Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: Zp5Dgh+jQBVBMmkyyTpqDEl3La2zmyASR448wAdMVc4=
Subject key identifier: A4:29:19:FA:C1:68:10:76:C2:9F:B0:13:B2:50:72:A1:A0:89:9D:6B
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 0198D65FA889A5577D1D39BB7FAE67E7F2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 05DF
Signing time: Sat 23 Aug 2025 10:00:49 +0000
Manifest this update: Sat 23 Aug 2025 10:00:49 +0000
Manifest next update: Sun 24 Aug 2025 10:00:49 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: Pb+K20fxBmwXwVkD7d1b2srb7rE7rJHC6fnP5bkuKPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:a8:89:a5:57:7d:1d:39:bb:7f:ae:67:e7:f2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Aug 23 10:00:49 2025 GMT
Not After : Aug 24 10:00:49 2025 GMT
Subject: CN=a42919fac1681076c29fb013b25072a1a0899d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:64:23:33:3d:3c:31:83:70:0e:d9:f6:66:b1:
c2:a6:56:15:be:29:e8:0f:35:4c:3e:77:de:61:c6:
db:e6:1e:4c:b5:a0:46:a2:21:ae:6d:ec:ed:cc:12:
2f:cc:9b:f8:97:d0:2e:b2:98:8f:93:3f:e9:18:d0:
6a:31:ac:f0:1c:b1:65:cb:6b:44:67:76:e4:98:45:
b7:4c:4e:ec:dc:f3:e1:d5:d0:e3:61:d1:51:40:93:
03:41:63:87:92:07:3d:5a:3f:6a:2e:d6:d5:c7:f5:
c6:e9:93:ab:49:08:7f:4c:f3:da:33:6e:02:63:db:
24:cc:76:ce:6a:11:35:a1:96:7c:4d:dc:c8:31:f0:
da:d6:2d:b8:c4:f5:57:fb:9c:d5:4a:08:79:40:91:
67:3c:26:c3:bf:ea:49:91:78:1d:11:e5:55:a8:30:
70:ab:b0:ce:0e:22:c7:a9:c2:af:2f:4d:be:0f:eb:
1c:0b:99:52:fd:45:78:f1:69:0b:c5:b9:d1:3e:a6:
36:3a:73:29:49:bb:2b:ca:c1:a4:da:52:ba:f0:91:
ed:db:cf:58:23:52:c4:dd:6c:30:1d:a5:c1:43:5c:
8b:84:59:1c:8c:1b:49:b6:b1:7a:a3:49:65:47:53:
73:7c:0c:d4:be:bf:45:33:cb:71:b6:7e:ea:80:42:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:19:FA:C1:68:10:76:C2:9F:B0:13:B2:50:72:A1:A0:89:9D:6B
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ec:47:f2:11:10:1c:c6:b0:35:88:7a:2b:7b:54:ff:7c:28:
36:9c:ec:91:f5:12:ef:d1:e0:e0:5c:45:b0:c6:e8:ea:17:e1:
3d:5f:20:a2:83:82:ea:70:d1:41:ea:cc:8f:5a:41:c2:fd:92:
d4:61:7b:5d:a6:15:ac:d2:87:08:8a:c0:b8:dc:d9:19:9c:06:
3d:91:46:4f:e8:de:13:cb:39:fc:87:f1:96:a0:e6:a4:b1:4a:
23:7f:f2:d7:7c:72:b9:e4:b3:1c:93:cc:e5:aa:d6:87:00:26:
cb:0e:9d:64:ab:6a:e0:20:c2:ec:e0:fa:8c:b3:5a:9c:a0:ad:
16:6e:48:90:54:04:a8:3f:f3:0b:58:3a:17:46:b7:a2:73:3e:
dc:0b:6d:5d:2a:33:5e:72:e0:55:7b:fd:1f:78:64:cf:a2:b6:
cb:01:a1:7f:56:a5:d0:b5:1d:1b:73:9a:4e:fb:d1:43:b4:76:
53:80:fc:35:d1:3d:d6:a5:f2:b3:36:cb:14:5d:19:41:e7:2a:
4d:24:90:58:ab:22:e1:32:68:ff:9e:ea:cc:1e:70:95:c0:24:
b1:3d:99:1e:9a:2e:32:6c:97:75:f8:b9:32:b5:75:08:1b:db:
2a:16:76:de:a0:52:6d:ef:ea:61:ed:d8:b5:87:a4:71:15:5e:
6f:b8:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:55:19 2025 by rpki-client