Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier: HGT8H3tvzo7GnzX1TkqR7igQhkehgVX8+0As+wpgc6o=
Subject key identifier: C6:C1:27:01:C1:1C:CF:9A:5E:A2:BA:96:23:6C:9C:8C:35:9B:DA:C7
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer: /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial: 019A4C6192ABD3B46C5F8D83E14518055C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number: 0E9A
Signing time: Tue 04 Nov 2025 01:00:54 +0000
Manifest this update: Tue 04 Nov 2025 01:00:54 +0000
Manifest next update: Wed 05 Nov 2025 01:00:54 +0000
Files and hashes: 1: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: GNL7msHH+obR4NnddaUk5kPLyyWuGk+m3CEkqdHhKAI=)
2: qSKiJOg3xCxclMNg-Fd_1qbi_3I.roa (hash: /vBH3d6n8qi+I8tEAft/7KOt6213rHrV93iMeTKUeww=)
3: xml2dcCWXKAaFsBtMMtFnOKdOuQ.roa (hash: gElK1Fi5SJc9J5gtHChbTahr7ydhdEBTnlWVGE/WfP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:92:ab:d3:b4:6c:5f:8d:83:e1:45:18:05:5c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Validity
Not Before: Nov 4 01:00:54 2025 GMT
Not After : Nov 5 01:00:54 2025 GMT
Subject: CN=c6c12701c11ccf9a5ea2ba96236c9c8c359bdac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:8b:2e:9a:8f:bd:26:34:e2:f3:73:c9:aa:
55:5a:e2:77:2e:04:7b:35:2c:65:73:de:d4:73:a3:
0e:f6:a6:d5:70:22:d1:c2:b0:d5:97:4e:b3:8c:ea:
30:4d:87:c7:a3:46:a7:43:a9:b5:7a:a1:1d:62:44:
de:42:2a:71:d3:ff:ed:7e:a4:b0:10:de:f9:a2:13:
fa:73:69:bd:80:9c:35:be:0b:db:35:c5:65:51:d3:
53:2b:64:b3:0f:9c:98:33:f2:87:ab:67:db:51:55:
7f:a3:e9:36:17:1e:d6:32:89:e5:13:6b:22:cd:84:
a4:54:dd:88:5e:84:4f:0f:7b:c1:d2:b9:12:26:7d:
1d:97:eb:98:e9:5d:9c:57:2f:cf:17:07:c9:a8:a8:
cb:ea:3c:75:0a:d6:12:d0:e7:bd:b2:31:84:f9:f5:
36:93:05:97:ab:cc:fe:e3:9a:cf:0c:48:c4:54:90:
73:89:3a:b7:02:ec:3c:53:e9:36:3b:d4:42:75:87:
be:81:e4:da:46:c7:b6:d3:0c:d3:72:38:7d:b0:e8:
48:ec:dd:90:a9:4f:da:16:b7:d0:c3:98:79:5d:51:
c2:45:01:53:fd:d3:b8:64:30:05:5e:7c:27:29:4f:
09:65:7c:ad:6b:94:18:5b:05:b1:26:0d:de:ff:1d:
be:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C1:27:01:C1:1C:CF:9A:5E:A2:BA:96:23:6C:9C:8C:35:9B:DA:C7
X509v3 Authority Key Identifier:
keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d1:20:0c:03:17:32:87:ed:7a:66:dd:3b:67:8d:fe:b7:5e:
5a:f0:04:ce:c5:6b:7d:a0:bc:9f:38:d5:63:06:01:0f:cc:32:
bb:b3:85:d4:fa:77:38:33:10:cb:45:11:ed:d3:a0:7d:49:cb:
c0:61:7f:e5:c7:20:3d:44:dd:c6:09:8b:a2:96:74:0b:7e:34:
4e:5e:b5:f5:46:48:95:13:ec:bb:7b:ea:18:e0:16:50:a6:2f:
81:91:b2:18:fa:f4:7e:b0:b2:ba:79:35:c0:39:0a:0d:fc:40:
9d:cc:9f:a4:f1:b8:44:da:c1:54:31:4d:73:fd:a7:18:6e:b5:
f9:0d:c3:b7:d9:47:52:80:c9:cd:29:60:52:3c:a4:3d:9d:c5:
f1:a6:a9:43:66:95:12:9a:4b:82:19:1d:64:0a:3f:d9:ce:e2:
63:c4:98:62:77:c3:e7:e3:6d:58:e4:2e:29:3f:f0:2a:03:ee:
32:67:78:e1:b5:3f:3f:f3:7f:8c:70:0b:3c:9b:f8:9f:cd:19:
7b:c8:ce:bb:49:60:0c:a9:36:ef:8a:69:b0:f5:f1:15:59:e0:
77:b0:a1:a7:4e:e9:3b:3c:1b:c1:ee:4d:a9:dc:ee:9b:ef:de:
d0:38:ea:29:5b:56:6d:a3:48:8b:c3:00:a3:1c:75:bb:5e:55:
01:cb:41:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:21 2025 by rpki-client