Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: /Tc/+QCuiztI/CGlmpVucJji9ogO6LRBq0Kh5Aniyeo=
Subject key identifier: 2C:93:B9:1C:36:65:A9:53:09:6C:B6:41:02:CE:C9:1C:84:4C:E6:A5
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 019A2B1EA8B627D825CA4F3A3BB9C3DC1720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 09B1
Signing time: Tue 28 Oct 2025 14:00:20 +0000
Manifest this update: Tue 28 Oct 2025 14:00:20 +0000
Manifest next update: Wed 29 Oct 2025 14:00:20 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: 7KU09RNPNaxSEMJWHr0uVAS5QnSv9u238Z9xlBpsMIo=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:1e:a8:b6:27:d8:25:ca:4f:3a:3b:b9:c3:dc:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Oct 28 14:00:20 2025 GMT
Not After : Oct 29 14:00:20 2025 GMT
Subject: CN=2c93b91c3665a953096cb64102cec91c844ce6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:ab:90:6a:2f:96:be:13:74:56:9e:3d:1a:
81:66:f0:dc:56:ee:1a:a4:05:08:01:d4:3c:50:58:
6b:06:62:70:05:a7:ba:60:38:39:5f:15:27:b4:c9:
ca:48:96:2f:f5:a4:95:6a:2c:0e:94:75:6a:38:3d:
5b:c1:2d:14:17:86:86:3d:a3:1d:e5:fd:c6:2d:14:
f7:c5:60:69:06:a1:3d:89:36:3e:ff:24:1f:e3:48:
1c:df:a9:17:9c:d0:2f:b1:4f:f7:ee:89:0d:cf:76:
3d:16:04:7f:76:c3:5b:70:bc:37:b4:9d:c2:09:a2:
01:bd:d6:0f:6b:62:2e:e8:db:42:74:59:4d:26:0d:
71:ed:60:29:4b:dd:a4:e2:68:fc:ba:b4:96:91:fb:
c6:06:e1:1b:02:82:bf:12:01:2a:80:32:9c:97:78:
92:58:54:5d:2b:cd:85:93:d4:77:d6:d0:63:a6:c8:
dd:a2:6e:34:cb:f9:7b:42:90:16:39:61:53:3e:a4:
19:eb:06:bd:ea:d7:55:ed:24:7f:f9:31:cb:0d:8e:
ba:47:92:09:bb:fa:7e:b4:b1:d8:f7:f9:9b:72:dc:
3e:07:1e:ca:74:03:f1:e7:8a:66:57:e8:22:a4:7f:
57:c6:81:4a:b2:fb:75:ff:93:05:ad:ce:72:88:9d:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:B9:1C:36:65:A9:53:09:6C:B6:41:02:CE:C9:1C:84:4C:E6:A5
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:78:35:a4:a0:a4:81:42:a1:81:e7:a9:8c:a3:35:a2:6e:ce:
a8:3a:5b:9b:52:03:65:c9:34:05:00:1c:68:4d:dc:da:f1:d7:
50:4a:ff:9a:4f:a6:71:27:e8:85:3c:7d:05:2e:fb:8a:19:bf:
1c:a4:59:80:17:79:48:5d:28:f1:52:91:af:8a:66:42:bc:fe:
d9:41:bd:c4:aa:7b:46:75:a7:12:90:37:f7:0c:fd:53:dd:c9:
4d:0e:b6:18:e8:3b:e3:c4:db:2e:4a:b3:ed:97:2f:3e:cb:86:
51:91:98:ee:85:3b:b6:a4:cf:08:d2:87:bc:6a:f2:ca:37:1b:
9f:fa:6e:f0:35:c2:51:98:b8:02:04:08:7a:2f:7c:83:fb:18:
f8:87:b5:a1:88:a2:ad:5f:be:dc:eb:1d:9f:f2:7e:f5:6c:94:
46:03:78:2a:1d:a5:2e:32:3a:c4:e4:b6:87:d8:c3:82:22:2e:
21:d2:c1:3c:75:75:d7:19:60:aa:ea:2d:64:4a:c5:5f:03:24:
a4:79:35:73:c4:45:f9:5e:f4:ab:ae:c8:24:f4:25:94:7b:fb:
bf:70:2f:45:e5:e6:74:8b:98:d8:f9:97:b5:bf:b4:b5:82:9d:
9e:49:c5:d7:59:77:3a:dc:a6:5b:65:fc:00:ee:b5:0f:2c:90:
55:fa:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 17:04:12 2025 by rpki-client