Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: g78mYrdZbVybTMls9BDvhtFRsXkpU7j9anSfgqMBucc=
Subject key identifier: 75:16:21:61:C7:47:64:10:82:5F:0E:91:68:7E:92:32:83:19:6C:59
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 0199FBEA7C65DFFFA6A2FBD0192014CD2B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 0798
Signing time: Sun 19 Oct 2025 10:01:12 +0000
Manifest this update: Sun 19 Oct 2025 10:01:12 +0000
Manifest next update: Mon 20 Oct 2025 10:01:12 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: g4KPkWJEgVUfCM+sO7RWP1JB7t2WmI2vR0L10kRD2DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7c:65:df:ff:a6:a2:fb:d0:19:20:14:cd:2b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Oct 19 10:01:12 2025 GMT
Not After : Oct 20 10:01:12 2025 GMT
Subject: CN=75162161c7476410825f0e91687e923283196c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:68:ff:a7:0c:d6:d2:8a:ca:d1:c0:b8:d3:93:
fb:fe:8c:5e:25:2e:b3:02:68:9c:8b:69:59:76:7a:
38:8c:5c:62:cb:99:25:81:ab:a0:f8:18:dd:fd:42:
58:1f:e9:1a:be:f6:02:b0:01:37:bb:65:39:98:06:
08:10:b0:0b:39:fd:5b:57:ad:5f:99:53:5a:8a:34:
1d:a0:d0:b1:cf:f9:34:40:69:45:2b:df:3c:5e:98:
01:df:b0:26:39:aa:70:05:27:af:f4:2b:4e:ec:5b:
be:9d:23:dc:c9:78:e8:3f:65:34:52:53:98:64:50:
01:d8:61:7b:56:d6:3f:b6:7e:b5:66:8c:15:58:d1:
89:43:96:28:65:d9:e6:c7:bc:86:0c:8b:34:d5:0e:
aa:f5:11:82:33:ff:8d:62:d6:1f:dc:fd:0f:7c:07:
df:2b:82:7d:eb:74:37:3e:47:f5:1a:e5:0d:89:cd:
0e:f9:4e:5a:a1:ab:1f:21:a8:99:d7:19:3d:a3:e0:
e5:0f:ee:95:a6:2c:cc:03:60:7e:a5:b7:97:1f:0a:
8b:f4:60:f8:2b:d2:5b:2a:18:b1:4b:d8:03:90:4a:
d4:24:01:07:8e:8f:9c:f3:ac:cb:b7:b8:c0:99:18:
d8:19:3a:cd:72:ed:89:74:b5:ef:01:27:03:78:a4:
d0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:16:21:61:C7:47:64:10:82:5F:0E:91:68:7E:92:32:83:19:6C:59
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e3:30:5f:4b:14:8c:d5:ae:ab:a3:d3:f2:ff:c0:69:90:a1:
ad:43:3a:31:79:bc:54:4b:01:18:4c:a7:39:27:7c:62:61:3c:
7f:17:53:00:a4:a4:7b:7f:11:57:59:6e:c1:3d:64:7c:30:5c:
70:d8:80:28:ba:69:f3:74:a2:7b:d3:2a:e6:d9:5d:fb:eb:60:
18:0e:58:2d:cb:8b:4c:a1:de:3d:40:e9:aa:bd:b8:fe:91:a7:
33:c9:37:26:99:be:14:18:53:bc:c5:37:b8:d5:f3:19:82:19:
f7:86:5f:44:a9:0a:34:f0:a6:7e:13:e6:b6:72:d2:e7:7d:f4:
89:70:b3:52:37:23:58:23:46:08:19:91:3e:7f:b2:3b:03:8e:
79:85:cc:9a:3e:f9:3a:b0:a7:d4:2f:9e:d5:b4:6a:1c:19:23:
22:a8:07:7f:45:66:ec:d4:ac:54:f8:9c:12:70:f7:38:29:bf:
61:6d:d8:47:83:94:2d:7c:2e:a3:5a:68:d6:3e:d6:ce:36:d3:
ad:78:c6:88:71:99:e6:cf:6e:20:75:3d:7d:f8:67:b9:98:17:
d5:2f:88:72:07:e7:f4:7c:6f:a2:e4:bb:25:86:a5:8d:bb:de:
78:11:bc:1f:7f:d6:a4:1c:bc:c9:36:2e:f3:2b:77:31:d5:38:
f5:ca:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:27 2025 by rpki-client