Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: WOUzYPrpPmEU94EZI2M/w/gQfwP77N6Do3nJJ9sQwr0=
Subject key identifier: C4:51:49:46:D6:73:3F:73:AE:86:C5:34:9C:BC:35:A9:EE:32:5C:5B
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 0199FBEB9A8EFD6162B4117792ACD1244F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0D2F
Signing time: Sun 19 Oct 2025 10:02:25 +0000
Manifest this update: Sun 19 Oct 2025 10:02:25 +0000
Manifest next update: Mon 20 Oct 2025 10:02:25 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: 4uz1EaYico7ltPZvDxSuDJoJ7MVZ53lPJlxakC0mxYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9a:8e:fd:61:62:b4:11:77:92:ac:d1:24:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Oct 19 10:02:25 2025 GMT
Not After : Oct 20 10:02:25 2025 GMT
Subject: CN=c4514946d6733f73ae86c5349cbc35a9ee325c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9c:e1:04:69:99:1e:36:c1:2d:df:7e:c0:6c:
92:8e:47:bb:ad:8e:d6:2a:20:17:b4:27:20:5f:ab:
d1:02:99:aa:34:47:24:e0:ed:af:78:6f:59:77:41:
f9:a2:62:4f:ad:e3:88:1a:59:11:31:d1:50:ef:ef:
76:bc:94:b2:f9:5b:e1:a8:1a:c8:09:a6:7f:af:71:
0c:c6:0b:67:8a:0b:51:88:aa:17:ac:6b:98:9d:9f:
65:ee:d3:83:96:a3:db:c4:4a:33:e5:6b:0f:6f:04:
d5:73:54:cb:8a:b8:71:47:23:42:0c:06:f1:37:4c:
67:60:d9:37:dd:e8:65:09:72:17:6f:4e:c6:af:c1:
3b:3d:bc:02:d1:15:01:b1:f8:9d:a3:bd:07:2a:c4:
81:d5:5c:cc:bf:94:dd:39:6f:63:8a:6d:bb:76:14:
a6:d8:ac:3b:03:a3:41:67:68:aa:0f:f1:96:00:97:
37:3b:94:aa:ab:98:26:70:1c:69:63:71:ff:52:07:
ad:28:b9:15:82:66:ef:eb:c6:02:31:21:15:3b:06:
1d:f4:c4:ff:b3:f1:0f:e5:d6:5a:2a:67:b9:f3:e7:
19:f4:dc:af:fd:d9:87:50:0f:bb:37:36:a2:84:e4:
d8:72:5a:10:8c:7a:e4:5e:a4:23:4b:72:b0:98:30:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:51:49:46:D6:73:3F:73:AE:86:C5:34:9C:BC:35:A9:EE:32:5C:5B
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:14:f6:f5:13:ad:7c:1b:d6:6d:d4:fc:45:dd:27:69:90:
4b:65:f1:34:56:d3:3a:2c:71:16:32:a1:00:aa:c7:94:14:d1:
df:b7:64:e1:f8:d9:9f:bb:ef:e7:2b:d2:ce:8e:34:e4:36:d0:
b7:99:94:81:80:2a:e0:bb:ad:dc:1f:d6:4f:81:87:63:d8:76:
2c:83:b0:2e:1d:35:a2:86:e9:30:d4:e7:60:63:cc:04:7b:cd:
fb:55:c6:6d:cf:f5:79:75:67:8e:e0:9a:7d:24:be:ae:00:1b:
87:ac:71:19:a9:c9:2d:f1:b8:b5:7b:8d:c4:50:50:96:c7:e9:
61:39:6e:37:12:ab:b9:6b:5c:25:5e:5f:eb:70:3e:86:95:3b:
ec:13:cf:15:97:20:a4:a7:5b:8e:f7:0b:16:06:d7:f0:10:ec:
4f:07:d5:1e:3a:82:4c:8c:83:61:d9:b9:0c:f9:01:35:71:43:
74:59:e6:a3:b1:5b:09:06:3e:b6:24:7b:d1:43:f9:9f:84:a7:
5e:89:14:57:e3:13:09:fa:54:07:84:28:95:5a:3c:93:9a:4c:
5d:62:e3:8c:42:a6:b1:b6:2b:67:0b:65:00:84:1e:c6:94:12:
ba:46:5b:b9:f9:c7:ba:aa:16:fa:95:ce:1a:a6:6a:13:cf:04:
68:43:7a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:48 2025 by rpki-client