Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: HYUEEkUStsKWRG0h4XdDXSH+Dn9MW7LUBEJPK48BE1M=
Subject key identifier: C0:62:22:57:32:ED:CD:C3:E5:74:63:D3:E8:16:82:70:7B:E6:61:D4
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01988BEA734A4B48DD0790E0DCF1A4CF73E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 08DA
Signing time: Fri 08 Aug 2025 23:00:54 +0000
Manifest this update: Fri 08 Aug 2025 23:00:54 +0000
Manifest next update: Sat 09 Aug 2025 23:00:54 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: F5ZIO43sPThsb4GvH8v4QLnk3sffUwulH/pHi4ZXWcY=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:73:4a:4b:48:dd:07:90:e0:dc:f1:a4:cf:73:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Aug 8 23:00:54 2025 GMT
Not After : Aug 9 23:00:54 2025 GMT
Subject: CN=c062225732edcdc3e57463d3e81682707be661d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ab:57:7b:ab:b3:6c:8c:fd:e6:8f:7f:9a:ef:
20:f3:97:7f:91:a0:1a:4f:60:3b:f9:f1:7c:3b:e7:
3c:37:78:cd:33:41:22:8d:a0:44:de:58:69:ab:43:
c0:6e:fa:cf:5d:ce:3d:10:4e:50:87:52:e6:c8:f5:
54:fe:c3:d5:49:20:00:df:14:18:b3:9e:2c:05:f4:
25:b6:75:fa:40:93:ad:31:58:40:ea:84:dc:9d:3c:
0a:37:5d:e8:bb:1c:5b:35:64:c0:66:e3:ff:1f:10:
d3:6b:dc:81:dd:a1:27:a4:e6:e4:39:42:41:ed:b2:
e8:f9:d6:c4:aa:b4:ff:31:b8:24:03:d5:bb:b3:2a:
04:56:bb:c0:ff:96:7a:4a:3d:9f:59:4b:6c:53:56:
74:5f:6b:6d:a0:52:9d:d4:de:49:2c:43:e6:3f:f4:
ad:28:c3:c9:34:80:cb:a7:bb:9c:fc:de:fa:fb:3d:
0a:d2:43:db:b7:31:a9:4c:c6:57:bb:64:aa:9f:b2:
d3:b3:c3:30:6f:58:45:ee:09:61:58:3d:c1:fe:bd:
8b:4a:a9:bf:8e:ae:48:44:07:ac:d1:6b:87:2b:6a:
96:fe:33:31:de:86:bf:1c:50:46:3c:c4:97:87:ea:
d3:7d:02:a3:39:e2:1b:6c:ed:e9:64:3f:e5:3b:c3:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:62:22:57:32:ED:CD:C3:E5:74:63:D3:E8:16:82:70:7B:E6:61:D4
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9e:c4:44:61:72:33:d7:e3:e2:12:bb:b7:3f:28:f5:31:68:
77:a9:b2:e9:67:24:50:80:05:bc:09:20:3a:b7:63:e2:b2:af:
53:36:3a:b1:93:54:10:7a:2d:3d:c1:9a:27:3c:f5:0b:bb:e1:
78:f0:8a:2d:c1:0a:4d:9b:71:13:43:2b:4a:af:c8:73:b9:8b:
4e:ea:da:c2:a1:25:92:3f:04:a5:12:f9:99:c1:60:e6:54:74:
a5:e0:85:80:e2:3b:68:0d:7f:ae:d0:8f:de:b7:33:df:9c:cf:
46:69:b9:20:92:6c:52:0a:5a:5a:b1:20:b7:59:36:8c:4a:dd:
a6:d0:8d:6b:9a:fc:9f:dc:f1:4d:11:f3:b4:79:7f:cf:f9:fa:
0f:e5:17:e7:98:cd:94:96:86:c8:07:7a:b2:20:5f:c5:b3:14:
55:6b:32:16:03:9c:f7:ac:56:cf:fc:56:1c:5c:a1:f1:a8:de:
de:87:a4:13:3a:2b:f0:70:3c:af:4a:ea:f1:a0:fe:6b:6c:19:
83:52:1b:ec:85:24:39:80:cb:39:99:24:56:04:a4:c9:d2:c2:
9e:3a:a7:e6:9c:a7:fe:76:84:00:8c:eb:e6:64:75:05:7e:9b:
a2:56:b2:24:9d:66:00:9c:31:6c:67:61:a8:7d:bf:ca:0b:b4:
36:a2:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:22 2025 by rpki-client