:b3:a3:04:
55:c3:50:7b:12:49:2d:98:5c:0c:13:78:15:d4:5d:
c6:60:d5:fc:7d:b0:d7:5f:11:f6:df:e4:db:32:dd:
2a:ef:b9:72:6e:f0:47:4e:8b:83:59:42:f1:18:fc:
2e:fc:7c:37:f5:87:07:6b:5c:89:6f:74:89:fa:f9:
76:e0:3b:53:a4:db:cf:3a:44:93:b2:01:b9:2a:19:
88:14:fc:85:93:be:15:54:b7:c3:4a:d5:20:f7:8f:
37:fa:b8:fd:47:cb:e4:0a:54:35:8a:e4:d5:00:ce:
44:70:af:79:79:ca:13:42:1c:32:7f:2e:74:a4:77:
53:ab:ec:14:df:08:0f:4f:c8:b9:ba:73:c4:66:4a:
56:76:09:7c:78:26:50:93:1e:5e:a1:97:18:95:a1:
5f:2b:ad:fe:49:f8:31:cc:3d:8b:4b:d6:a3:28:5f:
33:97:eb:d0:a1:50:0c:d0:3a:1f:e6:0e:27:9a:47:
e2:3d:d5:31:1f:93:cb:f7:e6:70:88:63:e6:7e:6d:
70:63:59:d7:55:38:a5:3c:7e:3f:6d:1b:5a:9a:77:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B1:D5:D9:1C:F2:86:D1:7A:1E:43:34:88:64:60:88:EE:8C:9B:F4
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c5:2f:ec:34:7c:22:bd:6c:9d:d4:6d:7a:76:37:3b:e0:72:
18:78:e2:c1:eb:29:09:1d:5e:cd:c3:62:a1:05:9b:03:3f:2d:
b3:e7:77:8f:22:32:07:a0:8a:4f:55:9d:d8:59:69:fd:8a:dc:
70:a3:9e:87:a1:71:b8:a2:69:42:22:02:2a:ca:ab:d6:05:6e:
fc:d6:1d:26:9c:9c:9f:59:b8:11:cd:36:07:93:9f:5c:7f:c8:
b0:53:43:0e:09:d4:c7:de:3c:01:a4:3c:c0:58:c0:c5:96:fb:
8e:64:f8:14:6c:51:34:01:ac:b3:5a:ca:4c:ff:86:f0:d1:a0:
34:32:ab:18:da:0a:f6:1e:1e:df:65:a0:c7:51:f1:af:4d:fc:
2e:79:69:b4:b0:07:9a:b6:7e:97:ec:af:a3:8f:97:d8:54:63:
a7:a2:35:6b:ed:46:08:8f:07:a7:00:5e:61:26:ca:2e:9f:e6:
94:8b:6b:34:0d:c9:92:d2:49:e5:d0:8c:cd:9e:41:9a:c0:85:
ae:17:71:c6:ea:67:bd:70:99:10:a8:60:73:01:13:61:25:e8:
82:f8:d7:68:27:b7:61:b4:ff:22:e2:57:3b:c8:17:2a:71:3b:
2d:c5:27:11:82:36:ec:c0:24:9f:bc:69:62:09:87:32:d1:e4:
d2:42:f2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:16:03 2025 by rpki-client