Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: TerexeUr5z3G5/+T/LgQva+f9ca5jCYBRtcsr+keQ+g=
Subject key identifier: DE:DA:BC:23:93:2F:6B:48:C8:42:79:B8:FD:FD:9E:65:49:4F:90:5D
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019A1FF651880320FFD243FEF2857D6C2BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0E83
Signing time: Sun 26 Oct 2025 10:00:27 +0000
Manifest this update: Sun 26 Oct 2025 10:00:27 +0000
Manifest next update: Mon 27 Oct 2025 10:00:27 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: 3citIfUrr2wOwBJ5iEclhGD0CBZTIgP1rIvGkDSwEO8=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:51:88:03:20:ff:d2:43:fe:f2:85:7d:6c:2b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Oct 26 10:00:27 2025 GMT
Not After : Oct 27 10:00:27 2025 GMT
Subject: CN=dedabc23932f6b48c84279b8fdfd9e65494f905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d7:40:4f:82:54:09:61:38:f0:32:a7:86:f8:
a7:2c:ca:71:cc:af:2d:e8:f7:64:36:2a:a0:e5:a8:
18:43:b6:f7:28:ff:af:43:db:d5:ef:77:54:2f:de:
10:b7:c8:4c:8e:d1:ec:5b:db:34:b3:89:26:1e:d0:
94:ee:4d:d3:fa:66:35:68:56:af:ba:fa:38:ba:c9:
34:27:3a:d0:d8:b9:30:9a:5e:c8:cf:9b:7f:52:f0:
3d:ae:6f:34:b1:5f:83:fd:80:db:84:61:d2:ee:c7:
e2:04:4b:56:af:94:fa:0d:61:a6:17:55:e2:74:82:
c9:b3:18:27:ad:a0:bf:ec:49:22:f2:12:2f:fa:e7:
b5:5c:ae:1f:97:9d:c1:68:c0:c2:3d:6e:67:74:7b:
3f:1e:a9:a0:77:90:13:69:fa:9f:6d:10:6e:9a:72:
0c:cf:13:16:c8:e1:b4:37:83:6b:16:c2:d1:06:0a:
62:47:e5:26:72:7f:f4:80:cc:b2:39:73:e8:8f:fc:
dc:cc:1d:f7:d4:a8:b4:8d:06:f6:9d:3d:a4:5f:87:
64:07:15:2a:b2:45:0a:c7:88:b2:46:7b:18:53:d2:
8a:67:30:38:59:37:09:93:4a:48:1d:5b:59:40:cc:
53:bf:59:98:d7:96:71:a1:42:b9:00:1b:c8:b9:b9:
a0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:BC:23:93:2F:6B:48:C8:42:79:B8:FD:FD:9E:65:49:4F:90:5D
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fe:a8:3b:d3:4b:ab:3e:67:7e:70:78:c3:e6:c3:80:70:0f:
5d:d3:d4:60:5b:2b:06:04:93:37:5f:07:41:eb:40:85:b6:15:
86:c2:1d:fb:fa:32:6a:60:a3:4a:15:bb:36:0f:0e:20:8f:45:
8d:3c:33:1c:6a:19:2a:71:f2:97:60:5f:61:0f:cc:de:77:41:
dc:11:04:4a:60:27:af:03:5c:c1:f1:60:33:ee:0e:1e:e8:e3:
92:2a:26:67:57:4b:9e:30:dd:44:e3:3d:ee:6c:a6:ac:78:a9:
93:ba:67:08:d4:9a:e5:27:cb:8f:62:ce:93:32:ef:2c:97:c9:
53:9b:9f:52:a9:6b:7d:eb:34:4c:97:6a:f5:16:54:7d:01:4b:
2b:ec:e2:f9:c2:3d:09:51:28:74:4a:18:53:fe:04:d6:b5:e7:
08:44:6e:ee:03:e0:98:0b:a9:45:ef:6e:ae:84:eb:0a:f0:30:
91:da:a0:ca:49:4a:ca:af:ee:3a:75:1a:48:f6:21:93:16:db:
bb:55:92:00:4c:a7:93:98:c3:f4:09:fd:a8:bd:1b:95:15:ac:
45:28:c5:5e:d4:3f:98:8c:20:b9:99:82:79:07:7b:03:ce:5b:
4f:32:2e:d4:bf:30:b9:65:43:02:9c:27:f7:a7:90:8c:8a:ec:
3d:bc:98:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:46:29 2025 by rpki-client