Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: qMlqTsgdSU2nLBDOz3sd2tiA3VEBYbHvcAp4u6erK4s=
Subject key identifier: EC:F3:C1:A4:DF:9F:5A:00:C1:B7:92:F0:4C:EC:84:47:F5:43:F0:B8
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019846D1CD72F6AC33737F4283A9390CF15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0D8E
Signing time: Sat 26 Jul 2025 13:00:11 +0000
Manifest this update: Sat 26 Jul 2025 13:00:11 +0000
Manifest next update: Sun 27 Jul 2025 13:00:11 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: nwmG7Jf2o0mg/Pr9tYIePjOn6NeU8r+g0vbVXOKj8j4=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:cd:72:f6:ac:33:73:7f:42:83:a9:39:0c:f1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jul 26 13:00:11 2025 GMT
Not After : Jul 27 13:00:11 2025 GMT
Subject: CN=ecf3c1a4df9f5a00c1b792f04cec8447f543f0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:0b:bd:60:9b:22:ba:02:5d:b4:41:38:74:
e9:74:49:41:34:18:87:3d:23:90:c9:c1:10:c3:da:
ea:01:7f:45:32:47:ab:e7:5c:30:a2:cd:0b:ee:1e:
cb:03:70:ec:f9:9e:09:84:dc:92:61:53:32:01:ae:
09:01:0e:96:34:cc:33:9d:6a:64:a7:46:2d:d8:8c:
26:d3:e7:c9:e7:a2:d7:33:5c:c9:13:0e:aa:fb:c1:
c2:01:68:a8:a7:be:41:a3:ab:f8:64:f9:db:42:06:
6e:2b:d9:cd:b6:93:ed:0b:09:96:41:e2:79:97:8e:
87:00:07:68:fd:a8:26:29:30:71:ab:fc:8f:b0:75:
6a:c5:09:b3:58:06:50:78:ef:70:4e:8d:87:3d:3d:
cf:cb:0d:15:4f:5c:98:18:80:66:36:19:a7:b9:8f:
55:0c:d4:17:c1:f6:b3:0f:54:69:df:74:3d:33:c0:
19:c8:27:75:fa:a1:f3:70:77:88:22:58:74:03:b6:
b5:3a:f1:f0:8f:e0:17:4e:65:62:47:2f:56:9d:aa:
0c:24:fa:7e:3a:47:08:b9:73:2c:10:40:11:07:8f:
55:3d:02:ef:23:fe:6d:da:d3:2d:12:53:6e:4e:bd:
66:ca:dc:4d:2d:0d:f0:97:26:e7:d8:45:0a:10:64:
c9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F3:C1:A4:DF:9F:5A:00:C1:B7:92:F0:4C:EC:84:47:F5:43:F0:B8
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:82:08:a1:5d:bb:99:cd:98:81:9e:8f:ea:10:3b:a1:d2:3f:
8d:1d:8f:96:78:8b:d7:11:1a:a1:64:21:d7:55:5a:26:a0:df:
70:48:d2:14:b0:5a:d6:d0:61:02:a1:d5:28:c5:f9:78:9b:00:
a8:9e:85:66:1a:92:16:7a:3b:b5:19:20:ac:17:a8:3e:7e:28:
bb:e5:bc:b6:5a:ae:f9:f4:8b:db:c0:d6:4e:03:5a:96:57:8b:
56:96:81:20:91:3d:1f:c9:f5:8c:54:43:1a:72:31:4a:82:ac:
5b:7e:37:a3:9c:7e:1f:73:2c:b4:42:fe:0d:15:af:94:0e:b6:
30:86:d3:c9:a5:17:53:bc:02:8c:6f:e2:53:a5:88:33:09:a9:
d5:96:35:c4:6f:9d:52:c1:a0:3c:eb:eb:88:60:25:01:cf:35:
66:5c:20:6e:19:e5:df:65:32:00:25:6d:a7:39:69:b2:10:26:
10:ec:e9:9e:42:11:97:20:a8:6e:0d:1a:70:1f:67:23:26:68:
3e:24:a7:49:c3:22:d0:f3:5a:db:be:77:a2:6d:d4:87:4c:6b:
c5:26:cc:05:82:4c:69:ac:ef:78:df:be:54:10:22:f5:1b:f6:
15:a1:dd:73:53:90:e4:e9:ed:32:01:59:1c:87:1e:06:68:d1:
f8:10:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:54:35 2025 by rpki-client