Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
File: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft (raw, json)
Hash identifier: 9hqb+KwBUCkZRonmdL6O0lUc8W21SRsDb6iLiwUZBXA=
Subject key identifier: AE:8F:F4:53:78:9D:4C:EC:57:C7:59:89:DB:32:07:5A:00:03:3A:C2
Authority key identifier: 3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
Certificate issuer: /CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Certificate serial: 0198D8F28449F81F37AA5E4D846E6A396760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
Manifest number: 04CA
Signing time: Sat 23 Aug 2025 22:00:28 +0000
Manifest this update: Sat 23 Aug 2025 22:00:28 +0000
Manifest next update: Sun 24 Aug 2025 22:00:28 +0000
Files and hashes: 1: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl (hash: k3Mbq0pWX8nWFkTk3iLFaTgy7EKup99Qqy4QbXOLQu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:84:49:f8:1f:37:aa:5e:4d:84:6e:6a:39:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Validity
Not Before: Aug 23 22:00:28 2025 GMT
Not After : Aug 24 22:00:28 2025 GMT
Subject: CN=ae8ff453789d4cec57c75989db32075a00033ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:ff:3d:a6:02:3f:57:ad:35:75:63:4e:10:
f1:e8:47:c2:26:18:11:8d:46:f6:5c:b9:cd:5c:f9:
ff:8a:b6:8c:fe:be:82:bd:a2:30:3c:83:cc:ee:24:
4e:29:6f:df:8e:a0:a5:a2:59:3c:8b:58:55:ea:8c:
a0:ad:2b:63:d7:2f:a7:85:1e:63:e5:f1:d8:10:ab:
a1:19:54:b8:7f:f3:de:f5:92:19:95:85:e3:7d:60:
84:e3:0c:0a:b2:05:d2:c3:d7:c8:0e:ab:32:9f:61:
99:b4:e4:58:67:e7:96:87:58:6d:dc:ec:7d:71:e0:
9b:ae:35:5b:11:07:d0:74:52:ed:f4:7d:f8:2a:12:
e7:7b:e4:bb:3d:61:63:bf:b8:22:51:9a:24:52:5b:
98:1d:b4:f6:2b:da:15:31:11:fa:f9:9b:66:04:4b:
c3:e7:7e:c8:a3:e2:40:96:e6:9c:f1:9b:56:55:a7:
00:a6:9a:2c:d1:28:d8:58:d3:9f:0a:f4:1c:97:4d:
d7:f7:48:f2:23:31:fd:0c:66:5f:a9:97:cd:89:05:
2a:16:c9:41:5d:be:b1:f4:c1:df:5f:e5:bd:86:56:
b8:a5:78:01:20:29:ff:d8:c3:7f:a5:18:10:7a:4f:
37:76:8b:2f:74:2a:a4:41:5e:73:7a:60:3d:2b:e4:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8F:F4:53:78:9D:4C:EC:57:C7:59:89:DB:32:07:5A:00:03:3A:C2
X509v3 Authority Key Identifier:
keyid:3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:83:0b:85:f0:5d:2c:9a:00:ba:9d:dd:c0:e1:1c:d7:04:
c6:5d:e4:70:c0:0c:97:99:b2:76:0b:aa:a0:1d:96:8c:bf:29:
e6:d9:c0:37:fe:da:37:14:a4:0e:eb:3f:04:89:ce:b6:ce:33:
d6:8b:5a:a9:ac:e1:40:30:c9:30:ad:c5:89:ba:b2:8c:3d:4d:
f0:79:fa:9d:05:e3:48:1f:27:a5:67:33:cb:fd:10:c9:61:9a:
63:d5:23:71:1c:e3:78:7d:0e:1a:60:6c:64:cb:0e:43:cf:e4:
b2:91:e7:9b:e5:94:e4:fa:37:e2:8d:dc:58:85:5c:09:da:ce:
7d:ad:93:1f:3b:e4:af:0f:9c:79:65:bb:07:fe:f4:57:ad:c4:
18:09:a2:a0:14:26:f1:83:05:3b:e5:67:0c:08:54:15:5f:a3:
18:ea:be:5f:bd:db:3a:17:02:7e:5d:bb:e8:64:f5:18:fd:e8:
28:8e:2e:51:d0:62:62:c1:61:e6:6c:bf:a6:bf:52:14:34:c7:
39:2b:57:87:fe:01:e0:a1:95:d9:b7:65:a6:b1:a4:a8:7c:24:
23:bf:8e:35:76:08:c1:86:4a:ac:7f:4f:0e:d6:c5:88:e5:c0:
3a:ec:12:02:45:79:1f:82:24:0d:93:77:e0:59:6f:9d:49:17:
0d:98:77:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjY8oRJ+B83ql5NhG5qOWdgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGFiYTMwZjRiNDA0ZmY0ZGVjOWZjMDAxNmMwYmJlZTRi
NmI4NzcwHhcNMjUwODIzMjIwMDI4WhcNMjUwODI0MjIwMDI4WjAzMTEwLwYDVQQD
EyhhZThmZjQ1Mzc4OWQ0Y2VjNTdjNzU5ODlkYjMyMDc1YTAwMDMzYWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl///PaYCP1etNXVjThDx6EfCJhgR
jUb2XLnNXPn/iraM/r6CvaIwPIPM7iROKW/fjqClolk8i1hV6oygrStj1y+nhR5j
5fHYEKuhGVS4f/Pe9ZIZlYXjfWCE4wwKsgXSw9fIDqsyn2GZtORYZ+eWh1ht3Ox9
ceCbrjVbEQfQdFLt9H34KhLne+S7PWFjv7giUZokUluYHbT2K9oVMRH6+ZtmBEvD
537Io+JAluac8ZtWVacAppos0SjYWNOfCvQcl03X90jyIzH9DGZfqZfNiQUqFslB
Xb6x9MHfX+W9hla4pXgBICn/2MN/pRgQek83dosvdCqkQV5zemA9K+RxvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6P9FN4nUzsV8dZidsyB1oAAzrCMB8GA1UdIwQY
MBaAFD4KujD0tAT/TeyfwAFsC77ktrh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGdxNk1QUzBCUDlON0pfQUFXd0x2dVMydUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNGU1NTctMDY0MC00OGQzLTg3ZDYt
NTkwMjlhOGI1MzNhLzEvUGdxNk1QUzBCUDlON0pfQUFXd0x2dVMydUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNGU1NTctMDY0MC00OGQzLTg3ZDYtNTkwMjlhOGI1MzNh
LzEvUGdxNk1QUzBCUDlON0pfQUFXd0x2dVMydUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtCDC4Xw
XSyaALqd3cDhHNcExl3kcMAMl5mydguqoB2WjL8p5tnAN/7aNxSkDus/BInOts4z
1otaqazhQDDJMK3FibqyjD1N8Hn6nQXjSB8npWczy/0QyWGaY9UjcRzjeH0OGmBs
ZMsOQ8/kspHnm+WU5Po34o3cWIVcCdrOfa2THzvkrw+ceWW7B/70V63EGAmioBQm
8YMFO+VnDAhUFV+jGOq+X73bOhcCfl276GT1GP3oKI4uUdBiYsFh5my/pr9SFDTH
OStXh/4B4KGV2bdlprGkqHwkI7+ONXYIwYZKrH9PDtbFiOXAOuwSAkV5H4IkDZN3
4FlvnUkXDZh3Rw==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:32 2025 by rpki-client