Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: iM45ECP9SbiAmyDwGx9BTXjL1ztPJxr2YmfMTGfL+jI=
Subject key identifier: 60:7A:C5:ED:7A:4C:81:8E:00:A4:64:2F:DA:71:13:3F:D1:A8:0F:7A
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 01992331739454CD251D136811BE3CD0CF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 0553
Signing time: Sun 07 Sep 2025 08:01:07 +0000
Manifest this update: Sun 07 Sep 2025 08:01:07 +0000
Manifest next update: Mon 08 Sep 2025 08:01:07 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: r5XOGMorFRwTvWWYlJE8kbtFx9au6d7hCeWvCRsdm0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:73:94:54:cd:25:1d:13:68:11:be:3c:d0:cf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Sep 7 08:01:07 2025 GMT
Not After : Sep 8 08:01:07 2025 GMT
Subject: CN=607ac5ed7a4c818e00a4642fda71133fd1a80f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:46:78:78:bf:79:30:2d:ce:51:12:0b:d8:
ce:7a:62:86:76:fd:5b:8f:4a:38:91:37:f3:5f:54:
cb:76:00:3b:3c:3f:ad:af:f8:c0:d0:d1:0b:19:38:
28:25:f7:ff:cc:82:83:b4:0a:94:2a:1a:d9:27:27:
2f:57:72:d0:88:77:4a:11:0a:5f:cd:04:d3:e7:c2:
c3:a0:d8:87:3b:ee:c9:e2:d5:bb:5e:34:55:14:27:
5c:2e:1c:39:be:f2:1b:02:5f:0c:18:3a:16:85:e9:
fe:33:82:e1:17:eb:20:b8:6f:8a:e3:dc:09:c2:34:
1b:a4:93:41:e9:4b:7c:43:e1:05:5e:12:7f:e4:44:
b4:0c:7d:ca:09:d1:18:5a:cd:2f:5c:8b:ab:42:b3:
de:19:af:2b:b5:6b:eb:d4:45:1a:a6:23:d7:f3:78:
df:d5:cb:51:b0:97:c0:b0:2f:05:1d:20:65:78:44:
e9:9d:f4:3f:27:0d:64:0e:1e:d4:ca:a6:17:b0:4f:
41:73:9a:49:3a:3b:1e:2a:36:dc:17:48:b3:10:9f:
54:aa:4e:fd:39:5d:c5:b4:53:01:4b:3e:15:c5:23:
a8:b3:41:33:7f:bf:cd:47:df:49:5f:3e:ea:14:1d:
7b:4e:68:da:c8:a6:77:0d:1a:85:8e:9e:14:3e:42:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7A:C5:ED:7A:4C:81:8E:00:A4:64:2F:DA:71:13:3F:D1:A8:0F:7A
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:71:3f:db:20:a9:e5:3d:5b:98:12:55:5b:31:33:b0:b6:12:
1b:13:29:95:33:77:b1:5a:43:f5:36:41:44:0c:67:25:98:24:
2d:a6:7c:b5:86:e6:e7:1a:7d:dc:8b:b6:00:8d:a0:7d:fa:07:
56:36:9f:94:28:06:c8:79:c9:c1:33:ee:ab:7b:73:4e:6d:8f:
3e:d7:a2:1c:45:fb:3d:58:d3:8b:ba:c7:bc:54:bb:f4:ac:18:
8a:0c:52:e1:b5:95:44:ba:9b:7c:4e:b5:0e:2c:77:02:9b:4b:
04:59:fc:1d:60:78:3a:f7:f7:a7:bf:88:d2:38:ad:16:af:aa:
8f:70:25:29:09:38:9d:70:c2:74:5d:92:02:ef:67:51:3d:71:
4b:66:51:b8:ed:55:fb:a8:81:c7:43:d6:e8:68:a5:e5:e0:49:
56:de:da:15:32:c7:42:9b:0a:de:a1:87:e2:03:72:14:74:85:
96:f3:5e:82:6f:15:a7:cb:38:e3:56:82:57:1a:7e:df:87:f9:
e5:0f:42:09:67:41:e0:19:2d:86:e6:3a:ab:82:7e:93:5e:38:
ba:55:3f:7a:86:2a:44:88:97:95:a5:d5:f9:f7:1b:27:71:59:
57:0a:ee:fc:64:46:9f:a7:50:2b:8f:d1:d1:f1:0b:0f:47:06:
20:32:8e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:48 2025 by rpki-client