Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File: PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier: tokl03OpCSFTMdahwKmRxonpYlS4Uwfq7joh8LyiZFY=
Subject key identifier: 64:C6:BC:D4:A9:05:4C:A3:3B:3C:85:39:17:84:AA:A7:20:27:FF:72
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 019A51198E9BEB2282A4591132BDF0274097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 23:00:20 +0000
Manifest this update: Tue 04 Nov 2025 23:00:20 +0000
Manifest next update: Wed 05 Nov 2025 23:00:20 +0000
Files and hashes: 1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: LHAM7S780TsR+cEMNhmWopYpSd0GRyLa9vPBVy6NLw4=)
2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:8e:9b:eb:22:82:a4:59:11:32:bd:f0:27:40:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Nov 4 23:00:20 2025 GMT
Not After : Nov 5 23:00:20 2025 GMT
Subject: CN=64c6bcd4a9054ca33b3c85391784aaa72027ff72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d7:1c:af:c9:6e:ef:cf:d0:aa:54:3b:da:88:
4a:bf:06:fe:67:2f:44:7a:ba:26:84:b8:ed:21:e5:
38:03:1a:05:55:f9:97:6d:ae:62:08:4f:85:e4:b3:
97:a8:c9:71:49:a5:d5:23:ca:df:8f:f2:5e:05:d6:
5c:42:c0:d0:70:b9:96:be:75:9a:e7:7c:9c:53:7b:
78:8c:d1:d1:bf:d0:53:41:09:72:9e:f0:c8:9c:c1:
63:6e:bf:cb:36:bf:89:eb:1d:60:e4:3b:5c:e2:64:
83:ba:f9:80:7a:09:80:da:6c:bb:03:99:24:77:11:
3b:17:6a:45:2c:e3:33:60:60:0e:b7:c7:03:b5:86:
a1:de:25:31:8c:80:d0:0e:a6:c1:a3:d2:5b:0f:ed:
e9:8f:d1:25:fc:30:3d:e9:38:ab:87:80:eb:7e:4e:
55:68:05:ad:4b:6a:fa:e9:b3:3b:6a:ca:4f:e2:d5:
a0:26:75:39:1a:2f:3d:21:0b:84:aa:f3:08:02:4b:
39:fc:bb:ce:13:e9:02:46:10:90:f1:bd:ed:65:d8:
cc:df:9e:be:5a:2c:8c:39:25:6a:3e:1f:8e:52:89:
16:1b:34:ae:50:f2:72:8b:65:72:be:40:e3:ca:8b:
83:47:83:ec:1b:e4:2a:e4:17:de:0b:0c:90:60:26:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:BC:D4:A9:05:4C:A3:3B:3C:85:39:17:84:AA:A7:20:27:FF:72
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:e2:41:ce:7f:83:81:f1:c9:c1:c1:e8:31:df:8e:66:c6:4a:
de:f4:cb:8e:03:76:e6:a2:b2:b7:71:4d:fa:0f:a7:29:e7:87:
6c:63:82:bf:f9:96:91:10:83:d4:7b:2c:3e:95:50:ce:15:9d:
95:6e:b5:0e:f1:71:9f:0d:f5:77:be:b5:43:58:92:82:64:05:
92:1c:a2:fe:46:c0:ee:a4:77:ac:46:23:1c:65:1c:6a:18:16:
e1:88:ac:69:4d:70:43:9d:44:19:c4:1d:1a:12:95:20:51:d0:
cb:bb:9b:ed:fe:cd:ed:73:76:bd:3d:d2:7a:f6:cf:6a:12:9b:
c9:b7:b5:d4:8e:f9:df:8d:82:be:07:6a:c5:69:ed:24:b9:65:
dd:28:ad:91:da:fe:25:b6:8d:e3:d5:a9:00:d5:09:43:2b:02:
10:4d:e8:d5:a2:aa:fc:e7:4b:91:e5:8a:4e:8e:c0:05:3d:93:
6d:b1:a6:79:10:17:52:64:69:ee:5e:4d:09:f2:cc:89:b7:6a:
5b:e8:eb:b8:8c:21:e3:68:39:3c:ff:24:87:45:0f:bc:64:af:
72:38:57:23:5d:6a:9f:7a:89:4d:0f:f0:8d:57:ef:a7:95:af:
9d:cb:4f:8f:4e:81:65:24:d8:ba:03:99:ef:fe:ed:8a:d5:82:
94:99:ca:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:08:47 2025 by rpki-client