
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: DwWzoZteGbl2u/cNEwo1EPE5Zgxbpju5WMt+k048dMI=
Subject key identifier: 5B:71:8C:3B:29:C4:30:07:97:61:A7:17:F2:5A:F8:CF:90:CB:58:A7
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 0199239FF2FEE2D3F84751BEB48661C6DE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 0728
Signing time: Sun 07 Sep 2025 10:01:48 +0000
Manifest this update: Sun 07 Sep 2025 10:01:48 +0000
Manifest next update: Mon 08 Sep 2025 10:01:48 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: N1g6rBRQ4rbyyKzBHOREK+m3h8wsAFfR360qgK48wzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:f2:fe:e2:d3:f8:47:51:be:b4:86:61:c6:de:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Sep 7 10:01:48 2025 GMT
Not After : Sep 8 10:01:48 2025 GMT
Subject: CN=5b718c3b29c430079761a717f25af8cf90cb58a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:60:00:6d:4a:57:01:fa:14:e2:c2:1d:14:
41:ac:5b:98:c9:8a:9e:5f:2a:41:6a:b8:14:60:e1:
05:04:fb:3c:9c:de:7b:28:47:ff:8f:83:e1:34:2b:
4c:60:d6:11:ba:9b:ea:43:33:21:e4:b7:d8:e5:82:
ea:ac:22:0f:4e:d0:10:3f:40:84:43:e5:70:4e:30:
a3:4b:5a:12:70:11:ed:1b:06:d6:df:da:af:0a:13:
4d:31:dc:60:00:98:59:a2:75:6d:02:c3:b7:ce:50:
37:73:d0:f4:83:48:9e:9d:67:86:2d:74:56:2f:f6:
16:34:a8:11:70:f5:f1:16:47:91:70:c4:bc:43:33:
de:dd:a4:cc:5d:b0:58:5b:2a:89:8f:6e:9b:97:c4:
47:7e:bd:db:10:45:2a:a0:0e:2f:f9:77:84:db:b7:
a1:1d:77:dc:3a:ee:71:76:7f:f8:23:fa:74:7b:c3:
aa:d0:d9:3f:ff:51:33:5e:32:5a:c6:f6:d9:5c:0c:
a1:29:03:38:d4:bc:1c:3f:83:f6:99:36:d5:22:91:
0d:4a:a3:a8:97:31:be:3d:17:a9:bc:2d:69:fa:cd:
c8:63:bf:8c:66:8a:5c:26:e8:86:1c:4b:8d:bc:e7:
3e:5d:b9:ec:8b:24:35:0e:18:02:0f:45:ab:7e:5e:
f0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:71:8C:3B:29:C4:30:07:97:61:A7:17:F2:5A:F8:CF:90:CB:58:A7
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6f:57:2e:bd:0f:39:ec:ef:13:a6:b5:ce:7a:c7:b9:a2:69:
c1:3b:63:a2:a0:0b:63:c7:63:fa:64:46:8f:69:5b:37:8e:c9:
ba:d8:3d:09:3b:31:30:97:4f:34:44:45:b0:3f:98:6b:1f:39:
27:0d:ed:ab:76:d6:61:0b:8b:03:2d:41:16:a9:80:80:e2:f0:
bb:cb:18:83:a0:ec:66:3e:41:fe:34:a0:ac:81:7f:09:45:d9:
2b:63:13:df:42:dc:fe:cd:99:de:da:b1:9e:d4:f1:1f:d5:cd:
73:dc:81:74:69:b6:e9:03:85:aa:17:57:89:60:30:ef:07:bf:
82:70:da:b8:44:31:87:af:49:24:93:ef:ab:e6:4c:0e:f1:6f:
c2:da:a4:7b:af:5a:50:be:d2:3f:22:59:91:67:96:90:ac:8d:
45:dd:29:d6:3f:e2:75:20:26:27:ee:4f:50:2f:b0:0f:88:55:
6f:7b:30:70:8a:1e:e6:f2:68:30:46:2c:2a:1a:94:48:91:67:
ab:c4:53:b4:66:f7:10:76:c4:6c:e1:9f:31:b9:62:d4:6c:da:
c2:a0:5a:ba:64:0c:5f:fe:62:34:05:a0:e9:0c:75:e3:c1:f0:
91:6c:60:ae:86:a7:f5:41:98:c6:fa:b2:44:68:26:5c:45:c9:
90:a9:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:32:41 2025 by rpki-client