Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: n0XMLSdlEiqckNS5ZalS6kzDY6pz5wWNQ7gXASqzXQI=
Subject key identifier: 78:A9:63:04:D7:5B:86:A2:5F:37:9B:1E:CF:D6:2F:F0:44:2B:CC:C2
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 019935371783A87A7142D1B13F298CE08B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 20:00:26 +0000
Manifest this update: Wed 10 Sep 2025 20:00:26 +0000
Manifest next update: Thu 11 Sep 2025 20:00:26 +0000
Files and hashes: 1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: 44suk0gW30YxWcHhsP7KaQ2tmV44UNogD/I028muXGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:17:83:a8:7a:71:42:d1:b1:3f:29:8c:e0:8b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Sep 10 20:00:26 2025 GMT
Not After : Sep 11 20:00:26 2025 GMT
Subject: CN=78a96304d75b86a25f379b1ecfd62ff0442bccc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:bb:17:28:34:e5:4a:60:cb:93:24:bb:44:
86:f1:b7:ba:45:e5:eb:a2:06:76:0b:0e:5d:63:83:
5f:f5:39:d2:e3:97:b4:24:bc:66:e9:37:e4:91:ed:
68:69:49:ab:d3:c3:b5:12:16:b5:cf:20:7f:fd:18:
33:38:dd:55:11:e2:f4:a6:3c:24:75:be:c8:6d:c4:
16:34:e4:f3:b0:b7:bb:48:f3:28:61:60:1c:bb:6e:
d7:04:1a:5b:e9:40:92:cc:74:3e:c1:e1:d1:17:ea:
42:4b:6f:e4:51:37:f8:ff:8d:fa:e6:04:48:96:37:
dc:36:2f:8a:3c:c8:a6:69:b4:58:cf:03:12:3e:1f:
30:56:e6:86:06:5d:d2:35:58:31:c2:30:20:57:61:
c0:f0:31:00:59:b3:7a:4d:90:d0:2e:7e:95:b6:40:
9e:8d:71:82:84:f0:bd:aa:e8:56:cd:59:3e:ae:9e:
94:a5:1a:0c:64:c7:e4:f0:bd:6b:a9:7f:bc:ee:2a:
3c:a9:00:44:c0:03:69:a7:dc:19:98:e6:e8:8d:1d:
83:e0:66:00:7f:30:a3:22:72:82:ff:6c:53:6c:99:
3f:82:64:89:47:95:84:b6:27:2a:3c:58:c2:dc:2e:
91:cd:0f:ab:95:79:bb:75:51:f9:01:ee:94:7a:cb:
74:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A9:63:04:D7:5B:86:A2:5F:37:9B:1E:CF:D6:2F:F0:44:2B:CC:C2
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:c8:57:1a:29:1a:09:40:b2:ca:79:fd:73:49:0d:5f:be:
3f:ef:14:8a:a0:86:e4:d9:96:89:4a:fb:af:12:88:87:98:1e:
0f:2e:37:0e:5c:01:1d:da:73:b7:b2:d8:1d:e2:38:d4:ce:07:
eb:37:7b:5b:9a:e2:57:0c:97:99:41:20:3f:11:18:a0:09:49:
91:1e:f2:fc:b5:fc:e6:04:b8:c4:b7:6d:3f:e8:bd:b5:62:0d:
8b:09:77:c2:ab:55:6a:c4:fd:81:77:ee:f7:82:05:15:e4:a8:
d9:df:56:d9:f8:d4:f0:47:d1:a5:e7:20:77:ec:64:6a:b2:99:
87:32:55:48:a3:96:5a:33:85:5a:ef:52:3b:40:e0:39:02:16:
c4:34:d7:8e:9a:ba:ed:61:cd:5c:38:c3:fb:5d:64:d0:7d:f2:
a5:ad:b8:aa:c5:a0:7d:52:51:f6:49:d1:ca:0a:a5:86:8a:ee:
38:b1:e3:fc:c9:21:b6:ae:41:ba:7e:9d:88:98:e5:8e:e6:37:
46:94:40:06:47:aa:06:e9:34:65:8f:7d:c5:a5:e3:54:41:bb:
fc:32:4c:de:d0:a7:c4:e3:7f:2e:dc:32:fd:d9:58:61:47:53:
3a:d8:eb:c0:3a:82:c6:02:d0:02:42:a3:fc:ae:cb:f6:af:54:
27:d4:e4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 00:22:48 2025 by rpki-client