Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
File: PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft (raw, json)
Hash identifier: 0/G7csn5Cbu2t0J3FMcsdn5Q+XlKqgym+Jbi4lXS67o=
Subject key identifier: 2F:93:8C:E8:80:66:07:79:CD:39:70:3D:4C:59:C8:B3:15:A0:A0:FE
Authority key identifier: 3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
Certificate issuer: /CN=3d555102998184fda7c3012e861900948fcf2773
Certificate serial: 0199FBB36656BD7607655E468154B2A3A866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
Manifest number: 32
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl (hash: m1nYGYpj2xF0UHGMoQ4/HJGqSiXuSUFcjF8U1th1gC8=)
2: yHDz_dgw2HNuVtS7NpKaJLAB8-Y.roa (hash: +cBZOUimuRqIk7jDWcn04PYJ9cM7ifN5PFGvV7TP168=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:66:56:bd:76:07:65:5e:46:81:54:b2:a3:a8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d555102998184fda7c3012e861900948fcf2773
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=2f938ce880660779cd39703d4c59c8b315a0a0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fa:ef:9b:72:09:c1:13:73:2a:a6:1f:bf:11:
66:e7:21:ca:c6:14:27:ad:22:8a:05:38:ad:59:80:
8c:96:c7:0c:7c:f9:d5:10:8c:db:0c:21:39:0a:fe:
dc:d2:84:c1:2b:3a:39:e8:30:84:f8:e0:47:66:9b:
51:08:37:f0:c2:f2:08:08:f4:67:71:85:7c:d0:95:
3c:fc:11:55:1d:1e:ce:f3:e1:1c:14:b7:53:30:92:
64:26:43:af:e5:12:5f:03:31:08:59:7a:3b:91:0a:
8a:7d:3e:92:b4:c9:62:58:c9:bf:3a:7c:0c:60:fd:
f5:86:0c:76:58:b5:b0:bc:92:e8:9f:38:5a:b9:4d:
2c:96:0e:e1:8b:a4:e1:a7:d4:86:b5:df:32:30:8c:
62:29:6c:29:d8:c6:20:a2:b1:e3:98:85:b6:8c:40:
45:9a:95:ca:d5:20:e2:3a:ab:54:f5:b9:48:82:ce:
ba:46:e6:be:07:bf:58:6a:b3:1b:64:9a:d3:44:c2:
b0:84:50:d3:b7:cf:a4:b3:9c:db:e3:40:82:ab:68:
ce:59:9b:7f:c8:bc:e1:77:a6:a8:6e:18:be:c8:3a:
08:8a:af:88:45:17:f7:1c:80:2d:9c:0f:33:71:e0:
ac:21:ad:b1:4f:4c:45:21:36:cd:62:88:66:7c:fc:
07:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:8C:E8:80:66:07:79:CD:39:70:3D:4C:59:C8:B3:15:A0:A0:FE
X509v3 Authority Key Identifier:
keyid:3D:55:51:02:99:81:84:FD:A7:C3:01:2E:86:19:00:94:8F:CF:27:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVVRApmBhP2nwwEuhhkAlI_PJ3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2733ce-e9b9-4ab9-950c-c28bda230cb4/1/PVVRApmBhP2nwwEuhhkAlI_PJ3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:c6:32:75:fd:fc:34:2d:62:12:3f:e2:0b:29:9c:3d:65:ef:
e7:8e:07:ca:28:67:74:78:e8:93:bf:1b:07:da:e0:71:6e:41:
f6:f3:da:a0:8b:e0:d0:6d:f7:14:df:89:4d:a5:b9:3a:70:c0:
d0:47:ec:cd:2c:a6:f3:3b:8e:7f:03:f8:78:b5:c2:a2:a3:13:
d8:be:a2:2e:c4:54:4f:62:c2:d2:42:f7:8c:dc:38:ff:19:35:
02:c5:22:4b:e1:65:b7:41:08:4b:b1:4f:72:72:b3:be:6c:bb:
76:49:6b:b1:d4:08:92:8f:63:ee:32:3c:8b:88:50:ee:60:d2:
6c:e8:9b:6c:42:90:44:66:b5:6c:01:47:1c:4b:9b:81:f1:34:
40:4f:ea:9c:a8:d7:e4:9d:1e:06:7c:9e:d8:b4:40:e2:0a:66:
47:04:ca:f5:32:fa:74:21:ea:3b:a8:10:93:b8:11:b5:97:b9:
90:12:8b:46:17:59:86:8a:81:08:bf:48:ef:1b:2f:30:a9:83:
b5:c0:6c:1d:30:7c:1e:06:77:b3:15:19:31:b0:75:7c:c0:9f:
12:eb:c0:9b:fe:7e:77:87:8d:d3:2f:d4:58:32:57:d5:7e:c9:
a6:15:97:a7:30:c5:e3:c5:63:f4:35:dc:ab:7d:e3:cf:a1:2d:
eb:4b:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:19 2025 by rpki-client