Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: k50cuKknhLVDfXu1LhiNIqoEDu7m4UK0JVanZUAUF2Y=
Subject key identifier: B4:FA:A3:46:2E:B9:1D:74:A9:E2:26:28:D0:0B:24:7C:6E:39:BC:54
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 0197B632C866B1BAF6A6016F149999FD4226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0496
Signing time: Sat 28 Jun 2025 11:01:10 +0000
Manifest this update: Sat 28 Jun 2025 11:01:10 +0000
Manifest next update: Sun 29 Jun 2025 11:01:10 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: pSc2ZAYxHg5N3jgjMQu48ix/WTqsWsKwQMpqwSyY3ME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:c8:66:b1:ba:f6:a6:01:6f:14:99:99:fd:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Jun 28 11:01:10 2025 GMT
Not After : Jun 29 11:01:10 2025 GMT
Subject: CN=b4faa3462eb91d74a9e22628d00b247c6e39bc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:0d:64:8d:12:0b:c8:73:81:2a:94:04:a5:
d1:02:e3:a9:2c:65:54:07:3f:05:8a:33:ad:e5:40:
3d:59:97:a4:86:a6:6f:94:11:0c:0b:42:e3:4a:ba:
15:d2:fb:ea:0e:0d:77:90:05:5e:24:01:d4:85:9f:
0d:6e:ae:67:4b:f8:5f:93:a0:bb:8a:e8:63:67:d3:
21:84:1c:e5:4a:42:84:81:e7:32:9c:6e:66:60:ff:
ea:56:e3:29:2e:0d:e2:f4:49:45:80:79:77:c2:cb:
31:65:48:25:b9:58:e9:a3:10:87:e0:be:82:27:ed:
ba:70:4f:1f:91:f6:fc:c2:ac:31:ea:3b:ff:4c:e0:
96:29:be:1d:33:5f:e6:03:7e:f4:15:96:e7:f0:c0:
5e:0c:f0:35:bc:d9:62:4d:d2:f5:5c:7f:8a:5a:9e:
79:69:e5:49:df:64:2e:33:56:d0:aa:42:16:e1:fb:
da:46:68:5e:2c:68:40:1d:80:77:67:47:fa:7d:28:
f1:cc:08:a8:24:d2:58:96:1d:b2:7d:4c:97:1e:ab:
8a:44:18:3f:ca:07:36:8c:51:b1:37:d5:0a:a4:2d:
ff:90:38:fa:35:00:bd:4f:7c:82:4c:d2:fa:76:8a:
75:76:af:45:e7:fe:fc:77:9c:3c:36:12:25:96:cf:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FA:A3:46:2E:B9:1D:74:A9:E2:26:28:D0:0B:24:7C:6E:39:BC:54
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f0:e2:eb:55:8e:ae:79:d7:00:98:49:f0:42:bc:ae:72:f5:
26:1d:49:b7:d8:01:f3:a4:e3:e2:f1:7a:6a:0b:d9:8d:28:96:
90:58:68:48:90:d7:fa:1b:04:7f:c1:cc:b8:e0:c6:2d:a0:46:
b7:c9:f5:ef:14:fa:de:af:43:33:7a:47:92:f5:30:fe:a9:b6:
26:f7:58:a0:ef:e0:42:5c:35:ca:14:b8:d1:0d:7b:7b:c2:af:
23:e3:8f:db:fd:5d:72:0a:59:d0:e5:93:96:fe:a8:96:e9:db:
92:bb:7f:55:0a:27:0a:a7:55:d8:52:ec:0d:2d:a4:25:23:e4:
6b:fe:dd:66:c8:31:c2:61:61:5f:20:d0:4f:8f:77:d5:9d:e4:
eb:c5:ff:5c:76:a0:93:57:66:14:ef:51:d6:53:ba:0f:c3:07:
83:9b:e1:2f:7b:d3:06:87:95:97:76:60:91:bf:3c:88:f0:47:
bf:80:de:2b:9e:b3:84:ce:50:92:25:4f:56:80:fb:71:33:a9:
12:e9:ac:77:9a:fe:d1:d8:a2:de:17:21:19:07:9f:f1:79:26:
43:11:85:a5:cf:34:4b:89:d1:87:cc:f9:38:e5:ea:4e:eb:9d:
25:10:b1:51:19:b9:3a:96:71:83:01:06:e5:22:9f:a8:bf:a6:
64:94:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:25 2025 by rpki-client