Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: JDZfvVOYuntI55ofVrFUVSATnJ3jcyUs1NGM4iBtH8k=
Subject key identifier: C6:38:B9:69:18:86:84:BC:D5:83:EE:D5:4C:4A:78:8A:C2:AC:10:7D
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 0198462D31C4ECE8C1140E5D16750CAA457F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 1554
Signing time: Sat 26 Jul 2025 10:00:23 +0000
Manifest this update: Sat 26 Jul 2025 10:00:23 +0000
Manifest next update: Sun 27 Jul 2025 10:00:23 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: 4O/yQDuuYDn9a0qZaOsojfMnff24IpR+hAkuqNYydOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:31:c4:ec:e8:c1:14:0e:5d:16:75:0c:aa:45:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Jul 26 10:00:23 2025 GMT
Not After : Jul 27 10:00:23 2025 GMT
Subject: CN=c638b969188684bcd583eed54c4a788ac2ac107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:61:fa:95:01:f6:6a:20:69:1f:5a:36:3a:
94:2e:cd:6c:cd:1a:81:af:9b:18:77:08:18:b8:db:
68:b4:48:fa:3f:fb:5e:60:21:02:7b:92:a8:2c:d1:
a8:9a:89:18:d9:0b:5e:a5:b1:08:9d:71:08:a4:50:
81:2e:07:3d:27:a9:70:b0:a1:3b:18:12:7d:00:54:
b1:f4:ff:fc:1e:34:39:bd:01:3e:55:cb:58:4a:cb:
0a:86:df:07:02:69:6c:42:e1:9d:7e:bc:0b:9f:23:
b7:f9:b0:5f:0d:5c:6d:3c:7f:f3:02:3f:13:cf:dd:
64:0a:4e:ce:2e:f0:fb:f2:ef:a4:f1:63:03:41:75:
a2:41:ea:4c:1b:03:d8:29:9b:40:f1:45:8a:e5:bd:
8a:f1:a7:a1:05:80:d1:4a:80:bc:a0:92:a1:e6:a6:
11:bb:f8:a9:01:5d:02:e1:3a:56:cc:d0:fe:c8:8f:
61:28:fd:e3:2c:81:0d:eb:b8:1a:70:bf:fc:09:25:
40:f9:4a:b7:d3:57:d3:3d:b3:f5:88:d3:b2:49:ec:
a1:35:ae:9b:01:dc:2c:0d:02:09:4d:63:bd:84:a2:
90:00:56:0e:cf:32:e2:f8:69:5b:08:65:27:ae:aa:
8d:db:87:c4:8d:07:07:f6:1a:61:aa:ac:4d:98:9e:
6a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:38:B9:69:18:86:84:BC:D5:83:EE:D5:4C:4A:78:8A:C2:AC:10:7D
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:87:49:02:08:f9:82:75:11:4b:c9:d6:12:c4:fe:aa:54:
34:ad:d0:6b:bd:20:9e:56:01:6f:32:b5:0d:41:0e:00:02:8a:
01:ba:b0:10:da:55:46:c5:21:44:ff:5e:b1:87:e7:49:47:85:
98:0f:50:49:e1:d6:ec:59:03:74:42:5c:93:7e:81:b3:10:7d:
7c:78:b9:17:91:c1:65:26:2d:7b:bb:14:df:da:2c:be:15:cc:
2b:fe:bd:b2:44:18:30:9e:1c:56:af:de:2f:aa:1a:b9:9d:14:
62:15:a9:62:d3:8b:95:ad:db:4b:26:2c:b1:3f:5d:05:bb:ae:
67:ec:3a:eb:c7:ae:4d:d9:c4:5d:d4:12:65:b8:ca:d9:9c:f6:
3f:c6:3d:6c:43:ab:e0:25:3b:72:23:16:87:fd:93:f2:f0:47:
a2:ce:ce:8f:01:e0:1b:e2:96:d3:91:27:7c:36:cb:43:c4:cd:
25:a2:dc:dd:83:43:ad:21:9a:59:eb:ca:49:d9:fb:92:17:08:
64:44:9f:ec:20:b3:68:0a:5a:00:70:4d:76:bc:f5:09:4d:6f:
ba:be:f2:67:d5:bc:4c:6c:05:4a:51:aa:2e:3f:ef:7b:e0:bc:
45:9b:5c:ec:50:7b:4f:55:54:4f:08:a6:a9:18:5c:25:fc:ca:
d5:54:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:57:37 2025 by rpki-client