Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
File: PgiDSzspc5CcCq9btdNUscDlyj4.mft (raw, json)
Hash identifier: +45hhdbwKmKoA584X3KiqdeNbwZ3xm1/JW67+zkmiTs=
Subject key identifier: 3D:21:9D:99:CE:7D:35:D0:7C:84:5C:4F:CA:6D:9A:53:4D:67:88:AA
Authority key identifier: 3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
Certificate issuer: /CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Certificate serial: 01987D1C9A6967F6FBD187FB25F4C06A8F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
Manifest number: 04FD
Signing time: Wed 06 Aug 2025 02:01:23 +0000
Manifest this update: Wed 06 Aug 2025 02:01:23 +0000
Manifest next update: Thu 07 Aug 2025 02:01:23 +0000
Files and hashes: 1: MtWTrnrND6EP3cM9Z5OSCIGl4vA.roa (hash: pbxVZVZ80DN49b7VnIcQNiVRM2BUbkPepC2i0a2pNpo=)
2: PgiDSzspc5CcCq9btdNUscDlyj4.crl (hash: Fi10WI2EnFABHkgDIvUOiD7D4UGK5udf4ulxym39Hts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:9a:69:67:f6:fb:d1:87:fb:25:f4:c0:6a:8f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e08834b3b2973909c0aaf5bb5d354b1c0e5ca3e
Validity
Not Before: Aug 6 02:01:23 2025 GMT
Not After : Aug 7 02:01:23 2025 GMT
Subject: CN=3d219d99ce7d35d07c845c4fca6d9a534d6788aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:46:8c:ac:8d:bb:49:ce:d6:49:f5:e9:84:
99:10:10:a7:7f:5c:c5:e9:23:2d:95:5b:01:63:0f:
d3:f2:3e:52:34:4e:69:37:6f:9c:36:f5:39:6f:4d:
c4:91:d5:f2:66:40:26:b9:40:53:a0:0c:da:97:c5:
d6:fb:83:9b:24:15:65:1b:df:dc:ee:72:dd:36:25:
bd:b0:25:a7:7f:9a:3d:0d:af:6e:c5:56:8f:00:4d:
25:6e:7a:b7:d4:9e:be:76:57:05:68:47:77:a9:21:
98:5e:ec:f3:3a:28:65:29:bb:aa:ed:75:75:fd:47:
f7:5d:e3:4a:33:16:41:db:20:5a:77:db:fc:c9:4d:
d4:8d:d6:83:70:82:8d:3e:ca:b7:c3:69:8b:44:29:
91:ae:66:c5:f7:74:e2:36:c1:a1:8b:8b:91:ff:c0:
22:4d:ed:a1:5a:ea:ae:06:91:2a:63:da:37:d0:45:
76:92:65:83:96:43:bd:63:8d:07:1d:3c:14:81:27:
d0:94:c8:9a:7c:08:21:de:6a:8e:19:e1:55:27:b2:
53:ad:e5:3f:29:c0:3c:45:db:80:da:10:37:aa:e3:
07:3c:71:3b:d0:45:72:66:c8:b2:98:c8:37:65:4e:
7e:b9:aa:fd:58:aa:90:a5:c2:fe:0c:3e:85:64:d5:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:21:9D:99:CE:7D:35:D0:7C:84:5C:4F:CA:6D:9A:53:4D:67:88:AA
X509v3 Authority Key Identifier:
keyid:3E:08:83:4B:3B:29:73:90:9C:0A:AF:5B:B5:D3:54:B1:C0:E5:CA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgiDSzspc5CcCq9btdNUscDlyj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/ef03b3-7472-46de-9586-fd7b9739ca26/1/PgiDSzspc5CcCq9btdNUscDlyj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:53:e8:bf:83:fc:a7:1e:8f:39:22:53:80:39:5a:04:27:52:
