Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: LJqVcsWHL3OmGS5VqkEzSxgk+DyRlI5yyVIx+mAJbQA=
Subject key identifier: 23:F3:2E:85:04:B3:0C:A3:11:67:E0:30:E0:EE:F6:82:F7:2A:05:B9
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 0198D70582FE0EF7F4B969B9D323FB59C9F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0D74
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: vyKwjGZ1Ed6FLAMkJnBY1yIvRSyDOHMGe41ImOhNY8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:82:fe:0e:f7:f4:b9:69:b9:d3:23:fb:59:c9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=23f32e8504b30ca31167e030e0eef682f72a05b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:bc:98:fb:36:4e:2f:d5:29:cc:aa:9b:c1:
d9:e3:08:be:a2:74:8a:0e:b7:21:58:9b:3b:eb:4c:
3c:66:2b:6a:1d:39:4f:ad:ed:95:c2:15:48:b4:5f:
d1:53:9e:e7:81:0c:70:e5:2a:a4:a7:30:74:4d:84:
33:6b:a8:2a:ce:8a:48:f4:59:de:63:c3:56:ec:83:
13:36:4b:47:50:07:1f:cf:fb:4d:86:ad:17:c8:f3:
40:3d:ac:87:18:1e:8a:b0:56:45:3a:e9:21:06:5d:
19:f5:0c:1a:1e:bc:64:1a:45:39:70:6a:f2:06:a0:
41:33:1e:1e:b9:e0:56:5f:99:69:cf:9b:e7:40:76:
2f:82:1d:df:8a:54:b6:3a:ab:79:a4:a4:cd:88:c6:
cb:ad:77:48:5a:63:18:b7:84:7f:9e:d5:5e:f6:a6:
5b:24:54:71:7e:a3:d9:f0:84:a6:5c:31:9f:c2:0f:
d6:63:ea:a6:cf:cd:e6:b9:78:01:32:2e:aa:7b:57:
c6:23:06:e7:fb:de:ba:3a:80:79:4c:67:c6:f9:40:
05:ce:11:33:63:9e:23:4c:7d:d2:d7:08:ef:f7:58:
a1:08:a2:37:cc:2e:e6:8c:75:65:82:7a:f6:11:46:
de:5b:4f:58:bb:2d:03:06:47:6c:7d:71:82:40:1d:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:2E:85:04:B3:0C:A3:11:67:E0:30:E0:EE:F6:82:F7:2A:05:B9
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d8:d2:07:c2:72:d9:98:a7:55:20:d6:be:9e:02:50:40:82:
23:49:af:5c:b8:6c:a2:aa:4e:5c:4d:4b:ca:70:0b:0b:9b:5f:
96:4c:4d:66:eb:8e:ec:cc:fd:30:be:bd:f9:9a:2a:65:81:b3:
c3:97:c0:d8:cf:9e:7b:d2:9a:70:33:de:76:41:ef:6c:1d:0b:
b7:88:5d:26:f5:b5:53:92:5d:25:f3:ea:21:97:23:3c:ad:0b:
f0:29:5d:44:ff:21:25:1b:6e:51:bd:b9:9e:56:51:98:b0:7f:
d3:a6:12:0f:cb:68:7b:46:b7:37:96:c8:49:86:77:72:08:06:
b3:4e:6c:e7:8d:d9:20:5e:0c:d3:9e:e8:7f:ed:07:12:54:d4:
52:51:f5:6a:66:71:da:70:72:6d:76:eb:f0:6c:7b:64:48:07:
73:dd:2a:9c:5c:64:fd:6b:e5:0f:7d:f0:d5:41:ec:2e:00:8b:
fe:73:f8:2d:29:a9:b9:0a:78:47:97:b6:62:53:4d:2d:b2:2c:
1b:69:ae:21:5d:82:5d:96:72:f7:28:53:fa:49:f5:90:4b:62:
d7:ed:9c:ba:4c:97:4f:b1:88:34:d9:47:6a:73:58:00:04:e9:
1a:9c:13:0d:8d:6a:3b:47:e4:e1:33:9f:5b:e9:ec:d5:a5:15:
34:3a:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:54 2025 by rpki-client