Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: VIJ+4fL/NzOUfEWLYT7AGEAE9C0UAHnSD/1GL7pvHfE=
Subject key identifier: 6A:DD:C8:AA:C1:0B:68:FE:42:2E:07:D9:89:A7:4B:9F:94:89:BA:E2
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 0198D5BBA4AD283D1FAB7034BE579F1E135A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0DD8
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 7W4FI8g4lzkJTp4wz7XXbpTg+Dry5TlsFZ/cjldwwc0=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a4:ad:28:3d:1f:ab:70:34:be:57:9f:1e:13:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=6addc8aac10b68fe422e07d989a74b9f9489bae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:24:b0:51:a6:c3:8c:03:53:49:4f:4a:e5:
e8:da:74:9c:6c:97:ce:b7:d1:32:12:e0:c7:f3:8f:
3e:57:b1:92:d4:f8:94:ab:4e:96:84:66:42:85:51:
b3:19:83:a1:21:46:cc:1c:f6:cc:1b:10:cb:c0:84:
73:64:11:ec:22:44:d1:dc:02:51:c2:8f:3c:5e:27:
38:62:6d:15:05:5d:11:93:52:ea:9f:ea:99:e3:6a:
a4:63:9f:4d:f6:74:a9:6c:c3:49:98:f5:e2:9d:20:
fd:fb:a5:b2:d5:d1:c2:f8:37:8d:3f:83:d8:10:69:
19:3e:9e:2c:a5:52:c8:c3:35:a5:1d:07:73:d4:80:
e2:46:e2:4a:50:e0:8d:61:3a:14:f6:89:56:62:50:
bf:20:ed:0b:27:b9:29:6f:3e:ee:f9:66:77:30:80:
e4:1b:c7:bd:0f:86:fa:c5:71:4b:29:95:e6:1f:f4:
99:f7:4f:14:29:67:0b:09:b8:35:8c:54:72:91:7b:
04:5e:4c:f2:52:17:b4:39:58:6b:b5:96:91:c3:9a:
05:93:99:39:6d:aa:d2:56:62:c2:7d:c6:07:1c:6f:
ca:06:98:5e:f6:6e:90:a3:3a:af:1c:e9:fd:19:11:
15:57:88:b1:c8:f1:d0:71:13:cf:87:c7:40:ec:43:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DD:C8:AA:C1:0B:68:FE:42:2E:07:D9:89:A7:4B:9F:94:89:BA:E2
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:cc:ec:b3:03:17:0e:92:c7:c4:3e:34:1d:9d:fa:4f:cb:ec:
92:d6:8f:33:76:ce:2b:ad:34:a5:75:b4:00:b8:eb:80:18:72:
7e:72:d8:8f:2f:93:17:25:6c:2f:50:49:99:41:6e:76:69:e8:
16:84:0d:d7:bc:35:e9:54:ab:a4:af:50:1c:c9:e3:38:e5:78:
2d:8c:ae:e3:52:e2:25:9c:8f:4e:2a:61:c8:61:f3:e0:98:38:
24:b2:ea:10:89:0c:31:ea:bd:0f:9e:2a:82:61:84:21:98:7d:
b8:20:75:da:6a:61:26:b5:fc:b2:3c:73:4c:05:04:e1:89:2c:
91:3d:b9:da:55:5a:e7:e9:3a:16:db:ba:15:cd:87:d8:bc:a7:
38:26:b0:4e:15:4a:51:53:82:5f:67:5a:8a:b9:fb:f5:ce:7f:
91:87:1a:84:9f:1f:83:cb:6d:3b:e2:c8:4d:2c:19:52:09:af:
a6:00:45:59:ed:76:42:06:ac:e6:c6:14:29:5a:92:ea:b3:e1:
98:7c:ed:52:c6:84:c0:48:37:06:9a:c7:b9:4a:68:7a:10:0b:
7d:47:5e:85:f3:d6:5e:33:25:66:b5:95:17:07:e5:58:9a:aa:
bf:69:a1:e1:4b:a4:a4:51:cd:ca:a9:17:57:b1:c1:43:78:18:
9b:95:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:50 2025 by rpki-client