Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: z19A4EQxQihF6iVRXoMa6uBh5oIm+/IHVoJMeqsNcm4=
Subject key identifier: 8A:22:5B:BD:A7:11:EC:B4:E1:7D:69:A2:1F:7A:F0:9E:77:94:CC:53
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 0198D515B5FB84F529B677A53E982A4808CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 159E
Signing time: Sat 23 Aug 2025 04:00:26 +0000
Manifest this update: Sat 23 Aug 2025 04:00:26 +0000
Manifest next update: Sun 24 Aug 2025 04:00:26 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: 8RdPzvdUPsB6U7L10trHmJ9TBVbQ2F8B2cxIwWESilk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b5:fb:84:f5:29:b6:77:a5:3e:98:2a:48:08:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Aug 23 04:00:26 2025 GMT
Not After : Aug 24 04:00:26 2025 GMT
Subject: CN=8a225bbda711ecb4e17d69a21f7af09e7794cc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6c:29:dd:4d:5d:b5:e5:a8:6b:36:78:c0:e0:
1d:90:6e:cc:bc:02:2c:8f:a5:22:ba:71:72:b6:f9:
e2:09:20:0c:53:b2:83:65:b6:e8:0c:3c:ef:b2:74:
6d:57:d2:40:62:01:39:f1:b0:d5:6d:a2:f6:06:61:
45:02:19:5b:4b:58:1b:13:d3:21:2b:cf:00:7b:a0:
f2:f6:ea:06:7d:5e:25:28:0e:fa:74:c5:a7:4a:9e:
db:eb:7e:7f:06:75:60:82:6a:93:71:7d:a1:ea:fb:
88:9e:d7:58:cb:28:1c:e5:b7:ad:de:a8:42:29:da:
ee:33:f3:94:60:b4:cd:67:1f:df:c4:9e:c5:51:bb:
c3:40:30:d0:fc:3b:a5:d0:f9:02:ac:fc:6f:88:9b:
7e:d2:5e:fb:7f:52:51:21:a9:3c:76:58:d1:76:d4:
6e:45:2e:32:0b:7f:c2:4a:32:33:8a:22:35:a6:83:
be:ca:4e:80:61:6d:b0:39:f7:7a:e4:2c:40:21:04:
a8:50:4b:b8:27:a8:c5:4c:7d:9d:9c:f0:ce:3e:ab:
2c:a3:e3:63:b5:c4:8a:d5:04:14:58:11:a6:e1:43:
52:51:bf:c2:1a:f8:13:ec:b0:01:ce:91:ca:b9:dd:
4f:67:62:0e:45:24:4c:b9:23:60:0c:ff:fe:fe:e2:
cf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:22:5B:BD:A7:11:EC:B4:E1:7D:69:A2:1F:7A:F0:9E:77:94:CC:53
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b5:12:c0:df:3b:b6:97:56:fc:ad:ea:25:55:ba:c3:f7:74:
89:09:f7:a1:f9:9a:1b:3e:7a:d8:91:e8:ff:7e:e8:ea:3e:67:
39:1b:e6:e4:c4:75:14:f7:8d:a3:6a:dd:be:6d:52:de:e6:62:
eb:00:38:82:00:ab:ee:96:09:cf:68:3a:96:2f:c6:34:08:6c:
22:e4:a3:be:34:5e:58:4e:01:0d:6f:07:12:da:c0:da:9b:0e:
a6:85:4d:76:0f:fc:a5:f6:6b:72:b4:1a:f8:44:03:0e:2a:dd:
6c:4b:cb:ea:e1:5a:b5:d5:46:14:91:a0:35:3a:b4:9b:da:75:
de:4c:4b:9c:de:46:68:ce:97:05:ad:3b:78:f4:17:4c:a9:59:
23:7d:4a:4a:da:40:3c:20:18:ba:6c:28:9c:5e:66:7e:49:c5:
47:b5:23:42:35:02:c5:a0:4c:97:45:15:0b:24:5c:6d:3a:ef:
ed:76:1a:4c:7e:99:20:35:e0:a0:f7:02:f1:f4:a6:06:14:1c:
a8:bf:4c:28:97:d8:e4:4f:f5:17:2f:28:18:72:1e:cb:27:b6:
68:35:62:80:f9:65:2a:5d:80:cf:5f:3f:92:e6:57:07:5c:bb:
f0:7d:ab:09:43:2c:87:5f:85:1e:44:98:19:3f:a9:06:38:ff:
e0:9f:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:25 2025 by rpki-client