Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: YsRAWvQE6wqIoWiCepk/4HVM31XRIxQEpdsgLUUWEXc=
Subject key identifier: 10:BE:1F:14:30:D1:8A:F0:76:F8:78:A9:B4:48:BB:13:C9:DD:52:24
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 019A71EEC3E6FC9C1FD3D5CAFF34977CEA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: k+vdTJ8fjMmLlMNcXQ9Up2fl971shnqgD93aiCES+T0=)
2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c3:e6:fc:9c:1f:d3:d5:ca:ff:34:97:7c:ea:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=10be1f1430d18af076f878a9b448bb13c9dd5224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:f3:59:4b:a4:b9:52:46:81:85:d6:3d:aa:
eb:81:ed:67:81:1a:bf:08:65:44:86:c0:fc:26:4a:
16:c7:08:5a:bc:6c:6d:0d:9f:30:be:99:56:ff:e7:
08:52:be:61:93:64:7d:c3:32:65:91:17:be:6b:87:
d5:45:58:4e:b6:c8:49:72:5c:df:da:63:ed:a2:0a:
2a:36:fe:ae:86:2c:b4:94:f1:80:51:b5:45:4d:cc:
2d:ad:1c:0b:6a:c6:b4:3c:7c:5c:05:c4:54:c4:16:
ee:44:c9:fa:ae:5d:8b:bc:3d:00:7c:0a:f7:03:eb:
b2:42:2a:0b:a6:e0:70:31:63:5c:50:bd:ff:f3:0d:
dd:3a:b4:15:09:b2:9a:15:3c:5e:14:4c:9a:30:92:
3b:c4:0e:c4:95:30:66:a1:7c:2c:43:5b:2d:e6:cc:
28:df:2e:c0:10:72:5a:27:fc:02:2e:1a:7b:f8:6a:
5d:15:12:61:4e:85:2a:de:9c:a0:75:34:e4:57:95:
95:a0:d2:6e:f3:be:40:41:de:7f:e3:df:28:70:f6:
e2:75:fc:f4:9d:49:17:2e:f2:39:87:62:73:88:8d:
f0:fd:7c:17:96:87:4c:b2:c8:12:3a:29:b1:93:54:
26:e5:04:2f:d2:ad:3a:88:c4:dc:92:6c:ef:7e:1e:
cb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BE:1F:14:30:D1:8A:F0:76:F8:78:A9:B4:48:BB:13:C9:DD:52:24
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:95:0a:57:90:a6:05:19:92:dd:bb:b2:6e:27:fc:74:a8:81:
82:a9:65:49:71:84:93:6d:14:6e:ae:c8:6b:86:47:dd:d6:14:
72:cb:ba:cf:d4:48:14:95:2e:09:f2:16:d6:2b:49:46:c0:d4:
29:83:f9:87:a8:1f:2b:80:be:2c:bb:4b:e2:f1:c6:85:aa:6f:
7c:be:3d:69:f3:41:fb:6f:f0:a8:51:ae:6b:e2:b4:24:59:21:
d0:34:19:4e:b5:40:36:2d:f2:42:6a:6d:a8:81:fd:08:8a:b7:
3c:f4:59:71:ca:fa:6c:a5:ea:21:90:8e:2d:c8:4c:05:da:2a:
b8:b0:fc:cb:ab:46:fe:1e:9d:01:1a:c9:c4:48:00:66:45:58:
36:90:60:50:ed:df:86:e7:39:71:4c:b5:0c:49:94:57:7a:19:
88:bd:0d:df:1c:4b:27:05:a6:75:b0:3c:b6:ec:be:c6:a5:8d:
91:13:cb:5f:6a:05:5a:69:ac:ca:f4:d5:8e:7a:1c:70:60:79:
00:82:32:31:24:6c:ad:74:f3:0e:4a:64:3c:ba:8b:d0:40:17:
ec:42:e6:7f:69:94:5f:1a:e3:71:98:94:71:41:ed:1e:29:0b:
ba:06:bb:25:c7:e4:11:b3:cc:e6:4d:de:08:1a:89:c3:67:57:
83:4d:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:24 2025 by rpki-client