Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: /l9UL1yZ1uc6l3rVF9j5qKpsG3ma6fnQOlkoXgoanlc=
Subject key identifier: 95:B7:A7:64:07:87:FB:34:E1:31:D8:3C:8B:E4:8E:E2:C2:27:9F:1E
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019848C07634D780CE680A99115F0EAFA052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0A81
Signing time: Sat 26 Jul 2025 22:00:29 +0000
Manifest this update: Sat 26 Jul 2025 22:00:29 +0000
Manifest next update: Sun 27 Jul 2025 22:00:29 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: hb61eJAcmti+gFsZjRm8IQ56h4w67wKMfvmmmaIz5QM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:76:34:d7:80:ce:68:0a:99:11:5f:0e:af:a0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jul 26 22:00:29 2025 GMT
Not After : Jul 27 22:00:29 2025 GMT
Subject: CN=95b7a7640787fb34e131d83c8be48ee2c2279f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:79:8d:ca:54:56:e0:d7:84:58:26:e3:db:
1a:cc:eb:21:39:74:3f:4f:57:41:74:a6:df:a4:fa:
b3:9c:fb:cf:81:a0:93:f6:fb:90:b6:c0:89:a5:95:
26:33:f7:c7:76:d7:d4:ac:a3:a1:49:70:d3:49:51:
e1:96:f1:d1:80:6b:44:08:70:86:58:d3:57:48:83:
c9:cb:d0:21:a9:bf:1a:8c:c2:08:2c:b6:f5:82:21:
01:39:a7:30:05:9d:19:36:df:d8:4b:fc:f0:64:7b:
46:a0:e2:f1:81:0b:a7:14:d4:25:8b:d1:9f:5e:bc:
6f:ab:1a:25:84:de:79:83:b6:15:5c:c3:6c:0b:6f:
5e:75:ac:83:3a:01:05:64:4a:42:63:3f:69:1a:e0:
da:94:3f:82:16:ae:dc:a8:83:c7:eb:a6:0d:77:33:
53:95:f5:13:89:5d:45:23:80:4b:36:1d:03:3b:f9:
58:c8:a5:6a:46:45:39:29:32:a4:da:13:e7:04:50:
71:22:bc:e1:ec:26:ea:df:7d:9d:7f:13:64:7e:34:
e6:3c:94:85:5b:4d:4c:9c:27:17:3e:fc:05:2e:81:
8c:6d:ea:ff:ef:16:11:3d:50:3e:52:e3:dc:1a:6c:
df:4f:ce:2a:d4:58:6d:56:d0:ac:51:73:05:0b:40:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B7:A7:64:07:87:FB:34:E1:31:D8:3C:8B:E4:8E:E2:C2:27:9F:1E
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:81:d5:8b:8d:c3:17:f6:4a:fd:2b:c0:39:96:ed:3e:b3:46:
05:e3:b7:af:b3:8e:3c:69:d2:fc:19:f2:e3:f9:60:8b:eb:82:
e5:a1:6b:2f:3e:2e:8d:42:4e:ba:b7:81:b2:58:f0:ef:3d:b2:
60:f6:f0:40:cf:b9:d1:8a:6c:9d:5f:95:89:93:3e:c3:35:ce:
09:7b:4a:1c:82:37:1a:5f:e7:38:ea:67:fb:95:91:ff:af:f5:
93:f5:fd:17:f5:00:3d:ed:a6:29:be:2c:a8:9a:b6:dd:bd:95:
9b:e3:5c:fc:69:32:ff:25:0d:dc:dd:21:5b:23:52:fd:4e:c7:
86:c2:2f:9c:24:f3:8c:5c:bb:a9:1d:f5:e4:b7:00:29:f2:f1:
3f:20:02:a7:dd:bd:30:e4:0c:b3:1b:c6:fb:12:be:3e:d0:cc:
0e:ec:37:0e:b5:88:c6:fc:33:5a:23:77:1d:73:d3:b0:f7:44:
2b:b0:a5:a2:88:76:68:20:1f:92:a1:34:2d:e6:e5:52:7d:ec:
04:02:98:bc:bf:a1:b2:c4:5f:bd:50:44:3c:62:be:72:b3:a2:
97:3a:1a:17:3b:06:85:da:64:ac:3e:9d:ed:0f:bb:ad:d4:14:
e8:d5:5c:99:6d:1e:f4:06:e9:3a:a4:c7:49:b7:f5:3d:f9:4c:
6e:36:4a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:47:19 2025 by rpki-client