
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: qZAsalZ7tw5N3uXHO47hcBo8zfXXZOM6r2euONSYLrY=
Subject key identifier: 91:3E:90:43:A1:95:30:72:E2:A1:57:6B:66:71:BD:EA:BF:71:66:92
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 0199FFFE8DAA9B3EBABF449CD3C3F94EF1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 05:01:36 +0000
Manifest this update: Mon 20 Oct 2025 05:01:36 +0000
Manifest next update: Tue 21 Oct 2025 05:01:36 +0000
Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: veKxsYyEgZsvo+IzgIHo74/TVwSjGAjM0kn5niguewU=)
2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8d:aa:9b:3e:ba:bf:44:9c:d3:c3:f9:4e:f1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Oct 20 05:01:36 2025 GMT
Not After : Oct 21 05:01:36 2025 GMT
Subject: CN=913e9043a1953072e2a1576b6671bdeabf716692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:e0:11:eb:a8:75:bb:5b:6f:f9:ab:64:42:
ee:78:73:21:57:82:01:06:68:de:46:17:35:21:59:
d6:f9:b7:64:f5:bb:02:1a:a5:3f:96:f8:67:31:81:
45:14:0f:cd:85:59:76:50:56:b6:df:e0:6b:2e:f6:
98:c7:3c:1f:66:7c:a6:23:75:41:3c:64:b0:03:83:
6f:06:45:ad:f8:1d:00:ef:6f:90:ee:ec:96:1f:21:
28:3d:c3:24:f3:50:3d:03:65:2b:3a:e1:75:ac:66:
65:54:9a:40:8c:0b:78:06:b4:52:57:2c:9c:3f:34:
a1:90:42:36:68:ac:a5:a0:a2:4f:a2:01:b1:98:1f:
5b:6f:9d:42:f3:ee:5c:0b:99:aa:7f:8e:31:85:b1:
c0:d6:10:74:4f:4e:7b:29:07:71:68:5e:e4:ed:7e:
dd:f9:66:33:cc:1f:51:f7:7d:90:f0:ab:7d:68:39:
0f:93:33:81:56:68:56:be:64:74:d2:e6:cc:11:68:
59:f7:8b:d3:1a:6f:0a:6b:ff:7b:8d:76:44:c7:4e:
f1:c9:ea:23:c0:3d:7b:b9:f5:d8:ab:b2:ed:01:04:
22:cb:e0:35:50:a0:fd:3b:a9:92:ff:e2:8f:93:c2:
24:a1:93:4d:31:78:26:05:53:b5:50:f2:63:59:51:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3E:90:43:A1:95:30:72:E2:A1:57:6B:66:71:BD:EA:BF:71:66:92
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:61:e8:45:30:52:cc:9b:d9:f9:5b:5e:83:76:a2:5a:a8:7a:
8e:d7:0b:88:1d:9a:15:d9:0a:e8:e9:16:85:98:a5:32:12:ea:
48:0d:77:27:eb:02:8b:b9:fc:68:4f:27:d8:ec:a3:cd:4a:a9:
2c:ef:46:f4:39:12:e7:94:97:45:ee:b0:13:03:3c:32:af:40:
fb:99:2a:03:1a:62:f0:16:f2:a1:68:60:e0:ac:4a:bb:8b:ad:
9c:dd:7b:73:f9:50:58:6f:7a:6d:ea:fb:2f:74:b3:3b:1b:fe:
33:12:ab:6c:09:fd:6a:97:a5:45:e1:4e:24:bb:86:f0:34:81:
a1:01:28:3f:8a:76:3d:d4:e3:2c:fa:64:de:cf:40:83:c9:02:
7d:ae:07:11:50:02:66:64:9d:f7:20:80:0e:b2:c1:00:ab:71:
a9:3d:95:83:3b:e4:d5:82:d0:cb:cf:0c:17:fb:04:e8:9e:10:
b5:56:14:ba:c1:e5:52:7e:e0:45:11:f3:d3:15:09:76:7c:51:
2e:3c:59:b3:fe:51:8a:c9:6c:22:9f:86:bd:27:ae:06:ff:94:
61:f7:23:7f:d4:87:04:a0:cb:31:80:3c:b5:13:5d:dd:29:3c:
9d:c0:73:d1:8b:58:7b:ed:10:f6:45:d9:0c:33:88:17:7c:12:
55:42:e9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:08 2025 by rpki-client