Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: MRkGUl8UEXunaP82rEVCRRdSg2BxXQ6/ev/Rq0Qnn3k=
Subject key identifier: ED:13:3A:86:3B:C3:F1:03:D1:29:F8:68:37:7E:28:4E:71:11:F5:8E
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019749D63CFEEF79E0FD735C51817D892CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0D0B
Signing time: Sat 07 Jun 2025 10:01:06 +0000
Manifest this update: Sat 07 Jun 2025 10:01:06 +0000
Manifest next update: Sun 08 Jun 2025 10:01:06 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: UnnXpXkoGnBHDhf3u7WJrkfIhZicVBEQQ2zQQ/SyQd8=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:3c:fe:ef:79:e0:fd:73:5c:51:81:7d:89:2c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Jun 7 10:01:06 2025 GMT
Not After : Jun 8 10:01:06 2025 GMT
Subject: CN=ed133a863bc3f103d129f868377e284e7111f58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:c5:e0:9f:3e:74:10:17:b0:a5:d7:67:45:
1b:a8:84:a3:2c:82:5f:59:bb:69:29:83:9c:e6:5a:
9d:47:e6:14:5c:e8:ec:cd:fb:3f:9d:1b:d0:db:88:
19:d0:10:52:76:f0:aa:11:78:20:29:fb:f7:55:4e:
63:19:b8:ae:d4:08:57:5a:4a:df:ff:59:c4:8d:c5:
79:f9:fb:ac:8e:c6:03:97:3e:82:ef:d4:96:9f:d5:
6a:ba:1b:9f:99:82:27:42:40:29:e0:2e:d8:30:ae:
00:3c:f1:39:54:f2:85:da:78:34:a5:ff:de:0f:18:
0f:eb:41:8e:61:72:5e:9a:1a:3a:6d:09:f3:08:89:
bc:aa:81:56:e4:2a:5d:f5:17:2e:3b:46:39:35:b1:
36:5c:4a:bf:37:bb:f5:6e:00:ac:da:6b:f4:c0:b5:
a1:3f:c5:48:a2:a1:a8:a9:4f:d4:5f:e4:3a:cd:39:
db:31:2d:d5:3a:6d:3f:a6:43:12:c1:5a:30:33:b5:
25:f1:39:11:b6:0a:f2:07:3a:07:fc:e8:96:9d:43:
11:c4:d4:f5:21:08:d1:f8:45:48:5f:ed:4d:42:25:
40:f0:f3:60:cb:49:b8:68:0b:8c:4e:fb:e4:ed:f5:
ae:9e:1e:60:44:49:4d:ed:5a:51:6c:f9:5c:d4:6c:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:3A:86:3B:C3:F1:03:D1:29:F8:68:37:7E:28:4E:71:11:F5:8E
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d8:b6:28:f2:85:44:24:05:5e:43:ac:4d:1b:16:ed:56:c4:
4a:ab:31:c6:fe:ad:bf:61:07:57:b6:07:45:e7:a7:80:92:4b:
62:0d:5b:87:86:ec:5a:43:22:24:4b:f0:79:5e:4c:be:b2:e7:
18:69:0f:5e:c4:ec:12:db:fc:8c:b9:6b:a9:cf:65:6c:38:39:
32:b5:16:76:37:58:39:3d:a8:a8:7c:a6:3f:6f:8a:c3:01:fe:
ae:5a:4f:c5:35:ec:2c:bc:c9:e9:24:77:26:4f:31:52:d0:37:
61:0d:a6:79:6f:41:96:4a:1c:6d:eb:f2:4e:1d:70:15:bf:12:
7d:fa:69:00:13:8f:44:46:eb:a9:b1:0f:97:96:7b:bf:ca:ca:
22:8b:08:ad:fe:bc:20:04:59:83:51:a8:9b:ca:2c:af:f2:99:
9e:88:f4:6d:e6:71:a9:a2:3f:df:f2:46:03:f2:af:a3:39:02:
7e:7d:18:14:0a:3c:d8:a6:52:f2:d8:40:ab:5c:73:3e:e2:25:
84:3f:b2:44:65:01:ab:53:d6:0f:e0:75:4e:4a:41:b1:40:e2:
75:85:57:c8:e0:ae:9b:05:b4:2e:39:11:23:46:ab:ee:8e:22:
9a:fe:3b:4d:24:af:0c:ab:27:04:52:89:96:6a:96:4d:8e:91:
72:e5:03:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:34:20 2025 by rpki-client