Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: Z3Uhi7+Qj9i9N1psJ+FCjJ7uShpl3hzXtrN4vc/uVxo=
Subject key identifier: 06:C7:8C:7A:30:03:37:EE:68:EA:45:5C:00:5C:F3:1C:2F:06:86:BA
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 0199FBEB7F2ACF010EDB005E155F8812AADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 09FA
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: gK0/QzN7Qkuk0nOsk3a0yU3/IHC+4/1ztSVXOxqS6jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7f:2a:cf:01:0e:db:00:5e:15:5f:88:12:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=06c78c7a300337ee68ea455c005cf31c2f0686ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:84:25:b3:34:06:03:70:e2:c5:17:82:c4:
23:be:50:82:6c:88:92:73:d9:65:d7:ff:0e:f9:6a:
5b:29:4f:26:37:42:2a:14:66:4f:e8:31:6d:cf:f7:
b0:31:43:ab:d5:3c:2c:20:e9:f7:46:29:38:eb:35:
42:2c:37:23:33:78:5d:c3:ff:bf:a4:40:84:b4:52:
78:3a:bb:68:20:a7:fb:38:1f:e6:66:90:f6:eb:72:
1b:0e:fb:fe:87:c4:32:ed:1a:eb:3a:01:bd:7c:46:
19:a7:30:6d:be:84:9c:a5:14:3c:db:1e:a0:24:ee:
38:0d:21:6a:e6:43:76:c1:10:6a:e4:f0:16:d1:a0:
0d:1a:fb:17:75:3d:1a:a4:62:37:38:27:b1:d3:35:
8e:77:65:95:e4:c7:23:94:49:b1:f0:ba:9b:23:75:
8c:87:9a:56:de:3d:32:6c:9c:10:7f:4d:07:5b:a8:
5d:93:3f:3f:3b:cd:3f:2d:47:38:3c:46:9a:54:f8:
8e:99:b7:79:ec:6d:fa:c9:8f:e0:f8:4e:c3:a0:24:
a0:71:09:2a:97:46:35:c1:1f:be:e1:ac:70:67:16:
62:22:33:f6:bc:cb:4f:74:85:a1:c7:5c:ad:ef:3b:
e4:7e:77:5a:7a:ce:8d:09:c7:a2:fd:18:ea:70:f9:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C7:8C:7A:30:03:37:EE:68:EA:45:5C:00:5C:F3:1C:2F:06:86:BA
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4e:f1:78:35:42:ae:65:06:65:91:40:84:ea:ac:f2:16:f2:
cb:21:8d:e4:a7:98:15:23:2c:3d:06:fe:e8:60:d3:ec:a6:b9:
a4:26:b1:db:54:55:91:f5:6f:44:ac:96:b1:04:66:38:79:de:
c4:46:9d:06:56:5c:80:8f:ed:7b:03:92:45:79:0e:f9:35:a9:
61:b1:24:d4:bd:7f:de:2e:aa:a1:a1:8a:d7:c0:b6:f6:da:1c:
44:53:1e:93:40:6f:ce:f8:e2:b5:2c:46:d9:53:31:da:a1:41:
53:0e:bb:65:7d:80:65:72:57:7c:d3:14:21:98:af:0f:9b:d6:
1a:8d:67:e2:3f:cf:fd:14:01:eb:ce:ca:bf:eb:92:e6:f6:fd:
1a:89:87:70:e1:33:5e:b9:98:90:cf:62:65:d7:4a:b3:3f:69:
8d:97:7e:48:5f:f3:48:71:25:ba:ff:9b:9f:6b:dc:ed:51:ad:
29:fb:de:da:b9:cb:10:fc:b7:24:aa:55:b1:39:7a:43:5f:20:
a3:f6:b4:e9:d4:92:fd:9a:09:b6:a5:fe:0f:7a:73:be:b4:5f:
6a:54:6c:72:4e:2a:37:0f:9c:a2:d4:6e:38:aa:0a:e9:32:44:
a5:c5:1d:b6:c1:a2:3e:d0:59:0a:3d:a3:38:53:12:ae:5d:70:
b2:4d:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:43 2025 by rpki-client