Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: KuvrzVc5HgcVcsVYaj2FCBnt2mKhy9QSDNbWvR6ym0o=
Subject key identifier: BA:8C:67:6A:95:D7:D4:F2:15:FA:01:EC:98:D5:6F:5F:2F:83:EC:73
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 0198D4A79B267777CFE407E0AD7920654A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: 0JwKJOx1atwDYZdSGgVoyHwSeZ2KBmTxxIi7xevjKSA=)
2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9b:26:77:77:cf:e4:07:e0:ad:79:20:65:4a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=ba8c676a95d7d4f215fa01ec98d56f5f2f83ec73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:60:e2:08:77:84:4c:2b:a0:ed:63:3d:1d:
cb:cb:0a:f9:cb:a5:44:48:a3:b7:45:41:a5:8a:5e:
24:6d:44:05:24:8a:42:7f:f7:1c:cc:ed:e7:ab:99:
62:0f:fd:ce:e9:79:f3:22:e6:68:48:74:0c:db:ba:
38:60:7b:d6:4d:0a:5f:87:49:46:09:6a:65:3a:17:
a9:16:a7:3f:92:4b:bd:cc:67:81:ff:e1:0a:e0:60:
f6:72:9c:df:5f:6f:77:1a:d0:45:81:2c:35:fd:a2:
cd:f6:f8:11:6e:8e:5e:1b:2f:bd:86:e1:fd:f4:79:
9e:a0:fe:c8:8e:5d:5a:60:48:94:5a:7f:5e:df:0e:
c9:a4:b1:b2:00:fc:34:9c:f1:11:d4:02:25:3a:57:
e9:5f:73:7b:e5:75:6b:ae:d1:a7:24:33:98:de:07:
51:1a:a4:70:10:90:59:ae:ff:ce:bb:d2:7f:29:4b:
7c:7e:21:5f:5e:79:67:11:7d:5f:34:a4:93:9b:cb:
51:dc:99:2a:11:0d:cf:c5:7b:19:77:ab:f3:88:8b:
dd:4e:f3:ae:97:01:80:a1:d0:4a:46:c7:2f:85:ca:
dc:03:cc:a8:9f:17:fb:52:3e:cb:16:6b:37:df:53:
74:a8:60:50:11:a8:42:34:ab:9c:8f:1f:b1:1c:9c:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8C:67:6A:95:D7:D4:F2:15:FA:01:EC:98:D5:6F:5F:2F:83:EC:73
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d7:2c:4b:55:5f:f0:e1:3b:07:22:44:8c:46:27:eb:d1:14:
32:34:c3:a3:10:33:5c:b8:74:9d:8f:e1:5e:8a:53:82:38:a4:
35:87:0c:66:86:c5:25:da:26:d7:54:2e:7f:d5:50:d2:20:a2:
40:c1:18:d8:38:15:92:ba:fd:a1:df:54:19:05:be:42:ac:4a:
3c:c4:91:e3:28:e0:6d:3e:59:24:13:68:99:27:dc:f8:8d:ba:
e2:e0:45:4b:57:20:c5:fa:bf:fc:f3:7e:4c:00:23:f5:53:29:
a4:f4:c2:8a:17:ac:3a:6b:b3:be:50:98:f4:d0:b2:50:39:18:
65:84:0d:19:2c:f6:ef:f9:f6:e0:86:0d:09:7d:43:eb:41:ec:
01:e0:f1:f0:2a:09:13:93:ac:e4:f5:77:05:c5:10:4d:93:c7:
8d:03:33:2b:26:78:83:7d:0a:01:27:b1:55:88:18:54:cf:5f:
65:ca:a1:1b:1d:40:ed:2f:26:91:4e:ee:40:84:e1:6f:50:e8:
0e:1a:41:dd:c3:67:f9:99:d5:b6:66:9a:36:70:05:3a:6f:17:
3e:4d:6d:80:6f:97:af:2f:0e:94:5a:cb:16:a0:a9:01:ed:50:
93:e7:c4:07:1f:25:f6:78:e8:eb:61:87:b9:9d:1e:68:97:84:
82:6e:e1:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp5smd3fP5AfgrXkgZUqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNjE0YmYyNTdkM2FmNzcwYmJmM2M2YzJkMzViZmE0NjU2
ODZjZWIwHhcNMjUwODIzMDIwMDEwWhcNMjUwODI0MDIwMDEwWjAzMTEwLwYDVQQD
EyhiYThjNjc2YTk1ZDdkNGYyMTVmYTAxZWM5OGQ1NmY1ZjJmODNlYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZBg4gh3hEwroO1jPR3Lywr5y6VE
SKO3RUGlil4kbUQFJIpCf/cczO3nq5liD/3O6XnzIuZoSHQM27o4YHvWTQpfh0lG
CWplOhepFqc/kku9zGeB/+EK4GD2cpzfX293GtBFgSw1/aLN9vgRbo5eGy+9huH9
9HmeoP7Ijl1aYEiUWn9e3w7JpLGyAPw0nPER1AIlOlfpX3N75XVrrtGnJDOY3gdR
GqRwEJBZrv/Ou9J/KUt8fiFfXnlnEX1fNKSTm8tR3JkqEQ3PxXsZd6vziIvdTvOu
lwGAodBKRscvhcrcA8yonxf7Uj7LFms331N0qGBQEahCNKucjx+xHJwC0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqMZ2qV19TyFfoB7JjVb18vg+xzMB8GA1UdIwQY
MBaAFDxhS/JX0693C788bC01v6RlaGzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYt
ZjZiMDQ0ZGNkNjI0LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi84MDRjMmMtODVmZC00MjlmLWJiYWYtZjZiMDQ0ZGNkNjI0
LzEvUEdGTDhsZlRyM2NMdnp4c0xUV19wR1ZvYk9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtcsS1Vf
8OE7ByJEjEYn69EUMjTDoxAzXLh0nY/hXopTgjikNYcMZobFJdom11Quf9VQ0iCi
QMEY2DgVkrr9od9UGQW+QqxKPMSR4yjgbT5ZJBNomSfc+I264uBFS1cgxfq//PN+
TAAj9VMppPTCihesOmuzvlCY9NCyUDkYZYQNGSz27/n24IYNCX1D60HsAeDx8CoJ
E5Os5PV3BcUQTZPHjQMzKyZ4g30KASexVYgYVM9fZcqhGx1A7S8mkU7uQIThb1Do
DhpB3cNn+ZnVtmaaNnAFOm8XPk1tgG+Xry8OlFrLFqCpAe1Qk+fEBx8l9njo62GH
uZ0eaJeEgm7hyQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:03 2025 by rpki-client