Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: am+Cd0NHFqR8fSY8mqdyHOwMamQJq7bcPUCOBEDLmfs=
Subject key identifier: 9B:14:38:D3:28:ED:75:21:58:EF:A1:DE:CE:73:FC:81:C7:F8:CB:22
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019847ADC5FF3D9E521C4B6463BE5143BA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 17:00:27 +0000
Manifest this update: Sat 26 Jul 2025 17:00:27 +0000
Manifest next update: Sun 27 Jul 2025 17:00:27 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: K5AUpWYSYJV8RKu0rrtTGC427bTST1kAEiTh9UAUprQ=)
3: VczOYK23SIrQwSfO7WNvNHITrEQ.roa (hash: vE9e17sANr8/qzhWCh8RdI6FabALXXTALY3d06XGM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:c5:ff:3d:9e:52:1c:4b:64:63:be:51:43:ba:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jul 26 17:00:27 2025 GMT
Not After : Jul 27 17:00:27 2025 GMT
Subject: CN=9b1438d328ed752158efa1dece73fc81c7f8cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:04:bc:0e:92:75:27:b4:3f:d2:82:12:ce:0e:
73:26:11:34:bc:85:cf:9a:1d:87:e6:45:77:ef:8b:
af:f4:8b:81:78:aa:e0:74:c0:e6:38:00:79:66:d8:
28:82:d2:3a:2a:51:10:9b:7a:cf:04:7c:b6:a4:69:
75:94:fc:26:ba:54:a6:01:ad:47:19:3f:7c:70:9c:
62:0a:d0:50:1d:e5:4c:e2:97:56:f4:cb:fe:16:df:
15:1a:5e:42:1d:f8:60:0c:9d:ea:7a:78:5d:86:35:
ee:54:64:00:c5:31:c3:13:70:88:a3:77:f4:d0:d2:
e8:94:d9:dc:da:09:3e:53:57:55:77:53:b5:c5:76:
ae:23:b2:12:ff:84:65:32:88:35:48:d4:c7:87:76:
0f:54:c1:8a:7c:5d:7a:6e:94:98:27:4c:a5:d5:4b:
a4:a8:ed:d8:70:13:99:f3:98:82:bd:ae:1f:fb:f9:
36:33:bb:4a:25:00:6c:a8:cf:6e:d4:20:72:47:7f:
d2:35:74:99:f9:15:a2:45:8e:d1:34:53:be:b6:2b:
d4:2d:70:8e:63:e9:5e:73:2c:f6:1f:86:52:d6:b8:
0c:a7:59:58:cd:e5:62:c8:09:48:92:16:39:96:1c:
e2:28:2f:c8:87:12:58:1f:ee:26:b9:09:bb:bf:00:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:14:38:D3:28:ED:75:21:58:EF:A1:DE:CE:73:FC:81:C7:F8:CB:22
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:0c:5c:9a:b4:63:ab:f0:91:a1:9b:93:4a:34:69:66:6e:
c4:b7:c2:d2:a8:31:7a:97:d1:14:e9:44:a3:31:60:52:9c:24:
47:fa:34:35:79:df:5f:6e:c8:0e:46:8c:d5:a0:72:fd:55:bc:
1b:8e:04:fd:d4:ee:58:c3:74:a3:49:ef:df:59:4f:44:3b:10:
1a:27:66:ff:82:7e:c5:bb:5a:3f:92:2c:43:b3:2f:d2:48:71:
d7:5a:fd:ea:b2:69:b3:47:3f:bc:40:4a:87:6f:1f:82:a4:b5:
14:7e:c4:03:06:2d:ea:15:4d:1a:db:94:b6:d8:29:47:4f:fe:
cd:f6:37:fe:3c:98:d1:77:72:e7:ed:f8:0d:a8:c4:44:39:73:
19:a6:35:f5:1f:da:b1:c3:b8:72:c5:78:74:54:73:08:dc:db:
7a:b8:b2:3b:ab:ad:23:5d:01:02:b1:56:23:cd:c7:76:ae:27:
09:2f:29:06:14:84:ff:44:ba:8c:2e:b1:4f:3c:ae:d7:91:53:
aa:5c:ec:4a:d6:53:aa:48:55:72:22:18:41:47:dc:19:d4:48:
a1:7a:85:1e:c7:ac:e6:8d:3a:29:b2:32:ef:9a:99:48:3b:16:
13:ec:50:eb:c6:bd:73:04:e0:c7:9a:0e:99:55:7e:dc:3b:c6:
3d:76:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:40:56 2025 by rpki-client