Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
File: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft (raw, json)
Hash identifier: 1qSoP1dth9cbzCFKR4hqrTuDY+Z8ba5TfZRx7Pf2aoU=
Subject key identifier: 02:B8:24:21:92:42:2A:4F:FE:6C:82:AA:A7:BC:0D:EA:A9:A1:7F:E8
Authority key identifier: 3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
Certificate issuer: /CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Certificate serial: 0199FE7DE418DDC385C36C6ABFF5271306BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
Manifest number: 0562
Signing time: Sun 19 Oct 2025 22:01:27 +0000
Manifest this update: Sun 19 Oct 2025 22:01:27 +0000
Manifest next update: Mon 20 Oct 2025 22:01:27 +0000
Files and hashes: 1: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl (hash: 1wQ/ObU47pBYi8d+cqF1TmzFCwVNvw0TkTT57kaXA3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e4:18:dd:c3:85:c3:6c:6a:bf:f5:27:13:06:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Validity
Not Before: Oct 19 22:01:27 2025 GMT
Not After : Oct 20 22:01:27 2025 GMT
Subject: CN=02b8242192422a4ffe6c82aaa7bc0deaa9a17fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:97:18:12:8a:1a:5e:4b:b5:d9:86:2a:19:bc:
43:51:35:1b:0e:42:32:3d:1f:b2:4c:95:48:fb:e4:
8d:b2:d1:09:36:e2:97:96:bf:25:af:bf:2e:0f:b6:
91:8b:7a:c9:e8:5c:79:4f:80:4c:67:0a:cf:29:ae:
7d:c2:7b:6e:24:af:20:3b:97:32:f0:5a:65:2d:c4:
8a:5a:37:be:9c:99:4f:e8:b2:9d:95:ac:99:ad:11:
bf:83:00:eb:9c:fd:37:9d:48:20:6d:1e:ea:9a:52:
51:bf:5b:0d:2c:de:19:e7:ce:f4:51:e9:73:9a:66:
63:97:af:a1:a2:57:19:6c:bc:06:56:a8:90:ff:e1:
3e:46:8f:8c:82:b0:e1:68:0e:9c:ae:8b:c2:b0:e7:
28:d0:e6:d8:3f:b4:77:79:5d:c6:cb:24:ff:6a:1c:
e2:da:5c:c7:2a:a9:87:0a:9e:ee:02:69:00:08:56:
4a:9e:f1:6b:93:b9:a4:a4:1a:79:42:58:a0:98:36:
12:50:96:4d:f0:31:c3:71:44:9d:82:f3:21:99:07:
e1:0e:92:d3:18:04:f6:60:e6:0c:dd:04:43:a3:ae:
15:db:aa:ea:ba:ed:09:58:da:38:3b:ad:d0:12:ea:
70:c0:17:da:aa:c8:61:0c:1f:f2:47:7b:74:bd:3d:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:24:21:92:42:2A:4F:FE:6C:82:AA:A7:BC:0D:EA:A9:A1:7F:E8
X509v3 Authority Key Identifier:
keyid:3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:23:fd:d2:b8:52:d1:2b:af:e2:e8:12:35:c5:6c:c7:a1:4e:
4a:1c:64:b6:4b:46:35:48:c6:68:a6:8a:35:1e:29:a9:96:ac:
7a:12:73:4b:ad:24:28:74:83:33:41:f5:6c:a4:3d:0b:64:27:
58:81:68:12:28:d1:09:f9:2a:51:6e:e5:c3:70:24:6c:a7:77:
02:88:2a:47:31:d8:be:02:98:70:b1:92:77:aa:03:d0:2e:7d:
4d:7b:0e:99:6f:62:8b:27:c0:eb:9c:f3:3c:f5:31:12:58:1b:
21:56:81:73:82:b0:2d:ee:3e:61:57:5a:af:f3:8c:a4:0f:f7:
37:01:82:6e:87:6b:1b:7d:e3:bc:89:c6:58:f1:a7:91:ca:59:
d8:f7:da:fe:7e:99:3a:2a:b1:60:5d:4e:b3:64:d3:1e:f7:f6:
a3:72:26:35:12:36:d2:06:98:90:27:90:4e:56:fa:bf:4c:9e:
c7:f3:cc:89:68:15:0a:fe:9e:6f:d3:98:68:72:61:12:d2:14:
be:e5:3d:a6:a8:8c:41:32:03:5b:d3:0b:d7:58:3f:ac:c3:73:
35:a7:f9:d6:e0:26:b3:80:4f:5d:c5:e5:3f:88:78:29:f5:8b:
46:87:24:0c:6d:02:7e:ec:4a:db:ae:ea:35:40:82:bd:21:4c:
f1:64:84:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:23:17 2025 by rpki-client