Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: dvan9x8uklcN0ZyxfCp0seym6eVqR14/0MqFyvZetI8=
Subject key identifier: D8:EC:54:FE:29:72:7E:31:25:FE:FD:88:BE:2D:8D:27:76:13:5E:5C
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 0197B88FE4E59909D885BC45A43ED4FD736B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0C03
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: aHlWGBoaf25CHgupV9FEeHrFizrwiApJfKaJgmrtmLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e4:e5:99:09:d8:85:bc:45:a4:3e:d4:fd:73:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=d8ec54fe29727e3125fefd88be2d8d2776135e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:5c:9e:06:01:1b:2e:a7:ff:ca:e3:9a:57:
79:5c:a7:29:55:2d:ad:e8:09:b0:1f:fc:1c:6f:0d:
b3:9f:2d:55:3c:15:eb:2e:a9:68:aa:1c:db:0e:f6:
5b:d8:59:72:ea:4b:fc:5d:c0:42:30:f5:e9:21:e4:
24:45:f8:70:39:8e:40:ea:17:2b:3a:27:34:45:fc:
1f:1f:2f:cb:9b:96:e3:f3:37:2e:dd:50:5a:18:ad:
52:87:76:dc:51:19:03:dd:0f:27:3a:93:df:8f:58:
10:8a:94:34:e3:da:a0:d3:e3:70:88:0c:32:b9:6b:
98:66:30:2d:4c:99:59:1a:8f:46:6a:ab:79:52:07:
f3:38:1b:41:b3:c5:65:ef:36:b0:0a:71:bb:75:26:
fd:c1:71:c1:2c:37:e4:f5:3d:09:13:e0:68:9d:37:
80:04:60:fe:fd:ec:59:27:af:ac:31:8d:c5:52:29:
8e:4a:a0:9e:8c:e6:ea:c8:16:77:ee:f9:d7:db:e8:
e1:b2:3d:d5:d9:57:ab:d2:e2:ba:6f:d6:8d:25:1a:
82:87:85:e8:46:54:c3:00:d2:96:a2:e9:0d:25:f8:
fb:5e:c9:6f:83:84:fd:99:8e:ba:d8:74:0d:0b:9c:
69:76:13:27:3a:59:ec:66:7a:f0:28:fd:b6:c8:af:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:54:FE:29:72:7E:31:25:FE:FD:88:BE:2D:8D:27:76:13:5E:5C
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9a:61:4d:af:8b:55:0d:3f:a5:42:47:c7:af:04:83:79:3c:
7b:fa:96:13:e0:15:9c:17:0d:8f:9f:ea:4e:0b:1b:c5:26:a0:
41:ec:13:eb:e7:4f:a0:e1:2d:a6:06:a8:8a:7e:13:f2:2b:76:
58:b9:47:eb:ba:f3:2a:ea:43:51:bf:dc:18:fa:02:33:07:c8:
a1:c9:1f:7a:9c:69:cb:55:65:3f:5d:54:5a:b4:0b:f1:0b:a6:
5c:e8:b9:30:75:30:28:a1:6e:8e:ed:39:7a:ac:a7:9a:01:e8:
e8:47:67:90:42:38:46:9a:a5:7b:b4:0f:a5:ff:42:b3:9b:0d:
be:d4:14:b9:34:cc:1f:e7:e8:8b:bf:5e:93:42:be:31:72:c7:
65:33:a6:35:74:a8:5d:ca:2f:8c:f8:b6:ea:1c:f1:c9:2c:03:
d7:a6:a6:ed:73:68:d9:b2:95:ee:67:f6:9d:aa:81:0e:a2:22:
c6:98:7e:0b:f2:b6:c6:d7:1b:e4:49:c1:86:d1:c0:ba:db:a6:
79:13:78:a2:7d:84:cb:9e:e0:ee:34:c4:2e:11:c6:76:18:0c:
79:3f:71:dc:10:da:a7:77:3e:c0:8d:ce:bd:8d:8c:ae:ea:a5:
8e:f2:e4:e0:17:17:98:85:b9:d5:7e:bc:8c:48:4c:48:7b:e8:
05:3a:4d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j+TlmQnYhbxFpD7U/XNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm
YzI4YmUwHhcNMjUwNjI4MjIwMjA3WhcNMjUwNjI5MjIwMjA3WjAzMTEwLwYDVQQD
EyhkOGVjNTRmZTI5NzI3ZTMxMjVmZWZkODhiZTJkOGQyNzc2MTM1ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3ZcngYBGy6n/8rjmld5XKcpVS2t
6AmwH/wcbw2zny1VPBXrLqloqhzbDvZb2Fly6kv8XcBCMPXpIeQkRfhwOY5A6hcr
Oic0RfwfHy/Lm5bj8zcu3VBaGK1Sh3bcURkD3Q8nOpPfj1gQipQ049qg0+NwiAwy
uWuYZjAtTJlZGo9Gaqt5UgfzOBtBs8Vl7zawCnG7dSb9wXHBLDfk9T0JE+BonTeA
BGD+/exZJ6+sMY3FUimOSqCejObqyBZ37vnX2+jhsj3V2Ver0uK6b9aNJRqCh4Xo
RlTDANKWoukNJfj7Xslvg4T9mY662HQNC5xpdhMnOlnsZnrwKP22yK8iGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjsVP4pcn4xJf79iL4tjSd2E15cMB8GA1UdIwQY
MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt
M2I3ZWYyNWNmZTgzLzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz
LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5phTa+L
VQ0/pUJHx68Eg3k8e/qWE+AVnBcNj5/qTgsbxSagQewT6+dPoOEtpgaoin4T8it2
WLlH67rzKupDUb/cGPoCMwfIockfepxpy1VlP11UWrQL8QumXOi5MHUwKKFuju05
eqynmgHo6EdnkEI4Rpqle7QPpf9Cs5sNvtQUuTTMH+foi79ek0K+MXLHZTOmNXSo
XcovjPi26hzxySwD16am7XNo2bKV7mf2naqBDqIixph+C/K2xtcb5EnBhtHAutum
eRN4on2Ey57g7jTELhHGdhgMeT9x3BDap3c+wI3OvY2MruqljvLk4BcXmIW51X68
jEhMSHvoBTpNdg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:04:52 2025 by rpki-client