
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: YSUKwOngtby+3Aiy1svL9PWXBS1bGXqMr5xRw8CwK3E=
Subject key identifier: CD:2E:5F:DA:38:7A:C3:83:19:02:C7:E6:0A:85:74:A8:CD:C0:5C:98
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 0199FA6A07A171FE9A3DA47056DD59B0644F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 03:01:16 +0000
Manifest this update: Sun 19 Oct 2025 03:01:16 +0000
Manifest next update: Mon 20 Oct 2025 03:01:16 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: cTqrjVHRmsHT8ML9WV6n/+uzHEXJ+4C5zwyOXi+wg4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:07:a1:71:fe:9a:3d:a4:70:56:dd:59:b0:64:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Oct 19 03:01:16 2025 GMT
Not After : Oct 20 03:01:16 2025 GMT
Subject: CN=cd2e5fda387ac3831902c7e60a8574a8cdc05c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ac:b7:62:ff:ee:7d:77:f1:15:bc:bf:19:5d:
30:54:be:a5:a0:3a:60:3c:60:de:3e:ab:28:58:ad:
36:b6:b3:06:b1:ff:e9:4e:9b:e4:20:08:e1:da:3d:
f2:73:b3:83:90:f4:4b:13:16:dc:61:c9:70:b5:54:
d6:79:37:4b:8c:de:66:84:5c:15:6f:54:13:b5:02:
b5:3d:ed:94:33:f7:35:78:0a:b7:a3:1a:00:40:5d:
6a:06:12:51:c8:e9:ed:7a:b1:e7:f0:97:ab:69:d5:
43:42:29:db:7e:5c:f2:be:a0:b8:29:49:fd:22:af:
2a:9a:d6:e2:63:51:82:8b:84:59:bb:e2:f4:ba:7a:
ba:ac:66:a5:07:6a:83:ef:6f:a8:d2:3a:b0:bf:ed:
a2:36:0a:dc:6a:20:af:13:7c:af:a3:27:3c:04:c9:
7c:ef:80:1a:b0:e9:3b:a3:54:53:5b:99:da:aa:09:
cf:9c:e4:51:4f:cb:06:02:89:f8:e8:bc:3e:e6:3c:
d5:5d:f8:ec:34:ce:ab:98:b4:b0:78:64:3b:4e:eb:
17:a2:82:14:6b:e2:48:ec:96:5c:fa:76:d8:a3:58:
ab:e1:2c:76:3c:34:6b:b1:70:7f:c4:5b:6b:d0:e6:
9d:86:96:3e:06:56:f2:b1:5c:99:98:98:f8:02:21:
82:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2E:5F:DA:38:7A:C3:83:19:02:C7:E6:0A:85:74:A8:CD:C0:5C:98
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:0a:1a:a3:e8:4f:fe:8b:4a:52:1e:87:f9:9a:58:53:76:
4a:78:3c:8c:fc:71:8a:70:8c:f5:4f:da:92:3a:b2:cf:cb:e9:
cb:7f:9d:78:3d:56:56:2a:ec:c7:56:f6:3f:93:4f:43:d1:fe:
fd:b7:f9:44:cd:17:1a:24:cd:1c:d9:84:f3:33:e7:f7:85:0a:
9e:24:dd:d0:fb:70:8e:38:53:08:92:35:e6:89:5a:f1:e3:51:
3c:5c:b4:18:36:75:01:7c:14:82:95:af:c0:68:7c:5b:73:af:
84:69:ae:01:6d:61:ea:35:b6:56:21:4b:5c:78:10:ec:06:16:
13:8e:31:ee:84:11:64:3b:eb:a4:ae:a2:69:fa:b8:9f:32:69:
5b:21:19:70:1b:c8:3b:7d:70:63:09:ec:c4:c3:ba:00:47:13:
50:56:a8:72:55:27:1a:46:4b:5e:24:68:96:6f:2b:36:02:3d:
3a:9e:51:d6:50:8a:38:ec:35:33:fe:a3:92:2c:f2:3e:dd:46:
8d:d1:dd:3c:bd:b6:52:79:6e:f2:10:1e:cc:20:58:d3:bb:4e:
0d:86:4e:38:5f:40:f4:80:5c:82:72:b2:a7:06:69:88:6a:1a:
5f:79:d0:e5:44:72:55:23:c0:41:2a:7e:53:37:ae:40:cc:ac:
9b:4c:cd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:22 2025 by rpki-client