Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: EQuKKy244GlAh58wA1lHemROq41VJgNx0wsK8Bi74ZE=
Subject key identifier: C3:C5:43:FC:68:8C:F4:B0:22:EF:02:A4:0A:C3:66:8A:E4:D3:2B:9D
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 0199FC8FA5C21C6CA7DC3D62166FE4A1213F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 13:01:36 +0000
Manifest this update: Sun 19 Oct 2025 13:01:36 +0000
Manifest next update: Mon 20 Oct 2025 13:01:36 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: Ed98HpRw/bztnLZYk6so+P50GLh5QlvMSUj8eqwvofY=)
3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:a5:c2:1c:6c:a7:dc:3d:62:16:6f:e4:a1:21:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Oct 19 13:01:36 2025 GMT
Not After : Oct 20 13:01:36 2025 GMT
Subject: CN=c3c543fc688cf4b022ef02a40ac3668ae4d32b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:54:c7:ef:6c:af:f8:dd:1a:d5:63:cd:2b:38:
8c:75:3f:05:96:03:1f:7a:df:52:1c:29:f1:b0:64:
e1:d9:13:b3:13:52:fc:ab:f0:fd:24:97:be:4a:09:
bd:f7:84:db:75:c9:6e:a5:56:d1:14:52:ba:9f:c2:
7b:08:26:c8:13:e0:c5:83:de:26:3e:77:9a:80:cf:
e2:42:73:46:e0:e0:1b:90:c3:41:b7:8f:90:62:58:
d0:37:e9:a3:3d:33:3c:fe:0b:54:83:7f:7c:19:21:
fd:f9:5a:5b:65:48:ac:a9:52:39:9d:d2:13:46:c5:
6e:9c:75:56:54:6e:22:51:ee:ff:c9:81:b9:1a:73:
91:92:dc:52:74:46:5d:3f:91:27:82:83:b5:b4:d0:
a0:1a:5f:d6:ac:c6:e0:b6:26:42:30:47:ef:dc:0f:
e9:6d:73:8c:bf:4f:d1:ba:cb:b2:aa:fb:2e:e3:13:
01:75:00:b2:b3:7d:48:21:6e:bd:f7:36:a6:67:26:
ed:69:d3:c6:fa:fa:d5:bf:85:66:34:da:72:24:d1:
da:2a:bb:0b:08:93:b4:e0:c7:be:7f:29:65:6e:4b:
1d:ca:f7:0a:20:02:89:87:27:a6:ed:0e:a0:e9:2c:
76:a0:f7:ad:7b:76:9c:ac:96:2d:4a:28:1b:c0:2f:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C5:43:FC:68:8C:F4:B0:22:EF:02:A4:0A:C3:66:8A:E4:D3:2B:9D
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:48:09:97:16:b7:be:2e:00:52:94:9c:3c:50:91:a2:a7:
f6:5f:64:46:0c:27:1a:01:1c:cd:6d:3a:7a:9b:ec:d2:b6:1d:
cd:19:f5:66:e3:cd:0f:33:f1:04:d5:10:e0:ce:a4:eb:f1:23:
05:94:5c:0e:bd:06:02:3b:77:6d:5e:62:84:db:ba:e7:d7:ee:
68:b0:e8:34:3f:b9:2b:45:5d:2c:50:19:aa:dd:d3:e9:1f:a3:
47:c1:08:6b:df:a5:3f:fc:4e:32:97:ce:bc:47:3c:78:2b:c2:
bb:6e:36:0d:4f:23:96:be:19:51:6b:1e:8d:fc:82:6d:09:28:
f5:a1:19:51:41:e7:49:d3:f9:0f:e3:21:ab:11:34:b5:aa:c5:
4f:36:ba:46:ac:ba:c0:50:18:75:b3:1a:94:67:6d:c3:cd:58:
76:3c:22:d7:cf:73:bd:25:aa:5f:83:05:82:9c:5d:18:38:d3:
b7:97:32:45:0f:61:fe:f7:1e:f2:ee:b2:d4:83:52:63:06:7e:
6b:06:b3:d1:e9:a5:ba:fe:0b:a0:6e:f3:f4:29:61:f7:08:e0:
4a:8e:58:44:b4:8d:fb:f6:a7:19:10:e5:d6:f4:6a:67:c2:71:
2a:8e:43:c2:ae:ba:30:39:65:1e:ca:5e:2a:af:cf:a1:7b:f7:
8b:5f:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:52 2025 by rpki-client