Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: tpkREazPtYrc0glHahK3eOyk6hm/HcUMi8zFP0xVZec=
Subject key identifier: 14:1B:95:58:B1:69:4C:18:A1:79:4E:F0:7B:5A:C1:8D:A4:5B:34:01
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 0198D5BC31D1CD578BF1B47150C281C07A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0ACA
Signing time: Sat 23 Aug 2025 07:02:17 +0000
Manifest this update: Sat 23 Aug 2025 07:02:17 +0000
Manifest next update: Sun 24 Aug 2025 07:02:17 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: lwdLlEefIwBWJ4TLitvcO690vdDRJUwd7fjIMXKMDiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:31:d1:cd:57:8b:f1:b4:71:50:c2:81:c0:7a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Aug 23 07:02:17 2025 GMT
Not After : Aug 24 07:02:17 2025 GMT
Subject: CN=141b9558b1694c18a1794ef07b5ac18da45b3401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:3f:af:fa:c0:e3:f7:c3:02:73:3b:62:a8:
d4:2d:87:61:28:02:07:6b:3a:4f:84:90:2a:64:b7:
5c:20:14:65:24:eb:c5:c2:27:89:92:57:55:30:97:
77:08:9d:8f:b4:7d:96:a2:98:25:dc:aa:34:f5:d2:
25:3e:e6:98:73:4f:47:f8:a3:df:28:64:74:34:52:
b1:c1:33:10:81:83:70:3e:f5:36:99:ea:46:9e:2a:
48:d5:cf:1d:b3:c6:75:ae:2b:e1:ec:ca:79:d8:e0:
f1:82:8d:b3:10:ab:d3:8e:b5:78:f8:9c:1a:be:fe:
fa:7f:e4:4a:31:8b:91:14:0d:4c:93:34:90:3f:16:
78:d4:cb:b9:a7:a6:ab:2a:47:fa:9a:da:1a:92:34:
6f:80:de:1c:66:5d:e9:1a:b2:5b:c6:a1:ee:a2:44:
33:e9:ea:3f:e9:3d:79:c5:b9:2c:1b:13:29:c7:1a:
e7:a0:a5:cd:91:2a:79:0a:75:a3:51:10:2b:fb:28:
02:a4:dd:cd:9a:be:b9:7f:fc:6f:7d:62:3f:1b:91:
b1:63:50:c9:6e:29:e6:a5:30:50:d0:be:cd:5a:a1:
30:15:c2:59:e0:64:5f:5f:c7:35:79:31:5b:8d:e7:
ab:00:9f:e9:a3:5d:14:04:2b:d2:cc:27:80:bd:db:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:95:58:B1:69:4C:18:A1:79:4E:F0:7B:5A:C1:8D:A4:5B:34:01
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:bf:1b:ba:b5:b2:e2:2a:ba:0a:b1:1c:04:cd:e9:79:87:
2b:6b:55:b9:73:89:bf:81:ab:d1:07:e2:92:06:ee:89:6f:6e:
9a:a4:33:1e:70:9c:64:aa:65:5b:51:c0:b8:8a:23:db:13:8a:
fb:f8:09:f8:d4:a7:b3:42:07:63:62:51:05:69:19:58:a3:c5:
bd:a9:c6:ef:9e:7d:1f:4b:e0:28:5d:a4:02:60:db:43:aa:91:
ef:9a:9c:b9:cf:a2:11:59:5d:51:90:21:b1:94:38:28:c5:f8:
33:ae:ea:47:53:67:ac:82:9a:83:63:15:1a:f9:e8:93:6f:2a:
09:5e:59:3e:e2:95:eb:c1:f9:e1:71:08:31:cf:e4:12:1b:e0:
bb:dd:07:8f:8f:c3:88:ca:b9:ce:4e:47:c5:c7:a1:2a:a4:50:
fa:b3:ec:1b:44:8c:a5:ec:6f:97:a0:3e:fb:b4:68:45:06:30:
fa:a4:e1:33:1e:1f:60:2d:a4:67:3a:90:32:1b:31:79:11:bd:
1d:f3:13:0c:a1:f6:45:3d:d7:aa:ae:f8:8a:97:c0:e3:f3:ee:
47:2a:21:37:77:14:9a:ef:df:23:88:4a:3d:f7:94:fb:0c:64:
f7:8d:b5:6f:78:21:54:99:fe:70:f5:52:9f:58:26:2c:fa:b5:
cf:da:3a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:18 2025 by rpki-client