Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: W9+KRYiTIYmZ45OzGVYbcMCcmEfS8C5+Dv6kRII8d04=
Subject key identifier: AA:EA:18:EA:BC:CA:A8:9B:1A:06:58:B3:68:0D:2E:27:DB:A3:5D:3A
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 0199FF22D6CB94EC03352AF8D733162CFE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0B64
Signing time: Mon 20 Oct 2025 01:01:37 +0000
Manifest this update: Mon 20 Oct 2025 01:01:37 +0000
Manifest next update: Tue 21 Oct 2025 01:01:37 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: mcaYjqRy1Yd5fLG1WDlFFxB1yflo4cJyKtAvl6X4ad4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d6:cb:94:ec:03:35:2a:f8:d7:33:16:2c:fe:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Oct 20 01:01:37 2025 GMT
Not After : Oct 21 01:01:37 2025 GMT
Subject: CN=aaea18eabccaa89b1a0658b3680d2e27dba35d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:62:c5:68:95:08:4a:f7:eb:0d:a0:c4:b0:da:
0a:c3:5e:2b:09:ed:5e:0b:b2:63:fe:39:d8:db:07:
e0:2d:d8:7f:82:e3:e6:90:8b:14:ce:ce:4f:20:cb:
77:ec:d4:f3:ce:b9:1f:95:da:a9:92:33:af:c3:54:
90:ec:77:21:fe:5f:ed:32:9a:78:5e:f6:78:e3:8f:
14:95:24:3c:65:16:ed:02:18:62:a7:15:35:39:3c:
40:d6:dc:fc:bd:36:c0:3f:8d:de:ae:c5:76:8f:a2:
43:be:ba:06:24:f7:94:f4:5b:90:16:36:54:5f:eb:
ab:ae:8c:9b:ac:5c:23:2a:cb:e5:69:9e:15:42:30:
86:22:8c:d0:ce:c3:b2:87:8c:fd:8e:94:61:5e:f3:
e4:09:0a:7d:ae:c7:2f:e3:5a:12:a9:c3:b7:7e:de:
a7:bf:1e:94:b6:5c:2b:30:00:c9:6b:57:ea:56:3b:
d8:a4:cf:ff:76:85:e6:35:cf:8c:dc:fa:c9:57:2e:
f9:2a:09:2f:10:b5:34:be:78:d6:ef:59:d7:60:46:
1d:1c:4a:8a:55:a0:c3:f5:24:97:a2:5c:8c:7d:5d:
53:c3:0e:c5:36:a7:65:4d:9e:3f:76:e7:99:a5:e1:
20:03:9b:dd:15:c6:67:db:7b:4a:30:75:b1:a1:1a:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:18:EA:BC:CA:A8:9B:1A:06:58:B3:68:0D:2E:27:DB:A3:5D:3A
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:92:c8:24:bf:ba:d1:74:c5:f6:3f:1c:3c:f5:7a:65:15:2a:
da:68:cd:bf:e2:0c:4a:ef:db:fe:51:02:b5:73:f5:2c:29:ad:
e7:11:ac:cc:08:df:f9:a6:0b:cc:a0:31:87:07:23:53:74:5d:
ab:09:6b:19:a6:8b:d7:e3:14:1c:77:a7:3f:79:f8:e1:af:1b:
cd:2d:a3:7a:32:10:f3:80:46:bb:f6:77:3a:44:0a:63:cc:80:
1a:d6:f0:73:73:69:59:1b:b7:b4:b4:3e:b7:39:22:81:99:ec:
09:91:04:6e:69:ee:d7:ab:aa:9e:03:f1:47:e0:14:fd:5b:f3:
28:1d:5b:36:81:bb:13:bf:e2:36:9c:78:bc:2b:e1:d6:4f:77:
3a:13:3e:ed:a4:c6:bc:56:d1:20:6d:65:b6:36:4a:dc:3f:49:
f1:51:b7:9e:09:1e:ae:94:69:eb:a9:2b:c2:02:b0:3b:86:42:
71:8e:28:0d:87:c2:d2:a3:36:03:f7:c0:4e:f8:1d:f3:3e:36:
bf:0c:0a:ec:a7:59:02:f6:73:a8:fe:63:77:a5:be:62:2a:2d:
fa:8c:a9:78:90:38:2d:b5:5f:c8:f0:81:30:28:8e:2a:3d:bd:
ec:50:81:63:48:f1:af:e8:33:a0:af:fa:22:14:ce:64:df:ba:
81:48:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:21 2025 by rpki-client