Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
File: pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft (raw, json)
Hash identifier: PIKY0NWvdbwmWhhWFF7MgNmxT++ViUNgyCTk+4Qs2EU=
Subject key identifier: 16:96:E9:BF:C9:38:56:CD:51:0C:98:9A:5E:CC:70:4B:77:29:B6:03
Authority key identifier: A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
Certificate issuer: /CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Certificate serial: 01987E2F2F7F678C4503DD5B9B804FAF1447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
Manifest number: 1571
Signing time: Wed 06 Aug 2025 07:01:18 +0000
Manifest this update: Wed 06 Aug 2025 07:01:18 +0000
Manifest next update: Thu 07 Aug 2025 07:01:18 +0000
Files and hashes: 1: 0TN8GbA_0te4LvZwiVGOjxWVyyI.roa (hash: r7htGnYfYSEvlu71tGptm+rLAL8pN7TnQ6e7cOorBgk=)
2: pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl (hash: Ab5xw1jisQ0+ZR6NYT7Tvimht+dgZA2Aa3HkmmX5vpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:2f:7f:67:8c:45:03:dd:5b:9b:80:4f:af:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e42d7cbafc9dd3205d247d662d85afdd9a186
Validity
Not Before: Aug 6 07:01:18 2025 GMT
Not After : Aug 7 07:01:18 2025 GMT
Subject: CN=1696e9bfc93856cd510c989a5ecc704b7729b603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:40:89:67:ab:e9:43:fc:37:36:df:9d:93:
d3:82:9c:c2:e6:32:75:29:87:f4:60:ef:b5:18:52:
4c:dc:d7:ca:c0:ab:12:dc:b5:49:2e:01:9a:d2:18:
6d:5f:1a:8d:c9:3f:53:94:fc:ea:ef:d3:9a:ae:79:
8d:06:5f:5b:cd:80:c1:e4:fa:09:82:b2:db:cf:3d:
73:44:eb:eb:67:c3:cb:18:3c:87:b8:74:3e:45:20:
3b:08:4e:ec:51:b2:fa:1b:1d:59:d6:8c:fe:ab:6e:
c9:01:af:0c:cd:e1:b1:4e:ab:3d:01:05:5b:17:85:
76:93:59:2f:ce:c9:9a:fd:af:a3:b8:57:d6:38:f6:
6f:6d:14:98:63:4f:e0:3a:59:c0:c2:1b:44:63:b2:
0b:20:61:d8:a4:ce:4c:10:1b:e4:b6:33:70:1d:5c:
a4:c8:07:a9:03:b9:32:ee:bd:20:cf:ed:f6:7f:a3:
98:1c:42:31:8b:72:66:f4:83:8d:16:6d:df:e8:3f:
e1:69:57:9a:6e:bf:dc:cf:44:cb:d3:ab:a2:8a:c5:
89:26:56:10:0e:64:44:a6:69:88:2f:63:26:54:48:
05:30:03:40:5f:71:61:03:ba:ec:0d:79:3c:7b:7f:
c9:7c:c3:8a:93:20:b3:44:8f:17:bf:68:35:02:09:
04:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:E9:BF:C9:38:56:CD:51:0C:98:9A:5E:CC:70:4B:77:29:B6:03
X509v3 Authority Key Identifier:
keyid:A6:0E:42:D7:CB:AF:C9:DD:32:05:D2:47:D6:62:D8:5A:FD:D9:A1:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5C18uvyd0yBdJH1mLYWv3ZoYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc1d62-ae53-48b7-ac79-641d456283c4/1/pg5C18uvyd0yBdJH1mLYWv3ZoYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:67:63:a4:ab:59:11:fc:87:99:6b:91:ad:5f:45:4b:aa:ff:
d9:b7:7e:47:d3:aa:5d:e7:d6:77:d3:1e:7b:20:5a:38:09:42:
55:0c:66:68:17:01:12:a4:c0:d4:31:a6:a7:e4:dc:03:86:84:
9d:0d:d0:9f:64:ed:77:93:ed:69:8a:40:3c:5d:5a:54:ea:1e:
10:8c:ef:ec:13:9d:86:1a:03:44:88:b6:c3:7b:5b:10:8b:df:
35:76:43:05:51:63:95:9a:02:6a:d1:a5:2f:5f:91:7f:96:9c:
4e:f1:22:0a:97:0f:aa:b8:37:58:3f:d6:b9:66:56:01:91:81:
47:b3:81:1d:48:20:2d:b7:64:2d:81:78:54:d2:dc:58:fd:5b:
06:8b:41:e0:f8:72:89:c3:37:c1:16:4f:f8:ab:e7:9d:7e:8e:
ef:5e:60:4b:4c:70:15:cc:5b:d9:97:bb:3d:cd:b9:8a:0e:77:
85:15:4f:8f:ca:cd:a9:0b:06:1a:f7:d1:26:60:2c:08:bd:95:
6f:3c:90:89:0b:7b:1f:01:54:13:07:4b:78:13:8b:cd:46:30:
49:33:49:e6:35:6d:d1:83:a0:96:a5:b8:cf:c0:71:f1:d9:72:
17:67:2f:f2:44:6f:d2:c0:52:60:60:fb:6d:6c:6b:7a:3b:96:
49:1d:e4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:17:12 2025 by rpki-client