
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
File: PGvK_z6ArkGaFdG8s24xmN744ic.mft (raw, json)
Hash identifier: Dgvi7vpKDENw+7t6xiM/UMXv0ThLwltFpO472e/RWQ4=
Subject key identifier: 43:48:9B:56:1F:36:6A:85:C0:24:0B:20:9D:3E:2A:18:D0:9B:F0:C5
Authority key identifier: 3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
Certificate issuer: /CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Certificate serial: 019873E2D3B71CE409A277222FC9FF85616B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
Manifest number: 06CD
Signing time: Mon 04 Aug 2025 07:01:41 +0000
Manifest this update: Mon 04 Aug 2025 07:01:41 +0000
Manifest next update: Tue 05 Aug 2025 07:01:41 +0000
Files and hashes: 1: BneHQ-af6etJYnzgVpFHJTLWtfI.roa (hash: SK4P5sVwHnq6qFE+d1xG/bjzaly1qgrqi3Y+RExkIAE=)
2: PGvK_z6ArkGaFdG8s24xmN744ic.crl (hash: AIZpKTBrpzWCzI/x0h4x4Gct1ysvJckQnSF9TzFDeRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d3:b7:1c:e4:09:a2:77:22:2f:c9:ff:85:61:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c6bcaff3e80ae419a15d1bcb36e3198def8e227
Validity
Not Before: Aug 4 07:01:41 2025 GMT
Not After : Aug 5 07:01:41 2025 GMT
Subject: CN=43489b561f366a85c0240b209d3e2a18d09bf0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:df:38:6a:57:ed:62:99:b5:ef:49:68:01:
56:c6:46:9a:e8:8e:8c:44:31:6f:88:b0:dc:2b:1d:
06:7f:b2:6f:1c:cf:a5:95:fe:03:35:36:c1:2c:63:
d1:3e:83:bc:f7:32:c1:f8:ca:ca:cd:1f:8d:1a:6a:
4f:be:85:ab:16:f5:64:11:95:42:35:e9:0b:00:bd:
fc:ca:54:02:d8:89:bf:a2:95:42:79:5b:d3:6e:10:
d3:be:05:e5:3f:22:9d:c2:7c:e5:a2:41:46:df:c8:
ef:34:6f:6d:17:cf:40:43:a5:15:fe:f7:50:64:d9:
0f:aa:f7:e0:8c:53:ed:77:02:0a:b8:47:77:2c:7a:
c7:e8:fd:b9:21:6a:bb:3b:97:75:aa:a0:46:b6:67:
6c:2e:d3:5a:57:dc:fb:f9:68:a9:9d:41:a4:e4:01:
0d:e5:41:36:02:a9:a7:58:a5:39:23:12:49:b4:01:
af:d4:4b:57:dd:24:61:e4:d0:36:ab:ed:ac:f3:8c:
fe:9f:51:eb:49:a8:95:db:28:82:c4:e3:fa:9b:95:
41:4d:30:78:ef:48:a1:dc:3a:a8:58:34:da:f7:fb:
7c:8a:1b:39:50:b7:0d:25:07:42:8e:ac:6d:1e:f4:
b1:65:b5:75:a1:99:fc:3b:83:00:e6:81:e7:c3:09:
4b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:9B:56:1F:36:6A:85:C0:24:0B:20:9D:3E:2A:18:D0:9B:F0:C5
X509v3 Authority Key Identifier:
keyid:3C:6B:CA:FF:3E:80:AE:41:9A:15:D1:BC:B3:6E:31:98:DE:F8:E2:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGvK_z6ArkGaFdG8s24xmN744ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f328ff-927f-4116-8e33-4043b2c77bbf/1/PGvK_z6ArkGaFdG8s24xmN744ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:c3:8d:14:93:42:b8:7b:32:f1:e4:8b:90:27:7a:1a:6c:
