Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: e64DVhXFYyV4Hmzx/0hsWxVLLjyA9QY1TUUeL1aw2Jc=
Subject key identifier: 20:B1:8E:93:54:EA:09:63:81:67:36:64:2F:66:2D:65:90:40:56:24
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 0198D473C7E9512EC296D7FC6A0CDADEA260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0C96
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: MfdNA1zQRPeQS737OPEkS/hTYpFRu68ntu55uSTR4Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c7:e9:51:2e:c2:96:d7:fc:6a:0c:da:de:a2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=20b18e9354ea0963816736642f662d6590405624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:97:c9:f8:fd:91:17:40:1f:dc:0a:3e:42:
f2:49:8a:a6:8d:9b:66:57:64:de:3f:39:2a:17:cf:
74:39:d3:1d:5d:16:8a:eb:65:10:29:f2:ec:9d:09:
6d:7f:a3:c0:4e:ee:b5:70:6d:49:48:2e:35:49:ba:
cf:60:34:bc:1b:5f:99:28:43:bb:8c:e1:ae:e2:8e:
32:81:de:4b:cb:78:a6:7a:9c:a2:52:6b:05:3a:a2:
01:c4:04:8f:2b:b3:e3:b5:f9:35:af:ad:53:3d:55:
00:2a:7d:bd:ee:8f:08:ba:f0:ee:61:47:61:cf:28:
9f:6c:0e:f3:10:84:94:1f:b2:a9:ac:bf:77:c4:c9:
e2:5b:6b:35:d1:58:90:c0:e1:0f:7a:09:56:91:d1:
ec:fe:54:c0:75:3f:b8:16:41:17:ed:de:2c:22:4c:
3e:97:c9:a5:09:4a:80:7c:27:87:29:e7:8c:f2:06:
b9:dc:56:ff:41:ff:d4:b6:ee:fa:38:8e:f2:18:39:
21:1d:5b:96:d4:12:15:e7:ef:6e:0c:a7:17:d1:b1:
5b:d4:0a:cf:84:36:c0:43:cb:c1:1b:f4:2e:b1:39:
34:5b:78:db:42:f9:69:f5:db:0c:9b:76:16:38:b6:
d1:58:49:0f:82:a2:57:1a:ea:2b:bb:59:4b:02:f3:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B1:8E:93:54:EA:09:63:81:67:36:64:2F:66:2D:65:90:40:56:24
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:07:f4:74:0f:2b:8e:82:30:10:e7:6e:18:4b:0b:ee:a2:e0:
2e:2c:75:30:34:30:28:dd:ce:42:49:64:26:98:f0:d2:6a:69:
66:2c:29:d7:68:b9:d0:0d:dd:2a:30:a6:a3:12:b1:67:2b:3e:
e8:eb:cb:d2:84:f8:b0:d0:9a:3c:d2:0d:c3:6d:54:67:a2:fc:
72:c9:9d:38:7f:21:fe:0b:02:17:63:c2:6a:2f:46:aa:6d:5d:
a5:3d:18:66:c3:27:7f:2b:38:fa:c9:92:c3:d4:9f:60:cd:ec:
6e:2b:39:8c:f9:a0:29:82:85:be:35:97:6e:b7:02:08:7e:97:
f9:63:ca:7e:5d:28:b0:1f:d8:39:bf:ac:94:91:e9:c8:5b:b9:
5b:fe:01:50:e4:b0:18:8b:33:73:55:ce:66:f9:4a:01:36:aa:
52:22:9c:fe:a4:c2:1b:70:4f:27:ac:2d:bb:a5:e9:ff:bf:a7:
37:bb:1f:30:f2:2f:96:20:a5:9a:fd:f1:79:33:35:0e:36:41:
e0:56:11:0c:d6:df:c7:85:8b:02:6b:a7:f3:1b:b6:37:f2:15:
75:78:0d:af:84:2d:2d:7a:73:12:ab:93:c5:89:a4:03:cd:bf:
ca:f3:38:5e:2f:cc:b8:b6:4b:20:8c:6c:bb:45:1d:bb:82:3d:
e3:92:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:55 2025 by rpki-client