Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File: pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier: W1HmvkEvZ9VNjKtt8yTauUshoQfvV3G+hBpYEtGloNY=
Subject key identifier: 1E:E9:20:DC:83:A8:BB:A6:D9:09:CE:73:17:87:5A:C8:1E:5B:27:3D
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 019A228AAF941C78917641F625DE4F7364DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number: 0D43
Signing time: Sun 26 Oct 2025 22:01:45 +0000
Manifest this update: Sun 26 Oct 2025 22:01:45 +0000
Manifest next update: Mon 27 Oct 2025 22:01:45 +0000
Files and hashes: 1: 4jSg2ODlu3CFd6jIl7kHiP-BX_4.roa (hash: xgMqCXuymiqYkTjb0uA/T+UuFonELwxqYTVdoLkLInU=)
2: 9NbAaWTN6CWxeEqYQjGZLmOhbQQ.roa (hash: h5XO3HcLJOMuvQP0KQj1fHH4O24IzSVqKiTXw+BaXeo=)
3: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: mSI6+ladBPd0fm9m3/W/msYgGD7vYjAmPhS2JqKyV6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:af:94:1c:78:91:76:41:f6:25:de:4f:73:64:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Oct 26 22:01:45 2025 GMT
Not After : Oct 27 22:01:45 2025 GMT
Subject: CN=1ee920dc83a8bba6d909ce7317875ac81e5b273d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ee:f3:9f:20:96:ed:59:bc:f1:99:c0:0d:a4:
1f:5d:0e:c3:f9:7a:ab:ec:fc:25:f0:4b:98:d3:86:
ab:1b:2c:1e:10:3e:21:20:84:56:29:29:42:6f:49:
3d:b8:12:26:9d:6b:53:de:3f:2d:02:70:d5:7b:a4:
5c:3e:b7:52:7c:e9:dc:bc:8d:96:87:6a:c6:86:88:
53:16:22:fd:5b:a3:c5:40:50:36:c6:26:09:35:2b:
ea:11:1f:fb:5e:a3:af:16:35:a3:71:1f:05:76:51:
a3:be:b0:88:f5:94:a6:0f:ad:88:da:bc:ce:a2:48:
a3:40:73:be:0c:4b:d3:45:35:b7:ff:ba:59:44:9c:
c7:81:59:bb:df:dc:2c:e8:73:5d:82:7b:73:8b:4f:
d8:01:3f:53:79:0e:71:61:19:a9:6a:0d:4d:a4:70:
ea:48:f7:7d:2f:c9:19:be:66:ee:a1:37:da:bb:01:
85:e6:73:4e:79:ad:a5:33:d3:53:6c:a6:fa:43:a7:
dc:63:ca:90:b4:ec:03:c3:67:fa:59:07:bb:8b:d2:
58:87:9b:38:16:9e:b5:fa:83:df:ce:47:a8:7e:73:
83:33:49:de:6f:f7:81:ad:99:d9:f8:fd:18:29:0a:
b3:d1:72:05:4b:00:2c:19:70:b0:ff:e5:81:5b:48:
00:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E9:20:DC:83:A8:BB:A6:D9:09:CE:73:17:87:5A:C8:1E:5B:27:3D
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2b:29:d0:0d:96:e6:4a:8c:d1:68:e9:a6:b9:70:e0:aa:23:
86:ce:73:f3:84:50:69:fa:b6:b8:0a:8f:c6:ab:d6:7d:44:6d:
43:7b:f4:fa:0d:2c:50:a1:e8:1a:46:7a:33:a2:9f:f4:60:96:
6e:b0:d1:7a:f0:50:c3:0d:c0:0a:44:12:6e:12:fc:67:e1:3a:
21:f8:06:03:5c:ef:ce:68:52:9f:8a:f7:de:d9:f0:6e:3b:6b:
62:40:c6:7c:95:e9:b3:38:2c:ef:e2:b7:5f:9a:75:e6:df:82:
40:3d:71:9e:f0:32:d4:6f:bf:af:71:a3:7f:6c:c9:49:5b:cc:
20:df:b4:aa:0a:2c:43:6b:71:02:9e:64:74:7b:e1:9f:a7:f9:
28:6b:2e:6d:df:91:ad:95:2c:8d:19:ce:01:b8:16:65:04:ac:
3d:c4:6f:21:36:09:3c:1d:09:bc:a8:78:9c:18:25:09:54:5b:
c1:81:f7:dc:fa:dd:79:9b:bb:67:f2:c0:d0:d0:e6:f3:33:78:
83:1f:22:4f:6e:b4:39:9a:e0:8c:03:87:6f:4e:63:48:e8:ca:
0e:ee:83:88:d9:d0:f6:d1:a0:68:9e:8b:9b:d1:7c:b4:24:a1:
5f:2f:ea:b3:3a:f0:d5:74:c6:3f:52:e8:0e:04:bb:8c:72:0f:
ba:00:72:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:46:43 2025 by rpki-client