Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: ZOCYVcT6HhfC+vnyrFTLjaCzjGBiX0xxQJFb402E1/c=
Subject key identifier: 36:84:AB:36:2F:93:9C:AB:5B:25:4F:B4:26:59:9B:91:7D:3D:80:CF
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 019A1797CBC263497DF74396294CB9BF9890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 1645
Signing time: Fri 24 Oct 2025 19:00:15 +0000
Manifest this update: Fri 24 Oct 2025 19:00:15 +0000
Manifest next update: Sat 25 Oct 2025 19:00:15 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: jHpz78wDk+vEG4fSHI4hj57GgXPKRbduguGwgEscst0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:97:cb:c2:63:49:7d:f7:43:96:29:4c:b9:bf:98:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Oct 24 19:00:15 2025 GMT
Not After : Oct 25 19:00:15 2025 GMT
Subject: CN=3684ab362f939cab5b254fb426599b917d3d80cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:c2:fc:d0:91:43:aa:16:b6:27:84:2a:42:
25:75:84:e4:58:70:18:54:53:58:6c:ba:a4:e5:16:
75:33:16:95:99:25:04:81:4e:a3:39:e5:1d:46:cd:
e1:8e:bd:fc:df:c1:bc:c0:55:c0:49:2e:c9:e2:ae:
6f:bd:fa:3b:63:2c:5d:3c:92:2e:18:0b:26:6d:c4:
12:d7:08:fa:11:f0:5a:89:ba:66:07:e1:53:a5:66:
23:a3:ab:83:46:2d:81:15:ae:80:3e:b0:da:ab:f8:
c7:2e:cd:cf:2d:2a:b0:5d:17:ed:5b:82:33:72:47:
11:7f:ac:15:7b:ba:d4:f4:e4:f2:6d:e5:42:37:14:
4c:1e:f2:f9:83:ea:5f:87:29:a0:cf:8f:b3:ea:3d:
7f:1f:dc:9b:cf:d7:b3:cc:01:7d:df:b8:3f:7f:3e:
30:83:23:33:17:fb:e5:4d:a6:52:1f:38:bb:10:c3:
71:8c:ec:16:25:11:a4:4a:59:a1:af:60:8e:0f:e6:
75:90:e9:73:a6:b4:e2:ae:ee:0d:41:cb:99:0d:c9:
28:56:82:79:98:6d:0a:f9:66:0d:09:04:0d:0b:13:
85:5c:94:2c:70:53:20:ff:5c:ea:a4:86:7a:05:57:
ad:cd:5d:04:6d:00:f7:dd:ef:a7:8c:53:bf:df:46:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:AB:36:2F:93:9C:AB:5B:25:4F:B4:26:59:9B:91:7D:3D:80:CF
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c5:4f:79:08:cf:2d:5d:38:fa:d2:8d:df:b6:8c:5b:67:31:
55:6d:8b:6a:c3:57:fd:e1:9c:02:9d:37:a8:9e:6f:7b:52:3e:
6f:dc:ca:d7:27:34:a8:6f:05:73:f2:dc:cf:5a:6f:5e:0d:8e:
c9:d5:73:1a:47:ac:45:30:ef:ef:e1:0d:d5:6a:26:8c:7a:8f:
1f:5b:f1:c4:17:fc:fd:22:b7:02:44:ff:ad:b1:80:3d:62:11:
d1:1a:7d:09:bd:81:78:05:99:49:89:ce:da:1f:94:fa:33:d7:
b2:b5:de:6d:94:f3:82:b8:b5:da:d4:f2:e8:9d:db:55:4a:bf:
ce:d8:5c:ee:04:6d:74:64:7d:e5:31:e3:45:7a:44:1e:e0:88:
ef:ab:4f:4f:de:dd:7d:60:aa:51:34:bf:1f:96:d5:50:03:80:
fa:39:15:06:00:86:ae:9c:fe:65:eb:d5:a0:f7:e4:50:a5:05:
b8:11:2f:10:9f:12:21:af:33:de:e7:11:3c:07:f8:bb:67:bb:
49:e1:2c:9f:82:07:33:eb:64:fe:83:29:3a:82:7e:b3:fe:aa:
5b:36:76:ce:c9:d3:5e:9c:28:11:a2:64:37:f0:46:21:4e:39:
85:04:63:68:fa:40:8c:98:c8:0c:84:67:61:d3:74:a3:09:f7:
c5:3d:d3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoXl8vCY0l990OWKUy5v5iQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0MmQ3Y2JhZmM5ZGQzMjA1ZDI0N2Q2NjJkODVhZmRk
OWExODYwHhcNMjUxMDI0MTkwMDE1WhcNMjUxMDI1MTkwMDE1WjAzMTEwLwYDVQQD
EygzNjg0YWIzNjJmOTM5Y2FiNWIyNTRmYjQyNjU5OWI5MTdkM2Q4MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobHC/NCRQ6oWtieEKkIldYTkWHAY
VFNYbLqk5RZ1MxaVmSUEgU6jOeUdRs3hjr3838G8wFXASS7J4q5vvfo7YyxdPJIu
GAsmbcQS1wj6EfBaibpmB+FTpWYjo6uDRi2BFa6APrDaq/jHLs3PLSqwXRftW4Iz
ckcRf6wVe7rU9OTybeVCNxRMHvL5g+pfhymgz4+z6j1/H9ybz9ezzAF937g/fz4w
gyMzF/vlTaZSHzi7EMNxjOwWJRGkSlmhr2COD+Z1kOlzprTiru4NQcuZDckoVoJ5
mG0K+WYNCQQNCxOFXJQscFMg/1zqpIZ6BVetzV0EbQD33e+njFO/30YEMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaEqzYvk5yrWyVPtCZZm5F9PYDPMB8GA1UdIwQY
MBaAFKYOQtfLr8ndMgXSR9Zi2Fr92aGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzkt
NjQxZDQ1NjI4M2M0LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9jYzFkNjItYWU1My00OGI3LWFjNzktNjQxZDQ1NjI4M2M0
LzEvcGc1QzE4dXZ5ZDB5QmRKSDFtTFlXdjNab1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqcVPeQjP
LV04+tKN37aMW2cxVW2LasNX/eGcAp03qJ5ve1I+b9zK1yc0qG8Fc/Lcz1pvXg2O
ydVzGkesRTDv7+EN1WomjHqPH1vxxBf8/SK3AkT/rbGAPWIR0Rp9Cb2BeAWZSYnO
2h+U+jPXsrXebZTzgri12tTy6J3bVUq/zthc7gRtdGR95THjRXpEHuCI76tPT97d
fWCqUTS/H5bVUAOA+jkVBgCGrpz+ZevVoPfkUKUFuBEvEJ8SIa8z3ucRPAf4u2e7
SeEsn4IHM+tk/oMpOoJ+s/6qWzZ2zsnTXpwoEaJkN/BGIU45hQRjaPpAjJjIDIRn
YdN0own3xT3Ttg==
-----END CERTIFICATE-----
Generated at Fri Oct 24 22:01:25 2025 by rpki-client