Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: YOTgwAU0LR1wHnDKrSw5GoOE01W3EP7G6U628i8mv4w=
Subject key identifier: 9F:92:55:37:B6:4C:24:C9:3C:BE:2F:58:C3:39:59:D6:A7:55:6D:52
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019845895EF0A6FF2BAACD2C00BEF15F851A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0C4C
Signing time: Sat 26 Jul 2025 07:01:27 +0000
Manifest this update: Sat 26 Jul 2025 07:01:27 +0000
Manifest next update: Sun 27 Jul 2025 07:01:27 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: DsazQohFVcTTC1djVamsrSGcljhylVTCH6MqHlmk2qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:5e:f0:a6:ff:2b:aa:cd:2c:00:be:f1:5f:85:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jul 26 07:01:27 2025 GMT
Not After : Jul 27 07:01:27 2025 GMT
Subject: CN=9f925537b64c24c93cbe2f58c33959d6a7556d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:2e:81:8e:e5:55:f8:1b:51:8c:21:6d:2b:
17:fd:10:7c:4e:08:b7:14:31:42:98:e5:65:df:ae:
d9:71:af:54:55:7d:bc:69:81:01:07:39:e2:bd:6a:
84:8f:ef:2f:17:04:fd:61:f5:8c:60:20:e4:7e:96:
2f:8c:55:ac:5e:a3:bb:38:eb:af:4c:67:31:4d:9c:
0e:54:4a:26:48:dc:7e:f2:57:7a:15:07:19:f6:e2:
c8:c4:7b:aa:95:97:35:23:32:82:a5:e9:f7:05:d9:
a1:fa:89:f5:2c:26:79:09:03:68:79:88:1c:47:1a:
b2:4f:81:44:9c:67:c2:5d:a3:f7:b3:31:86:95:95:
91:3b:27:64:f9:9f:f5:ab:2f:64:08:c2:47:15:d0:
d6:fd:1b:e0:06:d8:f7:3f:9d:9c:02:a9:ed:42:59:
02:fc:7b:7d:08:86:22:9a:bb:26:87:c6:87:f7:bf:
a1:3b:a1:6d:f1:2d:c4:af:69:26:80:33:68:85:82:
58:69:1a:a4:97:5f:3a:5e:14:32:7d:a0:72:a6:22:
f7:5a:a4:26:ab:7a:ec:69:5c:73:16:a9:44:92:cc:
d2:b0:92:a1:6e:ff:23:8d:b3:77:23:a2:30:1f:22:
1a:01:72:3f:f4:70:fa:bd:cc:22:f9:91:81:88:44:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:92:55:37:B6:4C:24:C9:3C:BE:2F:58:C3:39:59:D6:A7:55:6D:52
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:1e:37:36:54:7e:bc:03:61:66:61:69:b0:24:80:c9:ba:b6:
1f:3f:83:26:cf:ac:39:88:11:16:e1:4b:bc:5d:e1:6f:92:cb:
4b:1b:96:b1:2f:0b:b4:a4:7b:65:4a:b2:55:04:4a:40:25:2a:
ed:1e:f3:48:9c:fb:9a:f6:38:01:2c:0a:56:20:0c:f9:f5:d0:
4f:7e:65:4c:d1:db:80:ee:47:13:83:13:c4:0d:92:f6:6b:c5:
b5:54:2d:91:21:69:31:d3:77:bd:82:4f:b0:b9:71:b5:04:9c:
3d:73:0b:a6:85:50:f8:cd:c0:e4:65:94:f7:32:fd:f3:59:2a:
4d:fa:6f:50:44:db:f8:a5:41:a9:0d:25:f3:ee:78:41:ed:43:
9d:a0:35:a8:a6:fa:4a:f1:20:c3:ee:cd:0c:4b:e4:95:ef:0a:
02:65:63:bc:08:1f:56:eb:67:f3:d8:2d:f5:78:49:1a:b6:5b:
28:e6:24:12:24:60:22:35:93:48:00:29:5b:3b:eb:ef:c1:a4:
a7:5d:61:8b:c9:4c:eb:81:e4:22:52:eb:86:6d:93:e5:dd:70:
dc:73:08:cd:b7:77:26:1d:fe:17:3a:cf:c5:2c:9e:7f:91:9b:
71:07:e4:c4:ad:1e:85:0b:f1:7f:cd:f7:b5:0a:b8:f7:45:8c:
aa:16:9b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:14:53 2025 by rpki-client