Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: ENbR3XtSFo5HQA+fFggCazyp3V2z42kn46G82RDr+ho=
Subject key identifier: 9E:CA:E2:5E:FA:24:31:9C:62:1D:07:14:49:D2:26:AD:89:85:02:47
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 0197B7EA6BE18173473E76F8953344F8AA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0D44
Signing time: Sat 28 Jun 2025 19:01:22 +0000
Manifest this update: Sat 28 Jun 2025 19:01:22 +0000
Manifest next update: Sun 29 Jun 2025 19:01:22 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 3fLAI/Gx+kWpzOgFLzTRYD/q0wpZjO5iNxDlIy1BIuk=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:6b:e1:81:73:47:3e:76:f8:95:33:44:f8:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jun 28 19:01:22 2025 GMT
Not After : Jun 29 19:01:22 2025 GMT
Subject: CN=9ecae25efa24319c621d071449d226ad89850247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:dd:4a:54:30:28:11:f4:36:a5:ec:46:56:
8d:df:17:72:9b:fb:8c:6f:31:72:99:e8:74:e0:ed:
df:bd:10:f3:79:bc:9c:83:4d:df:73:80:70:0c:8d:
af:2c:53:7c:fc:f5:11:79:9a:88:b1:77:5f:35:a0:
fa:a6:46:16:6e:7b:06:fc:c6:54:15:39:bf:d8:81:
1e:e9:f2:d4:53:81:f6:d8:5d:a9:08:0c:7b:ce:5d:
54:71:d2:38:60:7f:03:dd:0f:69:e3:c4:11:60:d9:
ab:48:b2:03:0c:90:f5:24:f0:48:5c:63:61:48:bc:
bc:97:4e:03:ca:51:a8:2f:b5:2e:47:8b:e1:21:a2:
33:c0:12:d2:2b:51:c0:2b:a4:42:8b:3a:d9:cf:56:
a9:ae:5d:63:d1:5d:54:3b:7b:7e:99:e8:42:b7:84:
7f:65:af:01:a6:6d:8c:9e:5f:2e:27:81:40:7e:12:
f3:d0:97:e1:41:49:f8:3f:f9:12:38:67:8a:1f:60:
db:13:1b:48:a1:f5:09:e1:e8:71:d6:60:c3:45:0c:
84:f0:d6:da:a1:04:fe:60:7a:02:bb:55:f8:2e:8e:
59:fd:a8:38:12:02:89:fa:7a:02:4e:4a:80:3c:03:
d0:35:4c:88:a1:9a:fb:34:3b:41:4e:10:2c:e3:5f:
01:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CA:E2:5E:FA:24:31:9C:62:1D:07:14:49:D2:26:AD:89:85:02:47
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:88:d0:54:3b:c1:0c:a5:e2:86:2c:ec:1d:b1:00:0f:3e:f2:
34:38:7d:8a:8d:ef:da:54:37:47:ac:b5:f1:1c:0b:c6:34:69:
ad:8b:3a:6e:b9:e1:ce:7a:5e:0c:72:12:58:09:1e:14:12:e5:
ec:9a:4d:0b:c5:c7:e4:41:1f:6f:f9:d4:01:df:1e:1b:04:01:
48:f3:f6:3c:78:30:b2:18:7e:f5:4b:22:f6:4e:80:b9:b6:78:
1f:08:ff:56:06:34:57:e7:0a:81:14:62:f9:a2:20:93:c7:09:
83:25:cd:47:21:fd:ac:b0:8a:5e:f1:c1:25:50:86:1b:95:5d:
69:82:78:d0:5f:b0:7c:fd:67:bb:d0:af:46:f6:3b:75:06:c9:
72:46:22:bd:15:0a:23:d7:96:54:11:9b:f3:bb:f7:91:c6:33:
bf:a8:4e:ae:47:fe:21:29:92:69:53:79:3e:58:54:cb:a2:1e:
5f:50:57:a6:c0:1d:36:a6:3f:8f:f6:fd:4d:eb:63:1c:f2:20:
0b:78:e4:17:4a:9f:f3:42:dd:a4:80:6d:0c:af:ea:9a:d9:15:
1b:7c:aa:11:89:00:be:4c:93:35:cf:65:49:a0:d5:b0:04:ba:
1d:85:31:4d:80:f0:c6:eb:6e:61:42:ec:74:f8:b0:6b:86:c9:
7b:73:2b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:29 2025 by rpki-client