Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
File: pgD8lkBCiaxYthBH3fhiGH9asn4.mft (raw, json)
Hash identifier: 0yy6XvG7MpI7cEAME9rL0Ik9IimMWYIVprxmu9GUb9g=
Subject key identifier: 50:18:9E:97:EA:EA:49:E1:5C:89:36:5B:4C:81:F9:48:2B:5C:C5:98
Authority key identifier: A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
Certificate issuer: /CN=a600fc96404289ac58b61047ddf862187f5ab27e
Certificate serial: 019A24AEDDFFF36FE076C1FB878748CC19B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 08:00:31 +0000
Manifest this update: Mon 27 Oct 2025 08:00:31 +0000
Manifest next update: Tue 28 Oct 2025 08:00:31 +0000
Files and hashes: 1: BFaJClF3p4qT7dCc22lWmwjl7l0.roa (hash: 8kW6E4fmgwFFVui51mNwFwgDzJW114zoN23nienu6x8=)
2: pgD8lkBCiaxYthBH3fhiGH9asn4.crl (hash: qnRh3CDYiDCOIUOoL32t8XY7bLOVZDYjOHoyX1FweII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:dd:ff:f3:6f:e0:76:c1:fb:87:87:48:cc:19:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a600fc96404289ac58b61047ddf862187f5ab27e
Validity
Not Before: Oct 27 08:00:31 2025 GMT
Not After : Oct 28 08:00:31 2025 GMT
Subject: CN=50189e97eaea49e15c89365b4c81f9482b5cc598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:30:02:f0:38:f1:00:e5:06:82:1b:4e:28:83:
80:2d:20:bb:ff:8d:e0:a2:c9:ed:d5:a0:c4:f6:ca:
20:d5:ad:47:73:dc:c1:ab:12:a9:05:c1:a9:1e:c0:
e4:68:00:61:22:a1:42:0a:b6:8b:7a:ec:be:8f:15:
0e:13:29:37:bb:22:91:cf:42:07:96:bc:af:32:eb:
e3:dd:dd:3a:b9:9f:38:bd:a0:50:c5:80:d6:be:ad:
b6:4a:17:fc:e3:3f:9d:cd:94:61:34:94:2c:bb:60:
85:5c:03:92:76:b4:83:54:84:c4:65:ca:e8:77:40:
ff:ab:6b:9e:76:ca:48:c6:e3:aa:68:2c:81:77:47:
36:2e:1e:4e:f7:12:88:f9:97:61:8f:54:54:4b:1e:
45:c0:e4:e2:3c:8e:e4:c1:e8:8d:5d:22:cd:22:e1:
61:2c:b3:01:e5:f8:ae:57:7b:27:77:aa:b2:5b:6b:
15:6f:02:c2:6f:04:dd:86:b7:0e:7e:26:82:30:e0:
7d:f1:63:43:15:39:45:3a:5d:3c:11:ad:41:6b:94:
31:02:fd:62:87:a1:46:5d:17:4e:48:fd:21:88:89:
25:e2:22:b6:60:fe:22:9f:eb:ac:1e:44:b8:3a:f7:
2b:2d:40:e6:f2:61:b6:05:3f:14:29:c0:7a:7c:58:
3d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:9E:97:EA:EA:49:E1:5C:89:36:5B:4C:81:F9:48:2B:5C:C5:98
X509v3 Authority Key Identifier:
keyid:A6:00:FC:96:40:42:89:AC:58:B6:10:47:DD:F8:62:18:7F:5A:B2:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgD8lkBCiaxYthBH3fhiGH9asn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3d7b8a-e074-4f16-a629-2128d840c429/1/pgD8lkBCiaxYthBH3fhiGH9asn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f1:9c:04:66:cb:0a:5b:68:52:8a:9f:d4:b6:22:28:39:ff:
50:4e:00:11:b2:2d:f2:3c:48:25:c8:e1:90:ea:f3:5b:fc:db:
4f:ae:9d:3a:69:6b:4d:09:83:19:80:3a:4c:7e:bc:4a:ad:a5:
22:82:31:43:15:03:c0:9b:da:1f:57:18:7a:78:95:4b:ae:d8:
9e:0c:b2:77:64:2c:7a:1f:bc:82:3c:95:0f:be:fe:88:2c:e2:
fa:44:b1:b3:d5:0a:b2:74:28:c4:86:bb:6c:71:57:f9:34:a8:
bc:e3:6f:1d:cd:bc:98:51:bc:61:b0:f5:81:2d:23:b1:66:c9:
33:de:ac:62:ff:ad:05:5a:50:4c:95:5d:dd:f3:a8:84:81:0e:
08:a1:b3:ce:8f:10:e0:27:13:b8:5d:90:8a:a1:27:fa:8c:c8:
7a:d6:e4:17:31:3d:04:12:18:07:dd:4a:b4:26:37:c5:45:bf:
f9:f3:2d:a3:c1:9c:e9:3e:6b:0c:36:2c:8a:37:68:f4:df:be:
77:73:5c:2c:05:20:3b:4d:57:d4:c7:4a:11:1e:0d:49:fe:3a:
25:82:a0:5a:0e:dd:26:ec:b9:a0:df:e3:7a:ca:b2:53:3a:f9:
ea:56:69:50:91:6b:dc:f6:2d:f5:a6:55:74:e4:99:33:fe:36:
a5:a3:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:15:58 2025 by rpki-client