Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: qP5fbIC/3R3G/3PrUxILYCoYlQMN7VRnOWuuG6HRun0=
Subject key identifier: F4:9B:DF:76:09:5F:C8:28:EB:7B:96:AE:84:D7:CE:A9:39:40:28:33
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 0197B7EA4C265C17448772EAA525CC922C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0A36
Signing time: Sat 28 Jun 2025 19:01:14 +0000
Manifest this update: Sat 28 Jun 2025 19:01:14 +0000
Manifest next update: Sun 29 Jun 2025 19:01:14 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: tVDOk/b7DQ4Cvui7U+Jt1RXw46mNXtlqQiu8lISkGnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4c:26:5c:17:44:87:72:ea:a5:25:cc:92:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jun 28 19:01:14 2025 GMT
Not After : Jun 29 19:01:14 2025 GMT
Subject: CN=f49bdf76095fc828eb7b96ae84d7cea939402833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:86:46:6f:d9:88:6b:58:42:fb:95:76:10:
af:17:78:ff:ed:4e:58:7e:f5:a1:e1:ee:4c:f7:6a:
35:82:de:b6:5f:1c:c2:04:4f:d2:7a:7f:87:75:b1:
e5:47:86:59:ed:44:c1:ce:1e:7d:58:14:d2:3e:eb:
cf:a1:e1:1a:de:2f:62:03:54:0c:5b:1c:8d:5b:c8:
06:22:cc:88:fb:bc:5e:c3:4a:d1:b5:2e:b4:21:bc:
b3:51:66:57:a3:17:9a:6f:ee:71:4d:4a:8a:82:a4:
09:c4:05:ea:56:4d:cb:6c:39:c8:c9:58:04:52:3d:
fb:18:06:0c:b7:d0:8f:8f:c9:b3:9a:4b:11:ee:08:
25:49:9d:e9:6d:5e:94:50:d0:23:d6:eb:b9:80:d5:
ca:33:ff:5c:e4:1e:70:39:ef:b5:4b:6d:3e:65:2e:
83:89:95:7e:d5:51:8a:fd:a9:5c:19:1a:cc:47:0f:
be:85:49:f2:e9:8b:17:53:ca:8c:64:68:ee:7a:ac:
44:f3:d5:1d:e7:33:1b:c3:e0:10:9b:23:e2:52:0e:
8d:48:f5:38:61:14:85:b9:05:4d:14:0f:5c:16:55:
5d:08:d9:46:f0:7d:58:f6:18:c7:73:e6:e8:d7:91:
67:86:f2:4c:4b:2f:34:ed:48:3b:dc:ce:ac:bd:7e:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9B:DF:76:09:5F:C8:28:EB:7B:96:AE:84:D7:CE:A9:39:40:28:33
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4f:a1:82:7c:95:11:08:c7:47:fc:16:c0:0f:36:02:c3:dd:
5d:db:b2:56:cd:17:4a:dc:0d:d3:76:eb:70:83:2c:49:b9:d2:
e1:86:ba:6e:82:66:3e:cb:db:73:44:d3:0e:f3:98:6d:4a:e0:
e8:25:2a:96:74:c8:85:ff:53:38:6e:b1:e2:ba:8e:db:d9:4e:
20:94:c5:55:96:3f:67:58:5c:73:55:b9:5d:a8:a1:d2:1a:9b:
11:4f:f3:03:f5:98:9a:52:2c:18:d8:a9:31:09:91:d5:a5:c2:
03:70:07:fe:a9:af:ce:d7:d5:8e:03:9b:43:93:ef:f0:d8:39:
f3:86:10:e2:23:5f:99:20:71:1e:7a:83:48:6b:a3:20:5d:8a:
22:54:30:85:85:03:ac:98:82:22:d1:0f:79:74:97:52:65:c6:
c8:47:2e:3e:58:9f:1e:51:df:b3:46:26:bf:c7:8e:c1:ed:1d:
4d:9f:e9:14:c6:88:c0:d2:c2:08:7f:1e:d6:34:e4:35:96:60:
b3:0b:7e:7c:9b:ca:19:46:36:9d:fc:12:d1:fb:3d:14:15:e3:
66:43:69:f3:fe:83:6c:51:f2:45:87:f6:1b:a2:d7:a7:59:92:
65:a1:e8:58:38:35:7b:11:02:b9:d7:47:55:61:33:cf:da:d9:
c4:fb:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:26 2025 by rpki-client