
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
File: PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft (raw, json)
Hash identifier: 6nYOpkijssWAKpUmGGnS5I+eSEPnp4y7s8C4U5VoV0A=
Subject key identifier: D5:F4:79:BB:5D:B1:E8:A1:32:E3:87:9E:0A:C3:13:BA:E9:E9:02:EB
Authority key identifier: 3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
Certificate issuer: /CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Certificate serial: 0196C26FCDDBFA0793F695D2875F8C07F0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 03:00:29 +0000
Manifest this update: Mon 12 May 2025 03:00:29 +0000
Manifest next update: Tue 13 May 2025 03:00:29 +0000
Files and hashes: 1: 3-Ja7oUVjGguwh6QaF2yeAfwhyM.roa (hash: nrUNLtMMNN8x4oqm05IG63Gk5IknemEKbhNaDnkCTrY=)
2: PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl (hash: ssY0ol2QemhLYCxuxSTBcOY6y/MW3GsIaUEIajVsJGM=)
3: QvOFAf8FV-u4BHZ7nVnLpgpZ8-o.roa (hash: xTswaXIuzP+4J3jL8v5PcwUSYu10jxnq7ts41cuAvZE=)
4: adzPWtlHDTvsggmKWbe4TnrcvIk.roa (hash: n14P1Q6Wx2eq+iqMHqpfTj36nMIIclkcTcwOpIeBWTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:6f:cd:db:fa:07:93:f6:95:d2:87:5f:8c:07:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef46116a11f11f51fc9a1d225a0bfcefdbed786
Validity
Not Before: May 12 03:00:29 2025 GMT
Not After : May 13 03:00:29 2025 GMT
Subject: CN=d5f479bb5db1e8a132e3879e0ac313bae9e902eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:14:14:87:3d:61:a9:0a:40:03:e2:8d:5f:74:
4a:bf:5a:b5:f9:24:ff:d1:a6:50:b5:19:6f:00:f9:
f3:6d:ef:fd:7e:89:fe:9c:e5:65:bb:1a:dc:92:91:
32:0a:13:8d:11:10:fe:fc:de:ac:03:65:19:d6:98:
13:c9:10:b6:9a:04:86:83:dd:e5:51:f7:33:fb:07:
65:81:73:ec:5a:03:0f:41:dc:7a:74:b6:3b:ac:e6:
53:6f:f2:7b:b7:00:a2:32:82:ac:61:18:2f:65:e4:
1d:62:34:9f:da:a4:9b:c9:8b:b3:d8:5d:57:0c:00:
06:21:24:65:68:04:30:28:fe:05:8e:8b:8e:15:af:
6b:f8:03:49:8d:21:d1:23:c6:74:65:bc:4a:f5:ab:
e0:48:f1:25:da:5d:68:c2:40:a1:de:6f:84:a1:87:
01:c7:69:27:13:0a:c3:1e:02:15:f6:30:70:2c:82:
d9:f5:ea:39:60:f8:90:84:b5:21:70:5d:4e:47:bc:
57:19:b4:4b:07:27:61:3e:a2:76:27:ba:d1:86:58:
6d:3e:de:fe:bf:7f:54:09:3f:88:92:ab:65:93:98:
32:09:2d:28:6a:fa:0a:58:af:ff:64:72:c7:57:02:
34:8d:ef:b7:a4:51:70:33:64:51:90:91:dd:16:52:
be:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F4:79:BB:5D:B1:E8:A1:32:E3:87:9E:0A:C3:13:BA:E9:E9:02:EB
X509v3 Authority Key Identifier:
