Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: nR65HqLR2Xpp326V4A8zjb+JXSZdFS+Z7nPFR+gFcr8=
Subject key identifier: C7:B6:E0:0D:AD:C0:69:B4:A8:94:E1:7D:55:11:AB:9C:29:C9:5E:B7
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 0198D5F1DAC19105DBE7708A5EDF590A47E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 052B
Signing time: Sat 23 Aug 2025 08:00:53 +0000
Manifest this update: Sat 23 Aug 2025 08:00:53 +0000
Manifest next update: Sun 24 Aug 2025 08:00:53 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: rjDWARKyd/9I3dIOgziqNkhNOyi8xOEFjoxjJPZFqGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:da:c1:91:05:db:e7:70:8a:5e:df:59:0a:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Aug 23 08:00:53 2025 GMT
Not After : Aug 24 08:00:53 2025 GMT
Subject: CN=c7b6e00dadc069b4a894e17d5511ab9c29c95eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:1f:41:5d:6c:73:95:ce:a2:74:f8:78:4e:
52:fa:0f:8d:f6:7e:6e:51:e4:16:22:3f:a5:bd:04:
89:d4:2b:5f:cf:48:9e:a7:44:69:6f:76:84:d2:ec:
53:31:9f:fc:2a:77:08:f0:0f:77:62:0c:d4:bf:8d:
e4:8b:ce:ad:a2:37:89:a0:47:e3:e3:a5:02:f6:ba:
db:0c:0f:4f:02:0e:28:a2:a3:24:e8:0a:e8:10:84:
a1:e3:e1:a5:11:05:e4:27:8a:ec:fc:00:28:99:f3:
7c:0c:cf:8a:7c:9d:20:d0:a9:a2:84:0a:1a:59:2a:
89:1a:46:d4:51:43:8b:dd:04:f8:83:05:70:18:8a:
30:05:8b:18:32:c1:28:87:67:e7:da:4b:1e:c4:b5:
af:3e:bd:d2:56:fb:6e:11:83:18:15:21:a7:32:a7:
ee:ee:bb:51:8c:56:f5:71:69:9e:68:78:c3:0e:2c:
c8:1c:ba:45:07:26:7d:cb:4b:66:d2:be:73:c5:d8:
a9:97:fa:46:e5:19:b3:c8:18:c5:a9:e1:12:b9:61:
42:c5:99:6a:40:82:9c:e1:ea:33:5d:1f:55:66:2f:
20:5a:84:3f:ba:70:ca:4d:b2:a9:b2:ab:d5:39:2e:
4d:5d:74:87:79:de:ed:ea:fc:ef:5c:4a:6d:ba:2c:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B6:E0:0D:AD:C0:69:B4:A8:94:E1:7D:55:11:AB:9C:29:C9:5E:B7
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:99:65:e8:ea:bc:27:4d:a3:c2:4b:ae:70:7c:07:95:85:
7f:28:e4:e7:55:4c:31:b8:4d:f1:af:fe:2a:6e:a7:0e:47:bd:
bb:02:b6:e0:5d:40:57:d8:fa:4f:57:d1:bd:49:71:31:57:bd:
4f:07:b0:76:00:7b:ec:f3:b7:bc:a8:61:22:97:c4:5b:c4:04:
71:aa:5e:c3:3c:1c:b1:93:66:00:62:bf:4a:a2:2a:69:ab:a7:
73:dd:ac:5e:96:5e:74:b0:d0:71:ed:3f:53:42:90:0e:1e:1a:
a3:52:42:a1:41:98:3d:0b:ae:98:6f:69:3b:37:49:0c:9b:e4:
5f:25:a0:7a:5e:dd:3b:6c:54:e0:63:48:73:1f:ae:37:a7:55:
ff:89:d1:f0:f7:d4:29:64:3e:aa:14:8c:9c:10:81:31:71:85:
35:58:29:fa:0e:c6:8a:7a:08:7f:15:9a:d9:0a:1c:88:1b:31:
da:85:8d:ca:e4:59:ea:80:33:b1:3e:f4:2b:39:53:8d:32:1f:
a6:77:80:78:be:40:73:a2:a2:d6:00:b2:38:15:ce:d7:36:d1:
50:63:ea:f2:b0:d9:32:26:8e:4c:31:7a:31:4a:32:11:00:c1:
36:4c:5c:77:fb:f9:eb:0f:be:e4:78:89:c7:36:8c:45:1d:1d:
13:98:9e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:45 2025 by rpki-client