Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
File: PNVhnbjXcXN5lW1Op1t22ybRwck.mft (raw, json)
Hash identifier: KCVzr9a5sCLJJkugYVuotuXfykOO+Iis5iRyW6er9FY=
Subject key identifier: B6:DF:40:E8:46:98:2B:4C:56:81:8B:F1:1C:F7:E1:B5:87:A0:82:0E
Authority key identifier: 3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
Certificate issuer: /CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Certificate serial: 0198D70589EB72ADEEB2FD8C977927004D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 13:02:00 +0000
Manifest this update: Sat 23 Aug 2025 13:02:00 +0000
Manifest next update: Sun 24 Aug 2025 13:02:00 +0000
Files and hashes: 1: 4prfTAA9HBYIWFQscXuDZvPOJfU.roa (hash: zMicpYmGFLFzW1lGiXS7QLLBWvT2YuAYQEgxuNA/2gA=)
2: PNVhnbjXcXN5lW1Op1t22ybRwck.crl (hash: ZM8dpXZeKQ3w5AwutnFKVs7P39IAFjwFudDUT4nLmGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:89:eb:72:ad:ee:b2:fd:8c:97:79:27:00:4d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd5619db8d7717379956d4ea75b76db26d1c1c9
Validity
Not Before: Aug 23 13:02:00 2025 GMT
Not After : Aug 24 13:02:00 2025 GMT
Subject: CN=b6df40e846982b4c56818bf11cf7e1b587a0820e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:04:cf:ed:ec:9d:a4:8d:0f:a2:15:ca:c7:
ae:d3:d6:04:da:30:0a:2a:bd:3d:9c:27:5a:ff:71:
1f:ff:e6:a4:c2:c6:4e:18:8d:8c:c1:f1:0c:fc:2d:
73:b7:ff:71:38:50:ce:bd:e3:8c:01:d5:95:8c:a2:
61:eb:65:1c:1e:62:08:62:1f:27:55:96:4b:5b:ac:
71:23:8b:fc:58:57:85:6e:d5:d5:26:87:1a:94:00:
dc:45:14:60:d9:62:e3:33:f5:b2:36:4e:0c:6c:48:
67:57:1b:6b:47:32:49:ae:3f:f5:f4:9e:c0:93:3b:
48:f0:b4:9d:86:eb:c6:9f:eb:cd:d1:98:92:8c:2c:
f5:7b:aa:a6:18:dc:57:41:e9:e4:fb:13:8e:b4:06:
45:49:bb:e4:66:14:71:54:14:70:bd:91:e5:ad:63:
ce:77:f4:db:83:af:2e:be:08:f3:94:b8:cb:dc:ca:
0c:8a:50:1b:84:b8:f2:58:cd:3c:66:31:8e:17:26:
61:cf:c5:77:00:31:af:15:8d:88:01:74:9b:c2:3e:
56:d3:66:6c:6c:a9:ea:04:d5:0b:9b:cc:8d:f1:23:
d4:9b:2f:67:a6:de:3f:77:5c:06:17:6c:1e:42:9a:
da:4c:f0:fe:2c:b9:2d:1e:5d:40:f6:92:0e:e9:0a:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DF:40:E8:46:98:2B:4C:56:81:8B:F1:1C:F7:E1:B5:87:A0:82:0E
X509v3 Authority Key Identifier:
keyid:3C:D5:61:9D:B8:D7:71:73:79:95:6D:4E:A7:5B:76:DB:26:D1:C1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNVhnbjXcXN5lW1Op1t22ybRwck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f3949-40cc-400a-b411-e4ea208a9a2d/1/PNVhnbjXcXN5lW1Op1t22ybRwck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ee:4b:7f:a9:d7:20:6e:4a:51:6a:02:46:da:4d:10:5f:e5:
ca:56:5d:60:e4:5f:3e:b3:ed:9e:17:53:5e:b2:dc:66:25:80:
75:21:ee:47:3a:bf:7c:08:d8:93:7a:ad:d3:e6:c2:6b:06:b2:
98:4f:98:f8:a4:03:c5:ec:bd:9e:f9:a4:c0:94:01:bc:de:c7:
ad:bf:e4:a0:f5:35:b7:68:52:60:19:b5:09:ce:b7:41:48:84:
7e:ec:9e:ec:bf:7b:76:df:8d:7b:53:b4:99:7a:7b:66:f9:ce:
aa:99:bb:17:81:c1:11:fa:ac:9c:6d:4f:a5:1f:58:25:7e:95:
78:f8:fb:ce:c1:90:c5:1e:ff:2a:7d:32:b9:b2:32:77:51:0b:
5c:4c:db:b4:d0:b7:86:c5:74:e9:72:5d:0e:c3:ac:05:70:41:
36:2d:48:17:5c:32:2d:5c:13:4d:da:ae:ee:b9:c4:97:17:a9:
79:a2:fd:61:e4:65:ff:5a:e4:2e:2a:5a:0f:91:ab:05:cd:05:
e9:cb:48:77:90:46:26:d0:a2:8d:01:8c:78:6c:24:40:48:ff:
3d:27:08:13:7c:ce:19:08:9e:53:0a:59:f2:8e:27:9c:20:b3:
a3:c3:08:45:b8:ec:92:df:d1:27:b4:6e:38:22:0a:69:37:f7:
bc:1f:62:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:49 2025 by rpki-client