Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: rx3Qz/lIX6hZ0hDi2at9iHUmfZqnIeIqlll+NPJxNKw=
Subject key identifier: 01:EB:72:DC:30:53:23:A3:B8:F7:8B:D7:FE:CC:74:D6:2A:44:D8:D4
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 019A7225E8E00B19A413C2EB3CE3A256CE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 12A8
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: Ewsrz1f53Zs44EboHXvQLdFHEOpA6GlvEKGLNQzNqqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e8:e0:0b:19:a4:13:c2:eb:3c:e3:a2:56:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=01eb72dc305323a3b8f78bd7fecc74d62a44d8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0c:04:9a:fc:4e:80:e7:45:04:02:d9:5c:e7:
78:90:22:ae:1b:bc:b6:e4:60:84:ab:0b:42:f6:c9:
ac:eb:a4:17:97:33:a1:77:21:78:43:0a:ff:91:b2:
1a:60:49:37:d9:d0:60:aa:7f:91:f5:0f:1f:08:c1:
db:00:7b:27:7f:38:52:dc:5e:a1:e7:2e:9b:92:90:
3c:42:d9:7a:ab:2e:88:6d:26:cb:32:9e:ef:a2:18:
74:ee:ff:91:22:19:fe:cc:2e:6f:88:e8:24:05:40:
92:24:9a:22:98:54:bb:5a:f6:2b:ba:04:3c:6e:bd:
a3:6d:19:b3:a5:d5:44:72:bf:86:b5:3c:4c:fe:e7:
d9:3d:a4:f9:7c:a8:48:95:99:d3:cc:2c:50:80:49:
0a:d2:54:f6:31:e1:5d:1f:2c:1f:d4:9e:fe:50:a6:
a6:d1:c5:8a:9a:c0:95:89:00:a9:23:9c:00:02:69:
ce:95:55:04:bf:a0:5a:ed:35:7e:34:3e:4b:c1:01:
cb:0c:ff:d5:a4:bc:04:04:d0:ef:06:f1:68:10:e9:
eb:3b:19:0a:4d:cf:4e:aa:88:c1:4f:eb:cc:65:c8:
2e:4c:06:a0:f2:78:3b:54:5f:4d:fc:f9:d6:50:57:
5c:f1:cf:8b:dd:00:ce:7a:01:31:7f:15:fc:fe:40:
bf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EB:72:DC:30:53:23:A3:B8:F7:8B:D7:FE:CC:74:D6:2A:44:D8:D4
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:fc:04:69:0b:a9:f5:ee:15:64:ae:44:98:52:2e:29:a1:da:
09:5a:31:cf:40:ce:38:73:7c:cb:a8:f5:e5:0d:96:a7:c3:72:
ab:5b:86:ff:cd:7b:53:e8:bd:91:ff:5f:1c:15:bf:f2:c3:04:
ca:3c:91:2c:47:9e:d5:60:6b:6e:f9:a8:37:0c:17:77:82:1b:
8a:4f:ab:0d:10:b0:cf:42:9c:4c:19:ce:b3:83:59:af:fc:c0:
91:be:d1:bc:ee:86:20:f8:12:c5:cb:a6:da:36:3b:b7:d8:4e:
f9:48:3b:54:e1:b7:76:e4:9e:b8:e9:44:ec:6b:40:76:9d:f0:
b4:ea:55:16:14:c7:28:58:63:9b:64:c5:c7:91:84:76:de:78:
1c:6a:4c:99:95:29:e6:75:8c:0c:29:c4:1b:47:41:c5:b1:9a:
ab:99:d0:d3:25:5d:17:5c:70:6b:96:e4:8b:19:1d:43:8d:3d:
8e:2d:36:45:7a:fe:b1:35:77:7d:70:c9:05:16:35:fe:83:03:
1a:b4:49:d8:d4:7d:83:46:ac:f3:b5:69:5f:1a:15:49:67:a9:
16:28:50:f4:0f:f1:2c:d2:6e:9b:5c:b5:2d:69:48:d5:c8:ad:
2f:9a:18:4b:94:fb:df:fd:56:2a:f4:e0:a6:db:bf:dc:54:90:
0b:5a:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:53 2025 by rpki-client