Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier: wZypKoZTc+yR1LTkYuzcq4jyJpXghjo0GvaiGt0Zh0Q=
Subject key identifier: BA:3B:57:D0:FE:58:48:3B:E2:70:42:95:A7:93:F2:4E:77:49:33:BE
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer: /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial: 01984AE56C4AFD729D7A08E4235E74BA3949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number: 0651
Signing time: Sun 27 Jul 2025 08:00:05 +0000
Manifest this update: Sun 27 Jul 2025 08:00:05 +0000
Manifest next update: Mon 28 Jul 2025 08:00:05 +0000
Files and hashes: 1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=)
2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: Kyz/aRXaVXXSasSE+3F7Cah8pdytvPaCVeFBcsnlwUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:6c:4a:fd:72:9d:7a:08:e4:23:5e:74:ba:39:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Validity
Not Before: Jul 27 08:00:05 2025 GMT
Not After : Jul 28 08:00:05 2025 GMT
Subject: CN=ba3b57d0fe58483be2704295a793f24e774933be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:ba:a4:33:1a:ba:24:a5:7b:21:d0:78:c7:
b6:07:9d:14:e4:3b:0f:b4:82:c1:20:42:ec:c7:15:
ab:75:f8:8b:9f:f3:02:a1:1c:9a:ed:45:43:ff:44:
dc:36:6a:c5:eb:e2:4a:a0:bd:0a:f1:0f:cd:16:b9:
00:9f:2e:05:69:4c:74:10:4a:f9:f8:29:59:6f:c6:
c6:23:67:a3:99:ac:f7:58:2a:28:de:9a:09:0f:46:
6c:de:99:a8:46:16:f3:25:71:03:84:58:c3:6e:0f:
01:cf:02:3a:a6:90:41:76:bf:d0:07:d2:05:f5:80:
9a:ce:92:1e:34:c5:48:46:c0:be:bc:14:bd:fc:fb:
12:af:6c:66:76:6c:e3:3e:e9:af:24:ab:b4:b9:66:
80:8f:9d:ec:7c:97:7c:ff:bc:1b:b7:89:92:0a:e7:
8b:a6:ba:d5:b3:35:dd:67:dc:26:ce:cd:43:37:3c:
b4:82:9c:2a:33:2f:64:e8:fb:3e:76:a5:ca:1a:d4:
b8:0c:a5:4b:2b:53:11:99:50:a7:de:61:5b:fb:e0:
b5:8f:74:6c:84:4a:ef:5d:ff:bd:fe:fd:70:ad:cf:
0c:60:9c:18:11:de:85:c9:b2:7f:5d:c5:8f:4f:46:
85:ee:33:5c:04:23:9f:74:d5:94:54:3f:93:69:d9:
cf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:57:D0:FE:58:48:3B:E2:70:42:95:A7:93:F2:4E:77:49:33:BE
X509v3 Authority Key Identifier:
keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ed:a4:ce:9d:68:d0:25:18:7a:12:fe:77:56:02:2b:6d:7a:
97:55:40:d8:58:5c:55:a6:7e:cf:f1:c4:2c:c6:94:19:98:50:
18:80:1e:ee:22:a6:0f:b0:7d:20:cc:8f:63:55:5c:4b:0c:83:
c3:82:bd:c2:ca:d3:91:61:04:6f:dd:9c:95:c9:a1:1f:d8:53:
69:48:b2:83:77:d8:07:b4:a7:48:c6:83:3d:43:71:69:1a:dd:
ab:0a:93:16:a7:b7:61:03:b0:23:be:8d:63:15:e8:2c:d6:12:
0e:4b:9c:54:e2:62:23:20:95:c7:61:21:63:3b:c5:9e:70:c9:
98:be:76:cf:04:fe:73:6f:60:12:55:8e:03:30:56:11:83:17:
28:08:70:ee:42:2c:c2:d5:19:a3:18:a4:4f:0c:16:2b:f0:02:
cd:95:d9:af:fb:96:bd:83:08:6c:fe:c4:8a:42:81:8f:90:63:
b5:d0:85:be:70:66:93:58:d5:37:2c:22:39:5e:70:52:bd:f7:
ab:20:cf:e9:06:43:d1:59:41:06:41:6a:e4:da:76:b5:23:79:
b7:1e:a6:d0:99:22:8b:49:ac:3e:76:d2:ac:6b:34:95:33:3b:
b4:90:52:1f:93:f5:bf:ae:d8:56:52:b2:07:c9:25:ae:5b:f6:
77:68:39:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:36:38 2025 by rpki-client