
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File: pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier: Qv5NdhOErW2XF0K3e9XmfppkWfh7cQ4phwLZwx6D+4w=
Subject key identifier: 37:93:3C:FD:F8:CC:52:95:99:B4:08:CB:FB:86:B0:1B:79:EC:8B:11
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer: /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial: 019853444D294B29FDA4C88EA6EABB134F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number: 0C9B
Signing time: Mon 28 Jul 2025 23:00:41 +0000
Manifest this update: Mon 28 Jul 2025 23:00:41 +0000
Manifest next update: Tue 29 Jul 2025 23:00:41 +0000
Files and hashes: 1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: Tw47bcBLhKmr466qYtbuNdsERG7X7fl1wDDY6YcimNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:4d:29:4b:29:fd:a4:c8:8e:a6:ea:bb:13:4f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Validity
Not Before: Jul 28 23:00:41 2025 GMT
Not After : Jul 29 23:00:41 2025 GMT
Subject: CN=37933cfdf8cc529599b408cbfb86b01b79ec8b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ee:39:19:7f:c5:4e:e1:5f:3f:c2:83:7a:16:
15:f5:3a:86:b4:2c:10:24:43:f2:87:3e:ef:47:d4:
b6:6b:63:3a:2d:e6:b9:bb:93:16:df:f1:f5:65:fc:
b6:50:c1:a3:b7:25:2b:2b:17:8a:ff:20:99:e3:dd:
44:48:63:16:0c:93:56:4c:6c:47:ed:f9:46:a5:12:
b1:e4:e2:3d:f2:38:cf:28:0d:12:58:c9:14:82:45:
4b:b3:c5:a2:e4:28:c2:1d:5b:c3:83:42:99:80:96:
02:74:42:bb:23:2d:c2:fa:3b:e0:37:93:6d:1a:04:
80:e6:62:c9:5f:8a:be:fe:dd:23:aa:6a:cd:06:d3:
3f:fa:f9:56:81:aa:d8:61:c6:da:98:91:e9:15:3e:
79:5c:4e:08:8e:ea:fd:9a:2f:2b:e9:c3:bc:94:89:
fb:08:94:06:69:07:36:1b:ed:34:9e:4c:c2:26:f1:
a4:03:86:ec:49:cc:4f:b4:c4:f8:f3:02:50:20:d1:
aa:04:27:23:d3:2b:92:dd:fa:5a:5d:75:4e:a7:87:
6f:8a:2e:1c:a5:9d:f1:4f:e4:7c:c0:c8:dc:ad:dc:
62:86:9e:47:8b:4b:43:a6:94:7f:06:6d:f7:6e:67:
a3:49:0e:fd:78:6d:d6:eb:9e:55:24:2f:c7:af:d0:
15:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:3C:FD:F8:CC:52:95:99:B4:08:CB:FB:86:B0:1B:79:EC:8B:11
X509v3 Authority Key Identifier:
keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9f:b1:79:92:07:15:6d:20:fe:94:ba:c7:13:2a:2b:e2:87:
78:e2:ae:ac:2c:ca:78:f1:a4:99:3c:d1:50:0f:6f:f5:7c:2e:
a0:14:df:ec:a1:57:ca:04:82:17:a6:39:c2:fd:46:2d:2f:f7:
c4:3d:59:c1:89:f2:4e:d0:5c:6a:b4:ee:d6:35:76:c3:be:f4:
a0:2a:ce:1f:96:72:a0:c5:61:16:1c:32:9e:43:5c:c6:fc:7e:
5a:f1:0d:59:f1:0d:3d:2d:1b:4e:a6:1a:78:50:4c:ed:b9:df:
14:a8:4f:6f:71:02:1e:93:4b:53:47:7a:fb:6b:c4:32:5a:43:
86:30:9c:04:c2:2f:1e:a5:10:ec:38:86:ff:71:3f:de:0b:ed:
2c:9d:d4:c5:42:f3:92:71:6e:1e:dc:a0:93:68:e1:b8:7d:d0:
fc:ef:af:1b:ed:87:4f:05:1f:9a:01:8c:da:bd:b7:27:51:ca:
c1:20:26:c2:0c:4a:40:8b:d9:54:c6:47:eb:ca:bf:2d:13:b0:
5f:db:5b:bc:88:6a:0d:1c:86:2e:98:30:ed:f2:ea:68:8b:ba:
7c:9f:e0:c2:e6:06:6e:ef:06:64:cd:93:74:92:7f:13:4a:12:
f6:ea:de:fb:4c:2a:1b:01:96:46:a7:b5:0f:6f:5b:b2:9a:9a:
97:be:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:56 2025 by rpki-client