keyid:3E:F4:61:16:A1:1F:11:F5:1F:C9:A1:D2:25:A0:BF:CE:FD:BE:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvRhFqEfEfUfyaHSJaC_zv2-14Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d10a1c-0ade-4bcb-bbfc-67ba7a215630/1/PvRhFqEfEfUfyaHSJaC_zv2-14Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:07:a7:c7:21:af:9c:6e:08:90:a4:e6:99:dd:15:bc:78:28:
24:af:9f:f2:66:4c:6f:93:b7:6c:72:a2:6b:43:75:6d:0b:21:
60:50:90:3a:f1:a0:b6:44:7f:32:96:e1:15:af:ed:1d:e6:58:
fd:c8:eb:8c:58:13:c7:6c:d6:cb:d1:12:10:9d:7b:b1:95:48:
ae:df:56:a1:04:28:7e:5a:57:47:7c:0d:77:46:68:47:33:3f:
29:5e:5a:fe:ac:e0:8e:02:76:48:0e:c7:de:79:1f:e7:9f:1b:
9b:22:bb:43:d4:fd:1b:e9:66:8b:cc:ef:31:26:69:fa:2b:10:
94:19:d2:89:e3:a5:2a:01:82:7e:c1:c3:be:61:b7:fe:bb:5c:
92:e2:a5:c5:e4:d7:5e:44:9c:9b:a1:33:df:3f:16:c3:f6:1f:
64:6e:49:83:2e:fb:39:29:87:a6:01:39:49:06:36:94:7c:6a:
da:4f:38:fe:a7:a3:f3:e7:ed:db:69:bb:57:ac:79:f8:39:bb:
c3:28:06:92:3d:25:84:dc:4f:2d:a6:97:57:62:75:2c:92:7c:
6f:ed:81:a0:60:6c:2f:fa:b3:79:b7:ba:e4:3b:6f:ee:f8:32:
44:52:80:be:05:c4:74:fa:8f:60:71:f7:38:bf:69:3e:ae:00:
54:4d:66:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCb83b+geT9pXSh1+MB/DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjQ2MTE2YTExZjExZjUxZmM5YTFkMjI1YTBiZmNlZmRi
ZWQ3ODYwHhcNMjUwNTEyMDMwMDI5WhcNMjUwNTEzMDMwMDI5WjAzMTEwLwYDVQQD
EyhkNWY0NzliYjVkYjFlOGExMzJlMzg3OWUwYWMzMTNiYWU5ZTkwMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BQUhz1hqQpAA+KNX3RKv1q1+ST/
0aZQtRlvAPnzbe/9fon+nOVluxrckpEyChONERD+/N6sA2UZ1pgTyRC2mgSGg93l
Ufcz+wdlgXPsWgMPQdx6dLY7rOZTb/J7twCiMoKsYRgvZeQdYjSf2qSbyYuz2F1X
DAAGISRlaAQwKP4FjouOFa9r+ANJjSHRI8Z0ZbxK9avgSPEl2l1owkCh3m+EoYcB
x2knEwrDHgIV9jBwLILZ9eo5YPiQhLUhcF1OR7xXGbRLBydhPqJ2J7rRhlhtPt7+
v39UCT+Ikqtlk5gyCS0oavoKWK//ZHLHVwI0je+3pFFwM2RRkJHdFlK+BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX0ebtdseihMuOHngrDE7rp6QLrMB8GA1UdIwQY
MBaAFD70YRahHxH1H8mh0iWgv879vteGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMt
NjdiYTdhMjE1NjMwLzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9kMTBhMWMtMGFkZS00YmNiLWJiZmMtNjdiYTdhMjE1NjMw
LzEvUHZSaEZxRWZFZlVmeWFIU0phQ196djItMTRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQenxyGv
nG4IkKTmmd0VvHgoJK+f8mZMb5O3bHKia0N1bQshYFCQOvGgtkR/MpbhFa/tHeZY
/cjrjFgTx2zWy9ESEJ17sZVIrt9WoQQoflpXR3wNd0ZoRzM/KV5a/qzgjgJ2SA7H
3nkf558bmyK7Q9T9G+lmi8zvMSZp+isQlBnSieOlKgGCfsHDvmG3/rtckuKlxeTX
XkScm6Ez3z8Ww/YfZG5Jgy77OSmHpgE5SQY2lHxq2k84/qej8+ft22m7V6x5+Dm7
wygGkj0lhNxPLaaXV2J1LJJ8b+2BoGBsL/qzebe65Dtv7vgyRFKAvgXEdPqPYHH3
OL9pPq4AVE1mIg==
-----END CERTIFICATE-----
Generated at Mon May 12 05:08:17 2025 by rpki-client