Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: ybLCx6oNarYL/uLahwyiJOU0yTHzw/jkUwAkmRdO/zU=
Subject key identifier: E0:2D:6A:DF:89:36:A8:9F:FB:5D:02:01:44:2F:B3:C6:9E:BF:CF:38
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 0199FF2282E1FD697AE3941E68B21A7260CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0E72
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: eMKzkEUqGx/mFVWtuD23kp7ykh9kJpjxfdqP35xIMmI=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:82:e1:fd:69:7a:e3:94:1e:68:b2:1a:72:60:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=e02d6adf8936a89ffb5d0201442fb3c69ebfcf38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:35:a8:ea:31:7d:35:3d:ca:c9:3a:e4:f5:
6d:6a:89:46:62:a1:4d:89:41:19:d3:4f:6b:cf:79:
fa:06:38:f7:60:16:0a:9f:f4:08:f7:41:54:c8:fd:
f9:30:a8:e0:1a:21:88:41:c0:f7:f9:16:b8:cf:d6:
a0:5f:5f:d0:b1:d4:6a:8b:72:aa:0e:44:b0:14:dc:
41:59:be:3c:09:fb:51:40:ad:a4:76:ab:5f:8c:a4:
44:b7:ce:21:99:3f:16:98:8a:94:5d:36:7b:7b:03:
9c:7d:98:c8:a5:5d:6b:d1:b5:c2:61:ec:6e:1e:09:
2d:43:51:8a:ef:74:03:47:3a:27:ea:a3:4a:95:c6:
65:c9:66:be:08:6b:ee:db:ab:45:66:bb:4b:1a:09:
5c:d5:98:d8:20:d3:7f:c4:fd:2b:92:7f:c8:b4:f4:
51:ef:07:bc:1f:3c:a7:8e:1e:20:e5:39:0e:f4:70:
19:0e:54:91:34:65:1f:c9:b5:c2:13:07:1a:3e:4e:
76:3e:b2:8a:5f:57:65:51:a2:1e:d9:01:4f:2b:26:
7b:1b:04:6c:79:eb:80:5c:07:d9:ac:d2:79:95:30:
dd:14:9d:92:62:34:69:79:ef:6d:45:b8:bc:0d:cf:
f5:c7:35:b4:67:0d:bd:76:ef:7f:ae:c8:b7:61:5b:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:6A:DF:89:36:A8:9F:FB:5D:02:01:44:2F:B3:C6:9E:BF:CF:38
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:34:15:31:9c:7f:cc:10:27:9e:00:74:0d:b8:39:03:52:6a:
b0:13:93:13:e2:d1:df:1d:10:69:a4:a4:3b:d3:ed:93:0d:d9:
03:9e:20:71:41:ef:fb:a6:ae:54:40:e2:c5:dd:33:d9:e7:58:
cd:af:a1:3e:4e:1c:f4:91:81:77:d6:17:9d:10:7d:f7:26:81:
f3:7c:77:c3:80:59:7a:71:aa:d1:b3:59:5c:f8:65:1b:a1:29:
85:3b:01:3b:fd:af:d4:c9:66:31:b1:f6:15:2b:8d:11:18:ed:
35:a7:f4:36:a7:f0:0c:cf:1f:ff:ff:de:67:8c:01:8c:18:c9:
2d:2f:f9:3d:7f:fb:93:5d:1f:30:c5:ba:7c:af:72:e3:08:25:
14:d8:69:56:a0:ad:36:a6:43:6f:58:d6:4a:13:ba:de:11:ed:
3b:4f:c6:73:85:ce:9d:e3:b6:3c:77:0a:27:34:a2:c7:0a:24:
02:95:53:14:e1:53:40:2a:b9:df:b4:b0:f2:6c:6f:9c:58:2b:
19:c1:33:b8:6a:71:5d:18:d3:84:f1:9c:cb:33:98:4d:43:9d:
4d:d1:e3:be:d5:14:dd:97:b9:9e:25:b2:dd:b7:a2:ad:76:b3:
2d:70:b1:97:3e:b6:b5:6f:98:3f:6e:da:74:a3:3e:d5:f1:7a:
cb:d6:92:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/IoLh/Wl645QeaLIacmDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMGJlOGU0OGRiYTA3ZGYyMTcxMTc0NWI4NjllMzkxMWNl
OThlMjAwHhcNMjUxMDIwMDEwMTE1WhcNMjUxMDIxMDEwMTE1WjAzMTEwLwYDVQQD
EyhlMDJkNmFkZjg5MzZhODlmZmI1ZDAyMDE0NDJmYjNjNjllYmZjZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT81qOoxfTU9ysk65PVtaolGYqFN
iUEZ009rz3n6Bjj3YBYKn/QI90FUyP35MKjgGiGIQcD3+Ra4z9agX1/QsdRqi3Kq
DkSwFNxBWb48CftRQK2kdqtfjKREt84hmT8WmIqUXTZ7ewOcfZjIpV1r0bXCYexu
HgktQ1GK73QDRzon6qNKlcZlyWa+CGvu26tFZrtLGglc1ZjYINN/xP0rkn/ItPRR
7we8Hzynjh4g5TkO9HAZDlSRNGUfybXCEwcaPk52PrKKX1dlUaIe2QFPKyZ7GwRs
eeuAXAfZrNJ5lTDdFJ2SYjRpee9tRbi8Dc/1xzW0Zw29du9/rsi3YVsFmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAtat+JNqif+10CAUQvs8aev884MB8GA1UdIwQY
MBaAFD4L6OSNugffIXEXRbhp45Ec6Y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5Zjgt
MjBmOWYwZGJmNDU4LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85NWJjZTktMWU4ZS00MWMxLTg5ZjgtMjBmOWYwZGJmNDU4
LzEvUGd2bzVJMjZCOThoY1JkRnVHbmprUnpwamlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTQVMZx/
zBAnngB0Dbg5A1JqsBOTE+LR3x0QaaSkO9Ptkw3ZA54gcUHv+6auVEDixd0z2edY
za+hPk4c9JGBd9YXnRB99yaB83x3w4BZenGq0bNZXPhlG6EphTsBO/2v1MlmMbH2
FSuNERjtNaf0NqfwDM8f///eZ4wBjBjJLS/5PX/7k10fMMW6fK9y4wglFNhpVqCt
NqZDb1jWShO63hHtO0/Gc4XOneO2PHcKJzSixwokApVTFOFTQCq537Sw8mxvnFgr
GcEzuGpxXRjThPGcyzOYTUOdTdHjvtUU3Ze5niWy3beirXazLXCxlz62tW+YP27a
dKM+1fF6y9aSrg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:33:28 2025 by rpki-client