Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: t3ZNIIzkNCmZug41cLvCYD9fAKhpC9RnoMiSj+t2utI=
Subject key identifier: FA:58:3F:72:9D:2C:C2:BA:52:BA:64:3E:C9:7F:3E:F5:01:BF:3F:F1
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 0196BC36FC834F097BFA2B7D77DBA9E7FDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 1488
Signing time: Sat 10 May 2025 22:00:42 +0000
Manifest this update: Sat 10 May 2025 22:00:42 +0000
Manifest next update: Sun 11 May 2025 22:00:42 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: v+2AjcfGPVg2L0glOcef4LSR2HwQLpPzR/wN2ZU27ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:fc:83:4f:09:7b:fa:2b:7d:77:db:a9:e7:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: May 10 22:00:42 2025 GMT
Not After : May 11 22:00:42 2025 GMT
Subject: CN=fa583f729d2cc2ba52ba643ec97f3ef501bf3ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:03:51:3c:ba:fb:b7:8d:66:ef:e5:e3:b5:44:
c4:e6:96:dd:27:af:b6:fb:93:ab:2a:cf:2b:36:48:
31:66:bc:c8:1d:03:1d:51:99:3a:be:d9:3c:c1:5f:
40:ee:4b:5a:9b:17:af:47:3c:cb:76:2d:3e:22:07:
a9:d3:a6:e3:5c:59:96:a7:03:65:04:31:3f:87:5e:
62:e4:93:60:30:e4:a6:dc:64:6d:1f:af:d7:93:dd:
f6:40:ca:d4:74:24:12:11:3b:8a:7e:01:0e:f9:22:
9f:99:8c:c2:77:23:70:80:8e:dc:c4:83:3e:19:ce:
43:b1:49:50:0e:05:32:b8:16:4a:5e:b6:15:2b:9c:
8b:b9:cb:f9:af:68:53:9d:96:b8:ae:1a:39:80:4b:
b5:1c:6e:0f:7c:13:f9:8f:17:e1:4f:e0:c0:49:55:
c5:58:73:7b:0f:2c:f1:c2:9b:35:ea:a4:93:66:7a:
af:57:24:70:da:22:70:8c:78:f6:b0:53:dd:53:e7:
4d:8f:49:c7:00:67:b7:52:e8:aa:43:fb:62:f4:65:
bb:c6:1e:2b:29:29:76:84:1d:54:2c:fd:27:a3:3f:
35:8b:e3:0b:0c:d0:46:13:9c:fb:f7:06:e4:bb:ba:
4e:0d:63:0a:52:83:f2:96:9d:7b:27:a5:61:6a:d5:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:58:3F:72:9D:2C:C2:BA:52:BA:64:3E:C9:7F:3E:F5:01:BF:3F:F1
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f0:cf:e2:43:aa:01:2d:82:af:05:24:1b:8d:a4:1e:e8:56:
5b:6b:d2:01:73:72:9e:ef:9e:43:77:c3:da:3a:5c:b0:83:33:
3f:02:02:8f:07:18:75:65:42:84:47:f7:41:93:1c:e2:ae:2b:
66:e0:e1:89:ab:1d:c2:3b:b5:3f:ec:97:e0:31:2c:da:b4:92:
b9:0e:93:28:ad:ee:ce:46:b0:6b:4a:46:5b:a5:87:5c:dc:79:
16:c3:70:f0:c3:1c:f8:48:91:9a:dd:c0:d2:32:3b:ff:80:57:
6f:ca:a4:89:cc:d5:5b:44:3e:5f:cd:cf:f6:92:39:e0:b6:50:
67:ff:f6:86:74:ee:e6:60:45:a4:d7:e0:8c:73:38:39:a8:7b:
ef:a6:0e:71:f9:a6:dd:bd:b6:bd:da:e3:14:c5:5d:b7:72:e2:
d4:d1:51:57:be:47:79:9e:34:74:ee:61:30:81:13:72:5b:10:
8a:ad:47:51:08:91:9e:c0:eb:36:c9:ba:b6:32:e8:3b:33:9d:
e2:bc:09:db:88:86:74:69:52:3c:41:a7:ab:12:68:2b:8b:58:
a5:43:d6:c1:05:33:e4:62:38:84:7a:bc:f8:e2:8e:a0:18:7a:
97:ed:bd:a9:8a:c1:ff:87:77:a3:08:26:8d:bb:cb:1c:44:a0:
82:4e:85:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8NvyDTwl7+it9d9up5/3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0MmQ3Y2JhZmM5ZGQzMjA1ZDI0N2Q2NjJkODVhZmRk
OWExODYwHhcNMjUwNTEwMjIwMDQyWhcNMjUwNTExMjIwMDQyWjAzMTEwLwYDVQQD
EyhmYTU4M2Y3MjlkMmNjMmJhNTJiYTY0M2VjOTdmM2VmNTAxYmYzZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwNRPLr7t41m7+XjtUTE5pbdJ6+2
+5OrKs8rNkgxZrzIHQMdUZk6vtk8wV9A7ktamxevRzzLdi0+Igep06bjXFmWpwNl
BDE/h15i5JNgMOSm3GRtH6/Xk932QMrUdCQSETuKfgEO+SKfmYzCdyNwgI7cxIM+
Gc5DsUlQDgUyuBZKXrYVK5yLucv5r2hTnZa4rho5gEu1HG4PfBP5jxfhT+DASVXF
WHN7Dyzxwps16qSTZnqvVyRw2iJwjHj2sFPdU+dNj0nHAGe3UuiqQ/ti9GW7xh4r
KSl2hB1ULP0noz81i+MLDNBGE5z79wbku7pODWMKUoPylp17J6VhatXwXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpYP3KdLMK6UrpkPsl/PvUBvz/xMB8GA1UdIwQY
MBaAFKYOQtfLr8ndMgXSR9Zi2Fr92aGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzkt
NjQxZDQ1NjI4M2M0LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzktNjQxZDQ1NjI4M2M0
LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvDP4kOq
AS2CrwUkG42kHuhWW2vSAXNynu+eQ3fD2jpcsIMzPwICjwcYdWVChEf3QZMc4q4r
ZuDhiasdwju1P+yX4DEs2rSSuQ6TKK3uzkawa0pGW6WHXNx5FsNw8MMc+EiRmt3A
0jI7/4BXb8qkiczVW0Q+X83P9pI54LZQZ//2hnTu5mBFpNfgjHM4Oah776YOcfmm
3b22vdrjFMVdt3Li1NFRV75HeZ40dO5hMIETclsQiq1HUQiRnsDrNsm6tjLoOzOd
4rwJ24iGdGlSPEGnqxJoK4tYpUPWwQUz5GI4hHq8+OKOoBh6l+29qYrB/4d3owgm
jbvLHESggk6FRw==
-----END CERTIFICATE-----
Generated at Sat May 10 23:45:25 2025 by rpki-client