87:66:49:d0:90:88:95:0e:ee:be:6e:41:d9:9b:f0:3f:24:0d:
e5:e4:5b:27:39:f6:a3:3f:cf:6a:b7:d1:95:c2:cb:d6:17:f8:
a8:9a:e9:0c:c3:26:91:34:72:28:ca:7a:04:f8:ae:f6:28:06:
81:a8:9d:c2:27:bc:e8:4b:9e:6c:2d:46:f2:e3:28:eb:e6:9c:
6f:80:2b:d2:3b:c2:9b:06:5f:8b:1d:2a:41:d4:03:e8:6f:bd:
6f:65:f8:1b:0d:51:8d:92:4d:49:55:e7:8f:e9:20:73:c2:9b:
8d:a7:f4:72:3b:cb:8b:c2:5d:3a:e4:09:2d:61:f4:3f:77:1f:
97:99:60:b1:4a:59:2b:82:ed:cf:cc:02:cb:c5:aa:b7:dd:1d:
c3:85:28:1f:d3:36:eb:e1:3e:aa:06:16:65:53:06:0c:98:57:
ec:87:3f:94:93:08:bb:79:94:5f:3b:f8:73:80:f1:e8:91:71:
2a:f3:7c:65:07:a7:fe:0d:ca:14:06:ff:6e:6f:13:18:67:51:
61:a4:82:bb:3d:8e:5e:e8:8d:e7:08:d4:b9:6f:c4:b4:63:11:
4b:44:df:c3:23:7b:ce:4e:91:bd:19:eb:b0:e8:ea:f6:5e:01:
8e:4b:ca:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HJppZ/b70Yf7JfTAao+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMDg4MzRiM2IyOTczOTA5YzBhYWY1YmI1ZDM1NGIxYzBl
NWNhM2UwHhcNMjUwODA2MDIwMTIzWhcNMjUwODA3MDIwMTIzWjAzMTEwLwYDVQQD
EygzZDIxOWQ5OWNlN2QzNWQwN2M4NDVjNGZjYTZkOWE1MzRkNjc4OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7ZGjKyNu0nO1kn16YSZEBCnf1zF
6SMtlVsBYw/T8j5SNE5pN2+cNvU5b03EkdXyZkAmuUBToAzal8XW+4ObJBVlG9/c
7nLdNiW9sCWnf5o9Da9uxVaPAE0lbnq31J6+dlcFaEd3qSGYXuzzOihlKbuq7XV1
/Uf3XeNKMxZB2yBad9v8yU3UjdaDcIKNPsq3w2mLRCmRrmbF93TiNsGhi4uR/8Ai
Te2hWuquBpEqY9o30EV2kmWDlkO9Y40HHTwUgSfQlMiafAgh3mqOGeFVJ7JTreU/
KcA8RduA2hA3quMHPHE70EVyZsiymMg3ZU5+uar9WKqQpcL+DD6FZNVTUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0hnZnOfTXQfIRcT8ptmlNNZ4iqMB8GA1UdIwQY
MBaAFD4Ig0s7KXOQnAqvW7XTVLHA5co+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYt
ZmQ3Yjk3MzljYTI2LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9lZjAzYjMtNzQ3Mi00NmRlLTk1ODYtZmQ3Yjk3MzljYTI2
LzEvUGdpRFN6c3BjNUNjQ3E5YnRkTlVzY0RseWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Pov4P8
px6POSJTgDlaBCdSh2ZJ0JCIlQ7uvm5B2ZvwPyQN5eRbJzn2oz/ParfRlcLL1hf4
qJrpDMMmkTRyKMp6BPiu9igGgaidwie86EuebC1G8uMo6+acb4Ar0jvCmwZfix0q
QdQD6G+9b2X4Gw1RjZJNSVXnj+kgc8Kbjaf0cjvLi8JdOuQJLWH0P3cfl5lgsUpZ
K4Ltz8wCy8Wqt90dw4UoH9M26+E+qgYWZVMGDJhX7Ic/lJMIu3mUXzv4c4Dx6JFx
KvN8ZQen/g3KFAb/bm8TGGdRYaSCuz2OXuiN5wjUuW/EtGMRS0TfwyN7zk6RvRnr
sOjq9l4BjkvK3g==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:37:29 2025 by rpki-client