Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: Zh59yeADhWCDxBOCJijqFzjfGi2NjUQWTuyuwPWMUks=
Subject key identifier: BB:69:57:5F:F5:F0:7E:5E:B1:E7:FD:AD:DE:22:C2:50:C5:6C:D0:72
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 0197B6A1E17BCD5C7FE606A553F5E75EF4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 066B
Signing time: Sat 28 Jun 2025 13:02:31 +0000
Manifest this update: Sat 28 Jun 2025 13:02:31 +0000
Manifest next update: Sun 29 Jun 2025 13:02:31 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: G+IwuwRbHeiRSBhmVPEP9he67VscGcWEKJ1tcacu6sQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e1:7b:cd:5c:7f:e6:06:a5:53:f5:e7:5e:f4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Jun 28 13:02:31 2025 GMT
Not After : Jun 29 13:02:31 2025 GMT
Subject: CN=bb69575ff5f07e5eb1e7fdadde22c250c56cd072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:af:23:a1:25:0c:91:bd:4e:35:75:1d:21:
c6:70:57:16:90:7b:d4:14:12:63:40:fd:ca:7d:8e:
d4:2e:2f:89:8e:94:fc:b0:4e:e2:3f:c1:8d:b2:57:
53:b1:c3:98:c6:dd:9c:19:e9:43:c7:e8:e6:79:a1:
42:8c:f2:12:9b:ac:e4:30:42:6b:b8:8d:94:4a:6b:
5c:99:32:37:05:05:e1:68:af:14:23:e2:1a:64:dd:
80:2f:f5:9f:47:50:23:c0:07:52:45:cc:46:83:04:
ad:38:d9:a0:57:43:df:b4:b0:5a:3a:b2:01:bc:24:
dd:ea:54:5e:d8:ec:fc:fc:d8:d6:8c:60:af:fe:64:
85:30:24:9e:52:8d:9c:2e:3f:39:0e:d2:27:63:1f:
26:c1:78:a8:f1:a0:5e:7d:a9:3c:82:d6:be:a9:56:
b1:73:9d:2c:30:37:d2:ab:1e:a7:e1:cd:03:b0:36:
5b:4a:2d:e2:f6:7f:a0:61:36:cb:a8:89:5d:54:64:
c3:23:87:4d:45:b4:47:2c:82:7e:36:c8:88:c8:b6:
a8:86:02:06:b1:2f:5f:70:33:e5:67:13:8c:5a:d8:
5b:60:69:e6:b2:f1:c8:36:7e:74:7a:83:88:ed:a1:
97:58:c0:3d:93:02:15:42:b5:fd:2f:f2:0d:ef:82:
5b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:57:5F:F5:F0:7E:5E:B1:E7:FD:AD:DE:22:C2:50:C5:6C:D0:72
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4e:a5:1a:3d:62:f4:41:f6:a9:a1:2d:9b:78:d7:57:a3:9a:
96:d0:a4:ce:b3:fc:e0:3c:46:22:f6:52:8e:1a:0e:70:69:da:
be:00:8c:9f:3b:46:9a:b2:db:0e:9e:2f:35:3e:24:1e:8a:d5:
c3:d6:4a:c0:dc:f5:48:8f:28:f1:47:4c:fe:7e:7d:42:69:06:
f5:30:8a:9d:45:e5:18:06:5a:35:08:e1:f1:dd:9c:a3:49:4e:
96:ad:92:3f:ba:f2:0b:97:e0:c3:6b:7d:8a:91:06:87:07:69:
54:cf:e5:54:13:f9:03:80:29:53:fc:85:d8:50:86:22:e5:fa:
25:32:c0:20:c1:db:80:d2:a6:76:4d:25:d5:bd:f8:10:30:e6:
5b:b7:8a:93:7a:d7:ac:09:5d:e4:9d:da:48:cb:74:c3:c3:59:
3c:07:36:f7:63:73:89:77:88:5b:f6:85:3b:a6:8d:01:6d:a4:
39:37:62:b1:e7:c9:5f:b4:4d:67:5a:33:7b:bd:2a:7e:d6:6e:
83:6d:43:88:92:f7:4a:2e:f6:3e:33:e3:f4:52:3c:75:d0:40:
f6:10:57:bf:85:b7:92:58:6f:b4:cd:54:9d:ca:bd:be:7d:78:
60:8a:37:b2:1f:f3:ce:6a:4a:30:10:93:9d:9f:7f:1c:61:57:
5e:86:8b:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeF7zVx/5galU/XnXvTFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm
OGUyMjcwHhcNMjUwNjI4MTMwMjMxWhcNMjUwNjI5MTMwMjMxWjAzMTEwLwYDVQQD
EyhiYjY5NTc1ZmY1ZjA3ZTVlYjFlN2ZkYWRkZTIyYzI1MGM1NmNkMDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZuvI6ElDJG9TjV1HSHGcFcWkHvU
FBJjQP3KfY7ULi+JjpT8sE7iP8GNsldTscOYxt2cGelDx+jmeaFCjPISm6zkMEJr
uI2USmtcmTI3BQXhaK8UI+IaZN2AL/WfR1AjwAdSRcxGgwStONmgV0PftLBaOrIB
vCTd6lRe2Oz8/NjWjGCv/mSFMCSeUo2cLj85DtInYx8mwXio8aBefak8gta+qVax
c50sMDfSqx6n4c0DsDZbSi3i9n+gYTbLqIldVGTDI4dNRbRHLIJ+NsiIyLaohgIG
sS9fcDPlZxOMWthbYGnmsvHINn50eoOI7aGXWMA9kwIVQrX9L/IN74JbeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtpV1/18H5esef9rd4iwlDFbNByMB8GA1UdIwQY
MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt
NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm
LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABE6lGj1i
9EH2qaEtm3jXV6OaltCkzrP84DxGIvZSjhoOcGnavgCMnztGmrLbDp4vNT4kHorV
w9ZKwNz1SI8o8UdM/n59QmkG9TCKnUXlGAZaNQjh8d2co0lOlq2SP7ryC5fgw2t9
ipEGhwdpVM/lVBP5A4ApU/yF2FCGIuX6JTLAIMHbgNKmdk0l1b34EDDmW7eKk3rX
rAld5J3aSMt0w8NZPAc292NziXeIW/aFO6aNAW2kOTdisefJX7RNZ1oze70qftZu
g21DiJL3Si72PjPj9FI8ddBA9hBXv4W3klhvtM1Uncq9vn14YIo3sh/zzmpKMBCT
nZ9/HGFXXoaLfQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:31 2025 by rpki-client