Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: kxeDk2+0hTpB7VID7EnBLPKOlR+tZ+Xu1Px3Z/MtDBg=
Subject key identifier: 59:A5:A7:DE:F0:7A:6E:AC:B6:E3:7C:53:1B:2E:8B:A1:49:00:9D:F2
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019A4EF4106D90A31E26BEB28E824585120C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 07C3
Signing time: Tue 04 Nov 2025 13:00:08 +0000
Manifest this update: Tue 04 Nov 2025 13:00:08 +0000
Manifest next update: Wed 05 Nov 2025 13:00:08 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: 4sS9rmI1fNKXFKx/yHYXVld9BHq5Uh83sg8rH66z1P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:10:6d:90:a3:1e:26:be:b2:8e:82:45:85:12:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Nov 4 13:00:08 2025 GMT
Not After : Nov 5 13:00:08 2025 GMT
Subject: CN=59a5a7def07a6eacb6e37c531b2e8ba149009df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:64:5e:fd:db:f0:6c:45:12:13:04:3d:fe:
76:50:27:ce:2c:cb:3f:9a:e6:ba:00:2b:09:c8:a1:
11:6f:05:2b:df:81:b9:1d:e0:f7:b5:41:d5:85:e5:
9b:fa:0c:f7:4e:94:e2:f5:dd:28:79:60:6c:70:d6:
71:8f:78:48:9a:49:16:92:83:15:98:bd:4d:79:47:
4b:f0:61:90:8c:07:0e:97:58:27:70:d9:56:6b:59:
15:66:dd:f8:75:90:cb:d8:dc:5a:ae:20:9c:5f:fc:
72:9b:a3:09:be:39:ec:83:d9:07:66:a6:1c:53:58:
b6:56:bc:65:00:c3:00:98:bf:2e:c9:35:96:f5:86:
c2:03:b3:85:7f:49:05:70:ac:15:fc:10:f8:27:fe:
c9:97:4a:f8:3a:fe:8f:93:e2:61:bc:ec:64:48:ec:
6f:01:7a:c4:c9:1a:7c:b8:13:ec:d6:c3:fe:eb:2b:
55:78:79:d5:74:ec:d7:6f:65:5d:0b:6d:ac:e6:9c:
8d:5b:36:78:a2:b9:d6:de:14:00:4a:5e:3c:84:31:
a0:56:8b:39:39:14:04:2a:9c:a5:aa:a6:63:9f:d4:
fb:79:f2:bb:b7:d6:de:77:bc:33:4c:be:b1:18:c5:
f4:0c:68:2d:e1:fe:48:e1:94:90:ad:07:92:a8:d0:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A5:A7:DE:F0:7A:6E:AC:B6:E3:7C:53:1B:2E:8B:A1:49:00:9D:F2
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:c8:ae:9f:64:1b:26:ba:c8:49:d6:ca:13:78:0b:9d:09:
d1:90:ad:ac:95:28:87:9b:3c:dd:58:ab:33:14:ba:30:b9:5e:
4f:24:16:42:0b:e4:fb:d5:ee:e4:26:89:4c:46:0e:06:76:d2:
e8:1e:f5:30:de:c5:7c:0a:92:96:29:00:8a:1c:7f:ad:d2:29:
c0:fe:f1:46:a6:b6:f0:ee:fa:b5:4c:40:a1:f9:cc:84:95:a2:
65:94:0d:95:3f:f5:40:d5:17:57:b3:57:41:16:c1:eb:b6:a0:
20:cc:a3:a7:ee:11:a0:3d:b1:ad:f3:a9:04:72:d5:5c:e1:5b:
8c:09:0e:3d:b4:cd:10:7a:b4:ce:ca:31:99:6f:b0:2b:aa:50:
b7:06:09:29:19:ef:78:70:14:09:d7:e0:9c:e5:aa:79:08:12:
1b:cf:96:a7:c5:35:2c:57:dd:4e:4f:1d:1d:2c:78:6d:d4:40:
4a:54:76:73:ac:17:7a:93:b6:e3:5e:04:40:ec:cd:7f:b7:1c:
52:fb:a4:34:79:f4:c3:ee:7d:43:9e:83:e3:dc:5d:9a:b7:4d:
d6:eb:e5:60:b0:84:8f:30:24:81:88:51:ef:e3:be:fe:ad:d6:
c7:1b:b2:ba:38:0c:86:b8:75:0d:c3:1e:d4:3d:89:36:7d:55:
7d:d9:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:41 2025 by rpki-client