Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: VPtCB7BBFjDzHwAQVj9Hn+2r215o/2UgF1iUyicVwHs=
Subject key identifier: 75:79:65:FA:EF:9A:D9:39:1C:7A:87:D7:CE:FD:BB:61:9D:D1:B5:3F
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 0198499BDDA94AD1033C13E1A4A51C0B85F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 02:00:08 +0000
Manifest this update: Sun 27 Jul 2025 02:00:08 +0000
Manifest next update: Mon 28 Jul 2025 02:00:08 +0000
Files and hashes: 1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: ymGlLIGrcDnOkBCuHsXE8w7ZVtvyxZ6do/zuM3AePo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:dd:a9:4a:d1:03:3c:13:e1:a4:a5:1c:0b:85:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Jul 27 02:00:08 2025 GMT
Not After : Jul 28 02:00:08 2025 GMT
Subject: CN=757965faef9ad9391c7a87d7cefdbb619dd1b53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:30:7a:02:16:01:90:ec:89:f4:9b:85:d8:
36:44:03:79:1c:0a:cc:42:42:3c:1c:3b:56:bc:b8:
65:c9:46:16:e6:75:de:ea:9d:2a:d7:2e:2b:d4:bb:
31:b3:3b:93:f7:9b:25:5a:c0:6c:29:25:e5:c8:f8:
16:ee:cd:b1:cb:8e:57:b1:1a:91:fc:2f:ee:dc:d4:
ad:9c:36:76:75:5b:c4:7e:a9:4e:36:05:e4:ef:72:
47:fe:ee:89:73:22:f2:89:70:c0:ac:b1:83:d1:0a:
00:02:17:26:d6:65:69:f3:23:f9:9d:02:81:22:7a:
88:b1:49:45:b2:5e:2f:18:1a:53:a4:c5:ca:f1:dd:
28:ba:fd:c5:81:a2:a9:86:b7:5b:12:d0:40:97:7c:
eb:48:f9:91:cf:20:05:d2:3f:ed:68:fe:1a:71:f7:
1a:33:27:d0:ca:71:ed:60:e9:c0:8b:8d:f4:eb:3a:
cd:63:a2:86:b3:ea:e6:fd:2b:7f:5e:ca:d1:94:ff:
54:bf:12:26:8c:5d:ec:c3:58:f8:2d:86:38:62:a9:
83:29:5b:76:08:32:f3:a7:a5:e4:6b:84:ab:b2:2e:
76:93:6d:1e:a8:44:41:e5:f1:6e:22:00:19:af:4f:
6e:7a:40:1c:cc:19:8e:b5:d7:83:3b:0f:3e:bb:4c:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:79:65:FA:EF:9A:D9:39:1C:7A:87:D7:CE:FD:BB:61:9D:D1:B5:3F
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d9:a3:4a:dd:78:17:62:7c:3c:86:72:d1:e2:fa:3b:77:2f:
a1:f7:d5:84:e5:29:d4:95:99:d2:1d:ad:23:21:84:58:5a:0c:
fe:ca:6f:c8:d1:70:3c:4c:16:5b:3c:38:d0:aa:4e:21:87:81:
09:3c:90:83:74:cb:f7:9d:f6:c5:5b:3f:52:ea:0d:7c:89:88:
68:f1:32:ff:6c:09:d8:e5:27:47:e8:89:a6:31:3c:22:78:14:
da:c9:bb:43:25:51:7d:45:20:3c:8b:7d:a6:f7:39:f5:83:d1:
e3:d6:ed:7d:87:9c:25:c8:be:02:d7:ae:fe:86:fc:3b:40:01:
04:97:17:f6:e3:df:c6:27:80:91:07:24:82:4b:cd:aa:f2:5c:
ef:a4:b1:de:cd:ff:70:5a:10:c7:c8:7e:74:44:4e:c9:e5:fe:
cd:20:3f:17:31:73:b3:f0:43:8a:f3:50:01:5b:96:ab:1f:fd:
e9:29:e1:d0:d5:d0:b7:0a:6e:4a:b9:24:3b:d3:65:1d:09:fc:
00:c7:a5:32:9c:2b:0f:8f:e7:56:eb:11:b2:c3:d2:8d:b4:2a:
5d:c1:2f:30:01:90:52:20:f1:3f:b9:a9:7b:96:5d:2b:1f:ef:
e8:b7:59:1b:eb:e5:ad:d5:c8:b6:51:94:33:1d:b3:9d:49:5e:
03:46:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:07 2025 by rpki-client