Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: L5L+h19Kq1y/Mo5e/5r1sZlyJVizsbB4mhq4RSBiTQ8=
Subject key identifier: EB:62:5A:CD:DF:CA:6F:7A:A6:28:E7:BA:81:4A:98:71:99:02:17:AA
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 0197677297C61138244689BE29F7257E2CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 08A4
Signing time: Fri 13 Jun 2025 04:00:52 +0000
Manifest this update: Fri 13 Jun 2025 04:00:52 +0000
Manifest next update: Sat 14 Jun 2025 04:00:52 +0000
Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: PZNcU8lZ+ur1Afjj+4kiwBMh+QuCTzlTcBnr45R2CxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:97:c6:11:38:24:46:89:be:29:f7:25:7e:2c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Jun 13 04:00:52 2025 GMT
Not After : Jun 14 04:00:52 2025 GMT
Subject: CN=eb625acddfca6f7aa628e7ba814a9871990217aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:12:13:cc:db:50:54:0f:6b:60:ac:b4:b2:
2d:db:11:34:ff:c6:a3:56:39:e4:99:c5:b1:17:60:
c4:1c:6f:a3:d8:dd:4e:fd:bf:80:ff:45:b1:90:f4:
f3:9d:b1:bd:91:3d:0b:91:37:09:fb:80:bb:91:9f:
e3:7d:93:dc:a2:99:d2:e2:49:59:5a:3a:70:28:e1:
bc:d6:5e:87:33:61:d3:90:44:31:08:fb:cd:93:00:
20:52:75:78:eb:ac:59:3e:f7:a9:9a:db:de:9e:b0:
9f:1e:04:27:f9:12:97:0b:09:f2:f4:94:83:b1:0e:
ba:e6:81:24:ad:f8:a5:6d:7c:1f:1d:d8:c0:1b:05:
22:f1:f2:aa:af:10:1a:2e:8c:25:fa:84:7a:73:03:
81:4e:7d:4e:03:0a:d8:2f:9b:32:29:17:6f:31:11:
80:71:28:7b:7a:66:d1:ba:6f:c8:38:16:26:de:b9:
2b:f9:71:dc:b1:68:ad:1c:95:6f:4b:32:59:d1:35:
86:75:df:7b:bb:e9:08:65:88:be:c7:45:a2:ad:cf:
f2:cc:ab:f5:0c:d2:81:9b:2e:5c:e1:2d:ef:e3:d1:
65:1c:24:3b:91:d0:ad:8b:d9:17:4e:83:28:11:15:
60:a9:cc:83:7f:26:2c:bf:48:56:30:cb:5f:87:a3:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:5A:CD:DF:CA:6F:7A:A6:28:E7:BA:81:4A:98:71:99:02:17:AA
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:90:4b:06:fb:c6:67:b8:a1:b1:a2:00:fe:ad:62:ee:ef:c2:
d2:a5:04:85:8d:29:7c:16:ac:d3:8c:e2:4f:1b:e8:03:c7:63:
01:79:e3:51:6c:23:1b:6f:b4:6f:27:e8:f2:44:c5:2f:b0:52:
24:e6:e8:7b:4e:ce:ee:5a:58:45:2c:07:4e:96:53:11:29:c3:
c3:ac:c6:0a:af:92:16:69:b5:c7:71:a7:c8:55:5a:b2:92:27:
3f:50:92:4c:ba:63:4a:ac:b7:7a:89:1c:2b:c0:b6:7a:35:43:
65:4b:2f:62:a8:38:fb:5e:9e:31:e3:79:d6:cc:bf:15:ff:38:
2a:87:78:a9:13:77:1a:e7:81:94:12:43:d0:aa:9e:2e:e5:f9:
dd:4d:b9:c7:08:a4:3a:e0:67:f6:40:b7:65:3a:db:de:5b:4c:
12:72:7a:8f:b9:b4:d4:24:98:02:79:71:da:fa:25:20:22:87:
04:c1:6f:78:19:9d:a9:98:5d:b8:0a:27:ae:11:d6:60:bd:8f:
b1:bb:50:61:d7:92:8a:dc:b2:1c:73:46:d0:0d:91:79:1e:b8:
cd:64:8a:d2:1c:3a:ae:5f:94:f1:7b:42:04:f0:9e:6b:1d:1a:
e5:8b:69:c7:31:af:06:d7:f9:9b:02:0b:78:ab:0c:e7:63:68:
29:76:74:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdncpfGETgkRom+KfclfizcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MDkyNjVkODk0ZmE3OWZjZDY1NDJmYWNjMGJhMzg5NzM4
Yzg0NTkwHhcNMjUwNjEzMDQwMDUyWhcNMjUwNjE0MDQwMDUyWjAzMTEwLwYDVQQD
EyhlYjYyNWFjZGRmY2E2ZjdhYTYyOGU3YmE4MTRhOTg3MTk5MDIxN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuMSE8zbUFQPa2CstLIt2xE0/8aj
VjnkmcWxF2DEHG+j2N1O/b+A/0WxkPTznbG9kT0LkTcJ+4C7kZ/jfZPcopnS4klZ
WjpwKOG81l6HM2HTkEQxCPvNkwAgUnV466xZPvepmtvenrCfHgQn+RKXCwny9JSD
sQ665oEkrfilbXwfHdjAGwUi8fKqrxAaLowl+oR6cwOBTn1OAwrYL5syKRdvMRGA
cSh7embRum/IOBYm3rkr+XHcsWitHJVvSzJZ0TWGdd97u+kIZYi+x0Wirc/yzKv1
DNKBmy5c4S3v49FlHCQ7kdCti9kXToMoERVgqcyDfyYsv0hWMMtfh6MC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtiWs3fym96pijnuoFKmHGZAheqMB8GA1UdIwQY
MBaAFKYJJl2JT6efzWVC+swLo4lzjIRZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MzBkNGQtZDRhYi00Mjc5LWIyMjUt
NmRjMGRhMWY1ZGVlLzEvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS83MzBkNGQtZDRhYi00Mjc5LWIyMjUtNmRjMGRhMWY1ZGVl
LzEvcGdrbVhZbFBwNV9OWlVMNnpBdWppWE9NaEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZBLBvvG
Z7ihsaIA/q1i7u/C0qUEhY0pfBas04ziTxvoA8djAXnjUWwjG2+0byfo8kTFL7BS
JOboe07O7lpYRSwHTpZTESnDw6zGCq+SFmm1x3GnyFVaspInP1CSTLpjSqy3eokc
K8C2ejVDZUsvYqg4+16eMeN51sy/Ff84Kod4qRN3GueBlBJD0KqeLuX53U25xwik
OuBn9kC3ZTrb3ltMEnJ6j7m01CSYAnlx2volICKHBMFveBmdqZhduAonrhHWYL2P
sbtQYdeSityyHHNG0A2ReR64zWSK0hw6rl+U8XtCBPCeax0a5YtpxzGvBtf5mwIL
eKsM52NoKXZ0og==
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:56:14 2025 by rpki-client