70:e0:6b:b4:33:08:1a:09:bf:83:ab:35:5b:67:72:a4:dd:02:
5d:02:9e:87:3b:f2:35:2a:a9:07:da:2f:61:94:30:b4:7b:d7:
d4:42:44:a8:63:62:b8:81:98:be:a7:4a:59:49:1f:76:9e:26:
be:c3:02:af:a5:ca:e1:c2:a1:c6:f1:93:d7:18:28:43:b7:15:
2a:31:8c:d7:7a:d6:1d:7a:4b:b8:5c:1f:20:04:aa:41:ed:38:
54:3d:65:73:aa:e9:65:ab:5d:2e:1d:08:42:7c:4b:13:76:6c:
6a:e7:3a:16:f9:c0:cb:b2:0b:35:0a:ca:c9:db:37:1d:71:77:
67:40:d5:db:6b:26:30:41:62:22:9b:ae:eb:ef:f9:a0:7d:88:
23:e6:77:be:99:c4:38:d5:3c:74:db:41:5e:a9:fd:5e:94:31:
9e:ac:15:2e:da:9b:63:ed:0b:82:50:2f:60:5a:d4:20:07:48:
14:22:42:40:f1:74:fd:a9:67:70:a1:d2:6f:70:a8:70:e6:2d:
a9:bf:5c:84:73:9e:6e:d5:3d:7c:c5:21:5d:9e:9c:8e:36:e2:
c4:e9:87:79:96:af:b1:b1:d3:d2:2a:8c:10:43:e6:43:1d:1e:
b3:d3:f0:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4tO3HOQJonciL8n/hWFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNmJjYWZmM2U4MGFlNDE5YTE1ZDFiY2IzNmUzMTk4ZGVm
OGUyMjcwHhcNMjUwODA0MDcwMTQxWhcNMjUwODA1MDcwMTQxWjAzMTEwLwYDVQQD
Eyg0MzQ4OWI1NjFmMzY2YTg1YzAyNDBiMjA5ZDNlMmExOGQwOWJmMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/fOGpX7WKZte9JaAFWxkaa6I6M
RDFviLDcKx0Gf7JvHM+llf4DNTbBLGPRPoO89zLB+MrKzR+NGmpPvoWrFvVkEZVC
NekLAL38ylQC2Im/opVCeVvTbhDTvgXlPyKdwnzlokFG38jvNG9tF89AQ6UV/vdQ
ZNkPqvfgjFPtdwIKuEd3LHrH6P25IWq7O5d1qqBGtmdsLtNaV9z7+WipnUGk5AEN
5UE2AqmnWKU5IxJJtAGv1EtX3SRh5NA2q+2s84z+n1HrSaiV2yiCxOP6m5VBTTB4
70ih3DqoWDTa9/t8ihs5ULcNJQdCjqxtHvSxZbV1oZn8O4MA5oHnwwlLLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENIm1YfNmqFwCQLIJ0+KhjQm/DFMB8GA1UdIwQY
MBaAFDxryv8+gK5BmhXRvLNuMZje+OInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMt
NDA0M2IyYzc3YmJmLzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mMzI4ZmYtOTI3Zi00MTE2LThlMzMtNDA0M2IyYzc3YmJm
LzEvUEd2S196NkFya0dhRmRHOHMyNHhtTjc0NGljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5zDjRST
Qrh7MvHki5AnehpscOBrtDMIGgm/g6s1W2dypN0CXQKehzvyNSqpB9ovYZQwtHvX
1EJEqGNiuIGYvqdKWUkfdp4mvsMCr6XK4cKhxvGT1xgoQ7cVKjGM13rWHXpLuFwf
IASqQe04VD1lc6rpZatdLh0IQnxLE3Zsauc6FvnAy7ILNQrKyds3HXF3Z0DV22sm
MEFiIpuu6+/5oH2II+Z3vpnEONU8dNtBXqn9XpQxnqwVLtqbY+0LglAvYFrUIAdI
FCJCQPF0/alncKHSb3CocOYtqb9chHOebtU9fMUhXZ6cjjbixOmHeZavsbHT0iqM
EEPmQx0es9PwKg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:36 2025 by rpki-client