Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: t+Eo3lA+eddD/XVPy6W0yvM0nMpImNO9BphUVJjw2B4=
Subject key identifier: 10:2B:64:EB:70:8D:FA:E8:A5:56:21:EF:E6:45:96:9B:35:52:FF:EE
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 019783FC3ACB299D7809BF297E038D2CAAE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 047C
Signing time: Wed 18 Jun 2025 17:00:34 +0000
Manifest this update: Wed 18 Jun 2025 17:00:34 +0000
Manifest next update: Thu 19 Jun 2025 17:00:34 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: UP0u4j3gCk/CVRbU21dDe27ov7i6eN1USdgZKYUQBRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:fc:3a:cb:29:9d:78:09:bf:29:7e:03:8d:2c:aa:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Jun 18 17:00:34 2025 GMT
Not After : Jun 19 17:00:34 2025 GMT
Subject: CN=102b64eb708dfae8a55621efe645969b3552ffee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:29:a9:f4:59:24:26:cf:98:06:6c:17:00:
42:95:78:a1:6f:42:69:59:25:f4:18:67:aa:0c:2b:
d6:25:38:1c:a7:d7:83:28:e1:19:9b:8a:05:b8:c0:
cb:72:fc:1a:3e:3d:9e:ca:6c:5c:ea:16:aa:fa:a8:
8d:4e:9e:f3:c9:e6:ae:cc:ec:6f:1a:06:8e:38:c2:
d7:3d:c4:3c:37:8a:51:6a:27:1c:d5:b2:9d:90:01:
76:6c:69:0e:1e:fc:e9:a1:77:eb:39:19:1c:44:b4:
66:9a:8e:da:e7:71:b5:d8:35:ad:fb:5d:8b:83:31:
ec:a3:ca:7b:f7:9f:f5:7b:9d:19:4f:41:c1:51:89:
c8:6f:a9:eb:77:3e:15:74:e1:8e:d2:d6:9c:72:1f:
fe:52:1f:2a:1c:bf:b4:dd:86:f5:fd:ac:47:1e:4e:
ed:32:43:e5:40:0d:d1:8f:96:c9:b2:4b:f2:e6:92:
69:63:29:59:46:26:2a:57:b7:62:f8:40:d3:4a:b7:
9f:40:61:c3:6c:52:5f:93:bf:1f:cd:8d:37:6e:7d:
0f:56:a1:89:4f:83:0d:e4:90:24:e9:5f:6b:c3:3b:
46:5d:d4:00:3d:b5:6a:7e:e5:66:5a:bf:29:6e:9f:
c1:4f:53:26:e2:ff:ac:86:27:3c:d3:09:40:80:2c:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2B:64:EB:70:8D:FA:E8:A5:56:21:EF:E6:45:96:9B:35:52:FF:EE
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:90:71:82:c3:1f:75:1a:3f:58:09:6b:51:08:c6:31:6c:fe:
9f:e8:ea:59:b7:38:60:3e:8e:b5:9a:87:f7:2a:5c:ec:c1:e9:
65:b5:73:f7:47:36:cb:db:10:31:a3:8a:b3:b6:cf:6e:8f:9f:
04:ad:c0:db:1b:ee:e9:03:9a:02:92:ae:65:ad:3c:cb:dc:85:
1a:3f:f3:b5:38:e3:0a:27:c1:23:fe:71:3f:b4:2e:41:83:de:
de:07:55:c7:50:99:7f:47:ce:87:3f:a7:b2:64:30:53:13:e1:
a7:dc:08:b1:77:9c:96:5c:02:ca:56:88:d6:44:5d:35:a6:f0:
22:94:97:57:14:30:dc:73:c3:3a:1d:21:d3:c2:5c:13:aa:ab:
c8:78:c6:4f:3a:a3:c9:cd:72:9c:ef:b1:45:f8:ad:41:88:ae:
0a:62:54:b0:2f:1b:d2:44:c8:50:81:0a:44:9a:06:3b:5a:16:
cf:57:35:e3:fa:36:79:96:20:3b:71:87:cd:4b:51:78:2c:f0:
48:83:43:73:e8:6e:5a:75:62:8f:63:38:0a:8b:30:c0:33:70:
ba:e6:29:1a:a7:9c:ba:b3:5c:40:84:f6:a5:8f:77:7c:58:2f:
e0:ef:b2:c2:e1:ef:fa:f2:ec:96:86:ef:49:d7:42:b9:10:94:
b9:3d:cb:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeD/DrLKZ14Cb8pfgONLKrgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl
NWNhM2UwHhcNMjUwNjE4MTcwMDM0WhcNMjUwNjE5MTcwMDM0WjAzMTEwLwYDVQQD
EygxMDJiNjRlYjcwOGRmYWU4YTU1NjIxZWZlNjQ1OTY5YjM1NTJmZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqEpqfRZJCbPmAZsFwBClXihb0Jp
WSX0GGeqDCvWJTgcp9eDKOEZm4oFuMDLcvwaPj2eymxc6haq+qiNTp7zyeauzOxv
GgaOOMLXPcQ8N4pRaicc1bKdkAF2bGkOHvzpoXfrORkcRLRmmo7a53G12DWt+12L
gzHso8p795/1e50ZT0HBUYnIb6nrdz4VdOGO0tacch/+Uh8qHL+03Yb1/axHHk7t
MkPlQA3Rj5bJskvy5pJpYylZRiYqV7di+EDTSrefQGHDbFJfk78fzY03bn0PVqGJ
T4MN5JAk6V9rwztGXdQAPbVqfuVmWr8pbp/BT1Mm4v+shic80wlAgCxE/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBArZOtwjfropVYh7+ZFlps1Uv/uMB8GA1UdIwQY
MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt
ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2
LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5BxgsMf
dRo/WAlrUQjGMWz+n+jqWbc4YD6OtZqH9ypc7MHpZbVz90c2y9sQMaOKs7bPbo+f
BK3A2xvu6QOaApKuZa08y9yFGj/ztTjjCifBI/5xP7QuQYPe3gdVx1CZf0fOhz+n
smQwUxPhp9wIsXecllwCylaI1kRdNabwIpSXVxQw3HPDOh0h08JcE6qryHjGTzqj
yc1ynO+xRfitQYiuCmJUsC8b0kTIUIEKRJoGO1oWz1c14/o2eZYgO3GHzUtReCzw
SINDc+huWnVij2M4CoswwDNwuuYpGqecurNcQIT2pY93fFgv4O+ywuHv+vLslobv
SddCuRCUuT3LoA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:02:22 2025 by rpki-client