Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File: pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier: doRGflSnx7K8ATt0ZjC2bc1jrdqMHJ4dFgtPhFq7kHw=
Subject key identifier: 20:2C:63:C2:7F:44:9E:17:37:AB:CF:9A:17:64:CF:52:C2:1A:10:0B
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer: /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial: 019A5006DA6A155CEFF2420D3D8D83DF33AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number: 15C5
Signing time: Tue 04 Nov 2025 18:00:17 +0000
Manifest this update: Tue 04 Nov 2025 18:00:17 +0000
Manifest next update: Wed 05 Nov 2025 18:00:17 +0000
Files and hashes: 1: VrzBS7iYMQ7CUgFXeIYUKibuq4c.roa (hash: fmhLUOU0qw8zvG4ACPTJc5SXrpkYmfNY3RjrMuYrgqA=)
2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: J84gj4X+h7OsWkrh5wevmOIsXejbRqWklw7vLbLO5kQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:da:6a:15:5c:ef:f2:42:0d:3d:8d:83:df:33:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Validity
Not Before: Nov 4 18:00:17 2025 GMT
Not After : Nov 5 18:00:17 2025 GMT
Subject: CN=202c63c27f449e1737abcf9a1764cf52c21a100b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:4f:7e:72:e2:0d:37:03:0c:8c:e8:ae:1d:
b1:2c:86:4f:db:44:2d:10:cb:5f:25:2a:85:d4:73:
4c:2c:6a:b6:d9:03:e4:5a:99:cd:e1:59:32:ac:79:
39:5a:a6:a8:91:7e:d8:43:be:fc:cf:c7:25:60:53:
d7:80:06:38:2d:18:86:e2:68:5c:0f:38:18:e6:7c:
63:4f:31:f6:32:29:b3:c1:42:4e:0e:bf:0f:df:99:
ec:af:ca:2b:31:27:6f:ed:de:69:c6:f3:6c:f5:c0:
27:47:cb:05:42:15:41:7f:19:4e:1f:c9:74:44:2b:
f6:33:bb:a8:44:c0:71:3a:a6:c0:a1:1b:a4:c6:0a:
aa:8c:32:61:01:6a:ac:c6:03:4c:ac:7a:97:32:ec:
c6:14:eb:bc:39:18:ad:6e:03:ed:ac:05:48:13:b3:
0d:9f:b5:8c:86:bb:10:27:40:87:ac:81:33:7f:94:
16:dc:b1:ab:5b:6b:56:5b:32:bd:df:68:e1:6f:43:
90:3d:87:81:85:01:ea:ae:00:2f:44:cc:dd:33:0a:
e1:34:a0:2d:4e:35:1c:5b:a2:09:ad:39:61:96:a4:
c1:df:e4:41:56:10:b2:5e:64:cf:b4:08:00:77:19:
90:9e:e5:68:27:db:14:2d:21:6b:e9:12:bc:86:02:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2C:63:C2:7F:44:9E:17:37:AB:CF:9A:17:64:CF:52:C2:1A:10:0B
X509v3 Authority Key Identifier:
keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3a:d4:67:43:9f:3d:e6:03:cf:c3:1c:b3:d5:f1:72:2c:71:
08:3b:92:be:ef:fa:75:d8:47:1c:7c:bc:74:ba:31:fa:15:a7:
0b:57:29:d1:e6:7e:a0:3d:a3:3f:a9:e1:a8:d6:56:e9:27:32:
53:3d:39:81:f9:e7:68:de:45:0d:d9:82:94:3a:ce:af:b9:75:
8b:d5:b8:fc:d3:6a:39:58:15:14:fa:82:a9:48:49:b6:a8:b1:
68:bd:cb:69:87:cb:15:85:5c:d5:40:13:3b:00:cd:c3:6c:72:
68:fc:66:aa:fe:9f:96:07:80:21:8a:72:1c:c9:61:1e:54:0b:
6e:e6:1c:e0:f6:25:1c:13:fb:ee:a5:53:6f:08:ad:21:91:8f:
ce:ae:ab:7f:eb:10:f8:9e:72:9b:5d:2e:40:4f:13:cd:53:3a:
cc:27:5b:75:39:76:8e:8a:97:e3:9a:80:45:42:70:26:48:71:
08:67:85:f9:7e:35:dd:a2:22:62:a2:c8:b2:cd:ec:80:19:a2:
d1:f7:33:5b:8a:f3:4d:ad:e4:21:0d:ca:77:fa:38:df:4b:fb:
87:9f:13:36:a7:59:d0:e1:6b:f8:30:c3:8b:3c:72:f1:cb:6d:
c1:5b:76:ac:a7:e4:5b:8d:12:88:6c:eb:60:92:34:cb:be:30:
b8:89:50:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:37 2025 by rpki-client