Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: yeMdIloJ0eOmmod4k0AwDoJ7TrtSMFX4reVl5nDEa8w=
Subject key identifier: A2:18:0C:8D:68:E2:EA:F3:C6:7E:3F:EB:37:65:0E:D9:93:73:94:03
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 0197BAB466AEB14A16745E9255FE2C49EC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 08:01:14 +0000
Manifest this update: Sun 29 Jun 2025 08:01:14 +0000
Manifest next update: Mon 30 Jun 2025 08:01:14 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: zCV5xvObhs2xvDZKlFdXRfBnwYt3/ifIzYbX+hjznmY=)
3: VczOYK23SIrQwSfO7WNvNHITrEQ.roa (hash: vE9e17sANr8/qzhWCh8RdI6FabALXXTALY3d06XGM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:66:ae:b1:4a:16:74:5e:92:55:fe:2c:49:ec:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jun 29 08:01:14 2025 GMT
Not After : Jun 30 08:01:14 2025 GMT
Subject: CN=a2180c8d68e2eaf3c67e3feb37650ed993739403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:50:cc:c8:47:c5:89:4f:84:d0:c0:45:6f:
80:ae:8b:ca:4e:9e:6b:ce:1b:50:5b:e8:f7:16:ee:
ff:0f:d4:eb:48:3d:c8:8e:c8:79:07:61:bb:bf:98:
54:f1:b1:7a:1c:57:12:40:9c:1e:af:6d:a6:3a:8a:
ef:e3:b7:e8:17:8d:46:06:7d:a4:2d:27:05:d0:d3:
65:dd:f6:0a:40:46:61:99:b7:9a:b5:50:dd:74:3d:
a8:92:6a:76:c1:f6:34:85:0c:83:42:07:6d:e1:73:
2e:24:c6:03:82:34:3c:69:71:ba:92:50:cd:73:b4:
e5:e8:eb:e0:64:27:48:80:08:af:42:d4:ee:ef:eb:
50:95:14:c6:7e:33:b7:2b:85:1d:cd:88:3a:e3:06:
f6:04:b3:ee:87:60:f6:62:43:ee:52:c0:98:ff:e1:
67:09:86:8a:6a:45:d3:23:e0:5e:ab:c7:9a:67:29:
98:a4:09:70:14:b0:b1:18:8f:31:e8:95:3c:22:99:
b4:82:c1:ff:07:c5:60:43:42:c5:14:1f:1d:83:53:
b8:c9:f2:06:77:4a:ec:9b:40:ec:55:92:45:de:71:
31:cd:5e:12:33:f5:12:f7:0d:f2:59:b4:13:cf:1e:
30:02:35:ce:fa:ec:ca:8b:00:b6:e5:aa:47:61:ed:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:0C:8D:68:E2:EA:F3:C6:7E:3F:EB:37:65:0E:D9:93:73:94:03
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:3d:22:ff:8e:fd:7b:58:9e:00:e6:d6:71:1d:15:d6:f0:0b:
9e:58:e9:e8:9e:96:e6:1c:e1:fc:de:8b:d2:bc:ec:d6:5e:9b:
f6:46:3c:08:f1:80:33:2d:7e:65:17:48:af:f5:8d:a7:42:1f:
97:69:ab:8b:61:8c:9f:52:df:d7:75:f4:fe:79:ac:e1:54:a3:
5b:63:33:af:da:72:d4:2c:1a:13:d1:da:c8:9b:87:5c:ed:23:
e0:95:d3:c9:fc:a3:76:c7:e5:6c:96:9c:b5:88:88:5a:19:ea:
52:88:90:03:67:41:bc:80:c6:ba:50:db:9f:74:0f:d0:8b:56:
12:ac:55:71:01:34:9e:7b:84:5a:c0:51:5a:88:e2:90:64:b0:
d4:b9:df:55:11:04:57:f1:1e:a6:39:19:8d:0f:e9:be:f1:d0:
de:cd:48:8a:31:bc:fe:66:00:86:99:d8:ad:66:4c:c5:c0:06:
60:53:b2:ae:3b:6d:94:52:e2:9f:e5:dc:8c:d1:18:1b:5b:05:
7d:26:50:8f:d2:ac:ca:26:17:5b:ba:ce:0b:b0:5a:1b:98:1b:
3b:76:2f:9e:eb:72:42:34:70:c4:06:bb:8f:72:71:b5:79:1d:
5f:7f:eb:21:b2:85:1e:7f:2c:78:41:01:fd:88:f3:64:82:67:
ea:07:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:24 2025 by rpki-client