Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: sLBd4z/ptLlX7J2YRjhYiu/Ywn3C3yHlnnbnr5khDAo=
Subject key identifier: D9:A6:9F:92:A0:65:15:22:8C:22:A9:C2:ED:97:54:F6:7C:32:2C:52
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 019A4F992ADE026668BF543B63815635D8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 1662
Signing time: Tue 04 Nov 2025 16:00:29 +0000
Manifest this update: Tue 04 Nov 2025 16:00:29 +0000
Manifest next update: Wed 05 Nov 2025 16:00:29 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: hQibHxUPpMgsUFtg+85b/m4hqGtH90FaQ5qBBcmBkt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:2a:de:02:66:68:bf:54:3b:63:81:56:35:d8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Nov 4 16:00:29 2025 GMT
Not After : Nov 5 16:00:29 2025 GMT
Subject: CN=d9a69f92a06515228c22a9c2ed9754f67c322c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:da:b1:dd:0d:62:cf:da:10:f8:88:7d:7b:
7c:42:04:21:28:3a:08:95:5d:d2:e6:ea:dc:16:79:
9f:87:eb:48:6a:47:ca:69:92:71:5b:74:b7:d8:37:
ea:2c:0e:8f:a8:26:f8:76:96:07:19:be:e3:e7:98:
73:dd:f1:e5:76:b6:57:f4:24:58:5b:18:2c:28:1f:
05:2f:eb:d2:f7:47:23:3d:2f:82:0f:23:3d:ac:eb:
c3:1f:89:e0:92:b6:66:53:ba:1b:a7:fa:b3:9d:27:
0c:55:a5:f0:c0:d0:9f:b1:68:e6:0e:35:93:63:db:
20:83:9e:62:3a:17:ca:00:d2:7d:48:c8:10:75:69:
95:3f:76:db:22:52:a5:f5:b4:83:0f:97:64:b3:6e:
fc:cf:4f:0d:e4:3e:75:fa:66:60:93:29:d3:e9:97:
88:49:9f:d2:1c:62:dd:4e:86:a6:fd:5f:b5:43:25:
70:de:cc:34:be:f5:51:c3:3f:61:9f:15:63:91:56:
44:9a:0b:f3:21:8a:9f:ca:46:f7:d1:5a:19:6c:01:
38:4e:8d:ab:5f:b5:2a:04:c5:56:fc:7c:d8:47:a6:
e2:af:af:90:aa:58:b9:c2:fb:a0:f0:cc:3a:90:cd:
cc:1b:17:dc:63:50:64:72:a8:1f:c6:51:9a:11:b8:
fb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:9F:92:A0:65:15:22:8C:22:A9:C2:ED:97:54:F6:7C:32:2C:52
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:5b:8a:ca:4b:73:cd:11:6d:11:41:aa:28:a8:e5:b9:e2:dc:
e1:93:3e:48:2e:55:cb:9d:fc:87:03:f0:a4:90:d2:ec:fe:52:
8c:6f:92:4b:3d:31:c2:43:2b:e8:cf:aa:a9:34:40:45:00:e9:
ff:7d:78:8c:fd:fc:38:e7:cf:4b:5e:be:fa:00:bf:3e:d3:5e:
1d:df:4e:d8:7f:64:e7:86:c7:ea:95:2a:e7:02:03:93:84:e0:
8d:09:16:48:ef:a8:e8:6d:44:3f:a9:53:b0:f4:5a:2b:7f:b4:
16:23:3c:10:55:60:00:f0:a4:ef:8f:1b:6b:4b:ac:ed:22:f6:
ba:f0:d1:4b:db:c1:32:39:00:69:71:bc:e0:94:47:c7:71:ac:
6a:14:a7:86:d7:f8:f5:ce:2e:d0:37:c8:c2:4e:23:78:2d:21:
16:94:06:c5:e6:fd:41:fd:6c:f0:6b:c2:c8:bc:fe:01:e7:99:
18:b1:4d:20:58:45:29:d4:00:43:b8:55:54:fe:35:9e:26:37:
58:ad:63:d2:e5:71:33:ed:0a:57:db:82:51:5f:8a:00:66:f4:
02:16:f9:0f:d2:c3:71:89:00:de:04:9e:15:d3:12:35:9a:5e:
cc:68:25:f7:da:ad:75:0b:79:7b:35:7c:a2:d3:3c:c8:e1:24:
28:05:05:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:31 2025 by rpki-client