Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: MoQ/WFsosmciBZZvfV0/c/6j+FbemCn2pv6UWBSs8z4=
Subject key identifier: FB:CA:9E:A2:CC:21:29:94:B6:78:89:65:17:84:BB:51:78:4C:1D:63
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019A706E2FD6C60153AF4F3D0A85DA965E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 01:01:00 +0000
Manifest this update: Tue 11 Nov 2025 01:01:00 +0000
Manifest next update: Wed 12 Nov 2025 01:01:00 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: MMpXXH6RoRDmhlPJX3HiaDOS7pwJy2xW9crxzZFTIPc=)
3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:2f:d6:c6:01:53:af:4f:3d:0a:85:da:96:5e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Nov 11 01:01:00 2025 GMT
Not After : Nov 12 01:01:00 2025 GMT
Subject: CN=fbca9ea2cc212994b67889651784bb51784c1d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:59:6f:82:8a:3a:ed:b0:f3:3d:4a:b7:67:
f7:2d:c8:73:ef:a5:4a:e1:8c:24:1b:e7:49:3a:fa:
8e:a0:81:d2:82:00:75:a3:54:43:68:ee:c6:34:60:
70:73:b5:14:db:8d:d9:38:fd:db:6f:1c:2f:a0:7c:
ca:c8:8d:9c:33:33:3a:aa:a7:fe:23:df:52:91:ff:
e9:08:18:c8:da:4e:dc:a4:45:18:7b:17:f5:10:5e:
8d:8e:da:c5:48:19:82:aa:53:ef:48:a6:a3:65:21:
39:42:81:0c:e5:37:5f:46:e0:8b:04:f5:9d:b4:60:
8b:b7:52:30:e5:a6:08:b0:7b:53:d8:99:ab:57:3b:
ff:d6:92:0a:a7:f7:5c:be:3d:0f:2a:cf:ec:21:39:
a7:97:22:51:98:91:a0:2e:92:db:97:03:8d:73:3f:
02:ec:57:02:23:24:e6:0f:92:30:77:3d:65:bc:cb:
a5:3e:4c:0f:4f:7c:79:2e:a4:1c:46:2e:6b:fd:2e:
46:f0:7f:3a:4d:bc:5d:39:a4:a2:c3:0b:a8:b2:cd:
20:d6:57:e4:65:71:1e:e4:d2:b9:cf:78:fb:9d:e2:
c7:5d:17:de:c2:db:a7:4c:0d:96:67:aa:55:da:49:
67:91:21:1e:3d:b5:c9:44:fb:ef:3a:19:4c:7d:6b:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:9E:A2:CC:21:29:94:B6:78:89:65:17:84:BB:51:78:4C:1D:63
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:47:06:2f:99:89:84:50:b0:c8:d5:c3:b9:74:f3:9c:d4:25:
e7:cd:3d:64:63:51:ea:21:53:78:dd:8e:a4:3e:e9:67:0e:88:
33:48:1a:a5:6c:60:23:32:93:78:1a:cb:3c:c8:ec:e5:46:38:
91:03:a4:14:f0:05:12:43:4e:c8:21:39:cf:4e:07:12:5e:12:
66:f8:36:7d:9f:e5:1a:ae:f2:44:9e:c9:5b:11:83:1e:a9:db:
c4:14:aa:b3:16:03:62:bb:f8:80:be:af:b7:14:cd:96:00:4f:
6b:41:a3:7a:29:2a:a5:3b:fa:6c:82:02:c0:fa:fd:d8:36:e7:
7c:f8:a4:af:0a:af:64:8e:64:15:2a:b0:af:ca:1f:31:97:2e:
4c:32:d8:2a:18:ee:c4:9c:f0:97:1b:61:47:6f:09:59:3e:4b:
3e:48:6a:5c:89:ca:43:95:d1:90:7b:12:6e:0f:4d:3b:f1:ef:
d7:12:8f:0f:26:85:83:6e:0e:c7:4f:71:7f:ce:a1:03:97:d7:
06:6d:c9:d2:eb:2b:23:1c:d5:14:45:2d:c6:63:a8:84:0a:ab:
32:18:19:36:b7:ee:35:f3:98:db:b4:e4:2c:cd:80:39:40:28:
f4:42:44:81:b4:0b:a1:d7:86:19:5c:3a:1a:82:42:29:b3:a0:
b1:f7:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:38 2025 by rpki-client