Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: 0ug9j4el1sYhdzPWaDzZTuOaaDzmLcHYPPfe4mnlxIc=
Subject key identifier: 0A:76:23:63:68:EF:C3:C3:61:EE:56:86:C7:6C:4C:56:88:CB:B3:B5
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 019922C334D9171E1C1CA46B0A04F0FA9AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 1529
Signing time: Sun 07 Sep 2025 06:00:42 +0000
Manifest this update: Sun 07 Sep 2025 06:00:42 +0000
Manifest next update: Mon 08 Sep 2025 06:00:42 +0000
Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: rP9vySpgYjiOAbXM1lyBN4D8HBAjESAtmiDlnl6i5Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:34:d9:17:1e:1c:1c:a4:6b:0a:04:f0:fa:9a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Sep 7 06:00:42 2025 GMT
Not After : Sep 8 06:00:42 2025 GMT
Subject: CN=0a76236368efc3c361ee5686c76c4c5688cbb3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:93:46:2b:25:f1:77:87:09:d9:c7:35:e5:
18:cc:76:da:10:08:ec:08:27:5e:81:9d:87:21:f7:
a9:67:82:b2:64:07:2f:90:3e:be:b0:44:78:a1:62:
d6:91:f5:ec:e5:53:d9:0e:e7:6e:4e:98:e5:01:09:
bd:2b:ac:34:df:32:25:50:8a:66:e4:c4:b7:3f:58:
3a:c1:cf:3a:26:49:e1:d7:09:c7:91:2b:d3:de:33:
9e:3b:78:6f:f6:74:a6:88:c8:b2:fe:7a:e8:52:92:
6c:88:a2:1f:e2:49:d9:8a:03:8f:52:ba:5c:49:ee:
0f:d7:ad:6b:ba:b3:76:bb:cf:f9:e8:81:d3:ac:10:
7d:17:6c:7e:c1:a2:f5:1e:d6:b7:ad:13:28:2e:ce:
6f:d4:8f:77:da:99:63:20:d2:46:d9:f4:64:d2:b2:
20:2b:a3:94:8f:d7:0c:b6:cb:0c:11:02:f1:06:42:
0b:83:94:9a:40:f9:17:bc:c1:c6:23:06:5e:1f:91:
83:ee:ad:ed:98:1c:86:e6:66:fd:8f:5e:25:f9:d9:
65:e2:a8:71:0e:fd:e9:0a:5e:0d:f7:00:0c:81:af:
47:49:69:01:4a:1f:36:47:d2:3d:5f:90:d2:f9:f6:
35:1a:84:83:3a:90:a3:a0:d9:d2:b7:25:e9:27:ea:
b2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:76:23:63:68:EF:C3:C3:61:EE:56:86:C7:6C:4C:56:88:CB:B3:B5
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f1:61:61:2d:33:69:cb:56:c1:be:de:5b:aa:a1:5c:48:e7:
84:8d:1e:b5:f5:20:6d:9f:5e:0b:48:88:97:17:cd:1a:2b:db:
42:63:d2:12:b2:52:82:1e:86:0e:73:c8:69:88:c0:15:11:52:
8b:37:45:a5:44:fa:45:3d:b8:fd:af:9b:74:cc:0c:3b:b8:3d:
cc:be:9f:8b:2d:d8:91:67:8e:b8:ed:51:4f:28:c5:eb:56:b2:
ab:7a:6e:0b:7c:d4:b0:24:2b:1d:37:61:a2:3b:3e:f6:0d:11:
97:c0:23:a6:f3:a6:20:0f:99:7c:2d:84:1a:92:74:64:54:9e:
00:62:07:c7:e8:b2:8d:f2:ab:b1:ce:4a:e6:16:f2:d3:e8:98:
73:8d:6f:f4:04:b1:d4:dc:6c:55:d1:66:18:8e:c8:34:42:6d:
67:fc:70:c2:c7:c0:16:76:52:2e:dd:4a:85:2d:20:78:34:cf:
1b:ee:c0:ce:2c:ee:27:b0:17:e6:ce:b2:64:0e:3b:83:4b:4c:
d7:00:17:a2:6a:7e:9f:0b:cf:5e:46:03:13:a5:d7:43:22:46:
1d:94:50:7a:45:d4:1a:1c:4d:f0:62:de:32:33:48:d6:a3:68:
a3:b5:f1:dd:c9:09:7e:0c:e7:20:db:71:6f:c8:be:0e:6c:e0:
02:d1:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:07 2025 by rpki-client