Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: vmAIY95+Tai6bd64/x/+t1g/QVhzwqpmjtffqPhmPIw=
Subject key identifier: B3:ED:61:E7:6D:92:38:D9:46:4C:B3:A8:31:7F:88:1B:B9:1C:49:FE
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 01976F2BAEFA54F16860D04127117615ED34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 0646
Signing time: Sat 14 Jun 2025 16:00:23 +0000
Manifest this update: Sat 14 Jun 2025 16:00:23 +0000
Manifest next update: Sun 15 Jun 2025 16:00:23 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: 3EJpey6TfLUGxJmI2tLVK+b7jxe8t+19+nksPbMhRy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:ae:fa:54:f1:68:60:d0:41:27:11:76:15:ed:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Jun 14 16:00:23 2025 GMT
Not After : Jun 15 16:00:23 2025 GMT
Subject: CN=b3ed61e76d9238d9464cb3a8317f881bb91c49fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:22:d7:89:9e:6a:77:5a:b5:3c:27:ef:ae:
d7:c5:17:ed:2e:cf:90:c2:79:e7:f3:89:af:33:12:
c1:c4:e6:fa:12:97:4e:16:7d:43:89:58:38:d2:79:
47:94:ee:b7:f8:c3:c3:77:0a:81:e5:88:6e:b2:3b:
92:50:92:18:10:4d:1b:25:77:b7:da:5c:84:cd:11:
8b:f4:40:af:44:b1:0f:c7:c3:97:d9:30:bf:2e:5a:
b2:8b:8f:29:94:b9:9b:45:0e:9d:2b:8a:8b:bc:95:
ed:9a:85:2c:d8:de:e8:fc:46:73:f8:18:95:6a:43:
c1:73:d0:c7:b1:1a:26:6c:57:1f:77:44:3f:72:d0:
be:40:9f:87:48:1b:65:14:0d:b0:2d:58:32:78:6d:
11:9b:7f:95:e4:af:8b:13:0c:8d:17:05:00:03:85:
c3:a6:b8:60:15:fb:bb:c3:9e:f5:35:0a:4b:84:90:
1d:9c:d4:64:36:93:7f:19:d7:a5:6c:a5:00:5c:2e:
01:03:3a:70:0e:f2:35:ec:87:d8:cb:c6:35:9c:40:
b2:43:20:a9:3c:69:69:07:23:83:c1:0e:63:15:43:
b3:87:22:a9:42:12:e5:27:c7:e1:78:0f:2e:41:a8:
de:f5:38:23:7f:60:ca:34:7a:ef:57:f9:66:ab:0d:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:ED:61:E7:6D:92:38:D9:46:4C:B3:A8:31:7F:88:1B:B9:1C:49:FE
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:f4:64:3b:f4:35:3e:dc:20:56:42:6b:b0:f9:27:f8:dc:
ff:85:16:e2:76:d5:bf:a0:f0:cf:f1:c2:81:90:a7:68:f0:97:
16:b9:9c:f2:ca:06:92:56:23:cb:0e:eb:3f:89:87:6b:ec:e8:
25:d0:ad:dd:3c:3d:20:10:ca:3a:b2:7b:a8:ba:3e:5b:9d:ea:
c5:4d:69:8b:cc:97:ff:7f:d6:89:90:50:fb:30:fa:9e:d1:98:
b0:52:48:9a:40:0f:50:34:36:02:50:13:00:82:f1:e3:da:df:
32:63:a3:2b:d2:80:64:21:06:35:76:75:93:08:ae:b7:85:63:
e9:64:18:22:7d:76:7f:98:fb:1d:c0:10:0f:a1:6b:f4:64:6a:
7e:c8:7e:81:23:ab:e0:ed:27:b7:54:b2:57:94:4c:dd:45:90:
ec:b5:86:9e:42:f9:bb:be:7e:f9:8b:ed:99:fd:8f:2e:9b:9a:
40:f6:ae:a9:4c:de:7f:73:df:0c:d2:0e:a7:06:67:41:fe:97:
4a:80:02:00:c3:37:c1:8d:54:e8:9b:cd:fc:f7:f0:f8:84:2a:
fc:72:0a:f5:49:13:22:84:ad:87:85:07:8d:bd:e2:a2:a5:5e:
b4:88:ed:0f:33:db:e7:9a:09:c1:9e:db:05:aa:d2:53:95:4e:
b5:04:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:27 2025 by rpki-client