Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: yxykBD84dnoPFkY2vhrvFB4r9ewZcIi7XssXIUE9v6U=
Subject key identifier: 18:31:12:FC:32:7C:64:60:30:C2:0E:DA:BC:63:91:C9:A2:45:CE:8E
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 019A4E86904115588E93FDF55BD85D06ADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 05EE
Signing time: Tue 04 Nov 2025 11:00:32 +0000
Manifest this update: Tue 04 Nov 2025 11:00:32 +0000
Manifest next update: Wed 05 Nov 2025 11:00:32 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: KenPije0mQ3wFT/udDRlmngrLUcFYBD6wQ0rEBuO1DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:90:41:15:58:8e:93:fd:f5:5b:d8:5d:06:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Nov 4 11:00:32 2025 GMT
Not After : Nov 5 11:00:32 2025 GMT
Subject: CN=183112fc327c646030c20edabc6391c9a245ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:49:26:c5:db:02:6d:da:76:a7:95:25:0f:
29:e0:68:e5:90:18:40:c3:4e:f0:43:fa:ba:e0:cd:
2c:2e:cf:41:96:68:78:91:7a:6a:e5:1c:64:f9:fb:
7a:e9:22:98:e1:3d:74:84:f2:3f:d5:f8:f8:78:bd:
79:1f:5e:e6:84:ae:04:ff:6b:e1:af:14:9f:f3:00:
ca:27:7a:c4:87:bd:9f:fe:32:4f:ab:f3:ca:a5:85:
34:17:ed:42:f3:12:94:30:61:a1:9a:1b:49:89:e2:
06:11:03:48:e8:e2:0a:e8:02:a0:f4:f9:53:41:65:
9b:a7:f3:45:9a:bf:8f:b5:60:fc:34:07:62:1a:da:
20:6f:97:02:14:7b:44:28:44:61:ff:3e:5e:da:d6:
6d:a9:1a:7e:6a:08:da:2b:7a:12:00:97:0d:19:2b:
24:97:80:6c:cc:8f:68:16:45:e3:18:e3:14:0c:7b:
33:85:19:ab:f0:65:47:9f:7e:8e:e5:84:a4:10:53:
f8:ce:85:b8:3b:33:38:10:7f:91:4b:4a:06:eb:62:
b1:bd:31:c1:ac:f1:22:90:e1:5b:63:3d:a3:af:d8:
0b:ca:c7:a8:bf:aa:2b:76:f8:30:fa:81:9e:87:d7:
c5:ef:3e:92:dc:80:df:e4:42:31:3a:f1:8a:96:41:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:31:12:FC:32:7C:64:60:30:C2:0E:DA:BC:63:91:C9:A2:45:CE:8E
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:ae:5f:14:e1:25:79:bf:b2:30:bf:6b:61:85:9a:0b:7f:
da:cd:ad:2d:8c:00:23:6d:2b:e4:08:c8:50:5c:d6:b9:de:f7:
63:39:77:ac:09:bc:57:40:b4:ad:b9:cb:cd:e1:1f:37:4a:07:
49:54:bf:bc:4c:f3:2d:85:78:f6:bf:2e:a9:14:25:4a:9a:34:
39:f0:f2:56:ac:22:b3:78:5c:c3:fe:07:19:00:7a:58:b4:77:
3a:14:3e:b4:94:33:b7:5d:00:f2:6a:19:16:9a:48:79:04:a6:
d1:2b:4a:42:f0:c0:de:e9:ac:57:53:1f:e8:d0:f9:e8:5a:7c:
12:e1:fa:5c:50:f9:3c:7a:f3:7f:30:cb:22:74:19:1e:86:b6:
0a:f7:0e:01:8b:b2:3d:b5:a3:bc:6b:23:5c:61:39:bb:4e:0d:
8c:ed:11:50:a7:87:a7:c4:3d:7f:0c:1a:58:8d:db:91:16:c9:
20:11:fc:c5:8f:87:d0:0f:b3:a5:46:99:18:49:be:8e:ad:7e:
db:43:7a:69:44:8b:8b:7f:6b:e3:31:0d:69:b6:05:1f:bc:57:
88:a8:83:66:82:56:0b:59:c4:5d:c3:9e:1d:17:8a:b1:74:18:
9c:5f:13:74:dd:d5:f9:ea:42:8c:c6:fa:b5:f1:33:2f:13:e9:
1b:dc:ed:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:57 2025 by rpki-client