Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: CEFv/lc+7Bvv/6WqdgnTPLL8iTAA31u9BwpEAcLVspY=
Subject key identifier: 3E:11:CC:E6:2E:9E:12:E3:4D:C8:61:FF:63:1A:68:27:51:DF:2D:8B
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 0198D7061C3550FFB4D0655D930C06C3A116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 13:02:38 +0000
Manifest this update: Sat 23 Aug 2025 13:02:38 +0000
Manifest next update: Sun 24 Aug 2025 13:02:38 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: QgZaPaA0KY0vlgh7E9smTXqx1Gci551vAM2rm2qsHws=)
3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1c:35:50:ff:b4:d0:65:5d:93:0c:06:c3:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Aug 23 13:02:38 2025 GMT
Not After : Aug 24 13:02:38 2025 GMT
Subject: CN=3e11cce62e9e12e34dc861ff631a682751df2d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:d7:4d:97:6a:8c:ec:94:6f:f4:61:b2:1c:
50:a6:76:fc:1f:14:74:7f:5c:59:d7:96:ef:f8:08:
a2:3a:55:aa:33:33:73:86:be:7e:11:bf:91:ce:d2:
fb:a4:d1:68:92:2d:dc:fa:6e:5b:3a:1a:f7:0c:60:
44:67:b2:01:81:df:e8:e0:fb:f4:27:15:88:f7:3b:
1b:71:ff:94:08:54:63:c8:e3:01:95:54:b3:c2:ef:
2e:ba:3a:23:fd:7c:8c:0e:1c:58:56:c6:09:df:2c:
b2:9d:0e:87:fd:d6:22:3d:77:e0:20:60:9f:ea:70:
e8:5d:f3:aa:70:06:74:0e:a6:e5:71:9a:11:fe:57:
ef:8c:b3:19:d5:ae:79:ba:4a:05:cb:81:8e:e1:6e:
76:bc:4b:aa:bd:b7:0d:54:05:fd:61:78:b3:b0:18:
96:35:1a:45:62:a2:8a:88:1b:e2:c0:2f:d7:1a:f4:
c6:dd:bf:98:d0:1b:30:31:5c:6c:c2:df:63:a1:07:
15:f0:58:37:8a:78:b6:91:f8:48:a7:1f:51:8b:cd:
35:53:40:1f:75:fe:ed:82:dd:63:f4:f4:fd:8b:e7:
cb:e1:17:a3:72:a9:fa:fc:30:e9:4c:a9:f8:35:78:
70:5f:49:45:8e:90:79:e4:ca:df:59:8c:81:bc:f8:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:11:CC:E6:2E:9E:12:E3:4D:C8:61:FF:63:1A:68:27:51:DF:2D:8B
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b2:ba:56:b3:7f:4c:db:ee:99:f8:36:f9:7a:49:83:fb:75:
f6:7f:4e:4c:3e:d1:f1:9c:5a:49:de:ee:43:6d:4b:6e:02:bf:
85:4e:ad:70:05:9a:ce:91:7e:75:89:5a:ae:69:5e:98:57:44:
14:ab:95:50:24:8d:5f:06:92:1a:e7:46:bc:e9:b7:a3:a8:5d:
0e:1e:87:8b:97:e0:da:fd:69:9f:f5:5e:c5:e2:c4:10:2f:b0:
42:10:96:e2:b6:4a:b8:74:92:de:3e:6a:fa:2b:8d:37:aa:84:
5d:5c:60:57:09:a8:3c:49:e5:55:74:06:61:28:01:f8:7c:9b:
95:5a:b3:d6:0b:55:2c:55:6a:9c:89:73:4d:8b:da:c7:ad:c3:
c6:73:fa:71:ba:8b:9a:2b:43:11:6a:f8:84:38:53:63:f9:30:
d7:18:d1:7c:bd:d1:49:e0:d0:da:dc:57:77:61:ed:ee:81:ee:
2d:3c:ec:61:25:cc:cd:bf:b3:ac:94:12:c1:c6:b4:de:e2:8b:
2d:b9:ca:f6:fa:e9:90:d4:90:0b:c7:b6:a1:85:18:a6:93:50:
08:4b:4f:df:26:4d:6f:46:f1:f5:b5:6a:a2:ed:2e:7b:cd:cb:
cc:29:5c:b1:12:c2:66:ea:7d:60:2c:5a:0a:c4:e9:7b:c1:97:
99:64:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:58:59 2025 by rpki-client