Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
File: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft (raw, json)
Hash identifier: EeJaIzp8PcoPb9H/kG5kh/HVUUqNYMTXfPxZsVHU+3A=
Subject key identifier: B2:CE:A3:09:3A:AE:DA:5F:81:9A:AE:78:5F:56:68:9A:DB:0D:FB:31
Authority key identifier: 3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
Certificate issuer: /CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Certificate serial: 0199FA6A756891E50D349C23B50974BB3B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
Manifest number: 43
Signing time: Sun 19 Oct 2025 03:01:44 +0000
Manifest this update: Sun 19 Oct 2025 03:01:44 +0000
Manifest next update: Mon 20 Oct 2025 03:01:44 +0000
Files and hashes: 1: Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl (hash: hSfHs4Rsz7VghZX7UoHhACXDEE9q2LtGLKFoKmP1jU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:75:68:91:e5:0d:34:9c:23:b5:09:74:bb:3b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7bf5b19a004c1c17ff5ce7dcc0cfc80787d0b9
Validity
Not Before: Oct 19 03:01:44 2025 GMT
Not After : Oct 20 03:01:44 2025 GMT
Subject: CN=b2cea3093aaeda5f819aae785f56689adb0dfb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:34:23:66:7a:67:5d:f0:ca:c5:46:4e:62:00:
77:df:a2:a8:d1:cc:63:3c:dc:c2:11:61:cf:6d:f4:
47:ad:02:fa:e7:e8:83:5c:8d:53:05:d0:c9:b7:c6:
a1:de:a1:50:0c:ce:23:5e:f6:bd:2f:bc:22:76:6e:
1b:93:9f:1a:76:cb:de:0f:ef:e8:11:c6:1a:eb:db:
48:70:11:ef:23:37:eb:0d:cc:14:fb:d3:b6:7c:e2:
ed:fb:73:8e:26:e7:b9:e6:72:f5:12:8d:32:67:07:
a0:6c:7e:eb:72:17:74:e0:85:03:ae:6c:f9:fe:d5:
56:8c:70:33:eb:a9:c9:13:6f:9e:1f:89:e2:77:2b:
1a:83:a3:6d:b5:df:c3:9f:de:c3:e2:79:9b:b2:c9:
2a:13:49:de:e5:8a:da:fc:d5:be:73:fe:80:38:19:
cb:bc:50:fa:80:f8:c2:a5:d5:15:11:5a:37:af:d9:
8d:10:94:28:4a:0e:c3:5f:da:2b:b1:1f:4c:70:1f:
91:b7:e6:ea:6e:15:60:58:cf:8a:c3:6d:5a:ac:e6:
6e:e9:78:f2:12:c8:33:10:31:a4:20:60:7d:e5:a7:
23:07:b4:bc:db:a2:dc:ea:e5:80:9d:fb:bf:29:e8:
f9:14:60:73:19:24:fc:3a:d5:6f:99:65:d4:ee:cf:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:A3:09:3A:AE:DA:5F:81:9A:AE:78:5F:56:68:9A:DB:0D:FB:31
X509v3 Authority Key Identifier:
keyid:3E:7B:F5:B1:9A:00:4C:1C:17:FF:5C:E7:DC:C0:CF:C8:07:87:D0:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/04b03d-fc77-42a4-8aae-055e86630227/1/Pnv1sZoATBwX_1zn3MDPyAeH0Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7c:4b:7b:ae:7d:a9:35:db:a8:3d:a6:a1:21:a4:20:7d:22:
74:8c:4b:c5:d6:f8:c2:ed:47:51:17:fb:9f:e2:cd:42:57:07:
de:94:ba:4c:83:04:7e:ce:0f:9e:ab:9c:a8:75:c6:75:5a:38:
87:24:25:6f:f4:61:bd:3e:0d:1b:d5:c2:fa:52:4b:8c:34:7b:
de:24:b4:5b:3c:d6:ab:2d:0b:de:9f:36:1c:32:6d:66:b4:f6:
d5:5f:c4:96:98:f0:61:75:95:27:d7:51:fe:41:67:4b:63:ba:
0a:e8:5c:52:49:3c:75:39:cd:95:84:8b:3b:8e:9e:58:cc:8f:
e0:a7:ec:be:b3:47:22:ed:64:2f:06:a3:2b:d3:d2:6b:2d:7e:
26:c9:1c:94:fc:51:75:c2:70:39:2f:dc:5c:16:24:8e:b7:7e:
95:f0:10:85:49:8d:77:ea:1e:fe:b9:56:5b:ef:9f:52:f7:62:
b3:21:62:f0:af:2e:f1:af:86:c2:37:93:21:2f:48:89:55:fd:
e8:0f:82:ce:ae:db:20:cf:eb:7e:c0:fe:e4:02:ee:80:3a:a2:
dc:d3:f2:54:28:32:4e:42:9f:44:ec:a4:b2:85:13:60:61:9a:
9a:47:4b:7e:02:84:f9:fc:5b:8a:5f:f7:27:3c:d1:5b:05:fc:
4c:16:4c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:32 2025 by rpki-client