Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: PLisncAZW6AxguSFxuNJ1Cn87qbKQsl2XhHJmwRnxmo=
Subject key identifier: 4A:D0:E7:A8:7D:AA:54:66:79:F9:6F:4C:6A:BA:C0:31:73:03:48:81
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01996022355C63D581164DC0AA08C7B3B8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1696
Signing time: Fri 19 Sep 2025 04:01:18 +0000
Manifest this update: Fri 19 Sep 2025 04:01:18 +0000
Manifest next update: Sat 20 Sep 2025 04:01:18 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: tSKOoAxYNfygvb/J1hCCK7jkJOYXhoBpy7vWaeFnc1Q=)
3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:22:35:5c:63:d5:81:16:4d:c0:aa:08:c7:b3:b8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Sep 19 04:01:18 2025 GMT
Not After : Sep 20 04:01:18 2025 GMT
Subject: CN=4ad0e7a87daa546679f96f4c6abac03173034881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6c:56:8a:7c:ec:c4:d8:50:b7:45:d6:b7:e6:
d6:f3:86:26:78:93:b7:18:ec:3a:e0:98:2d:ab:b3:
28:ac:7f:c6:31:3a:24:ba:ab:c5:74:00:0e:19:76:
94:c9:74:5e:a4:2b:89:2f:59:11:e3:b7:5e:15:51:
57:5a:8d:81:df:a4:8b:1f:d5:39:b7:8e:4a:cb:9e:
63:97:51:45:f9:00:80:13:ed:b2:ef:e8:a1:ef:4a:
4a:82:97:b0:e2:bd:aa:8e:85:20:67:71:76:46:b2:
15:1e:6c:0e:3c:b1:e1:24:b0:8c:2c:71:1c:0b:02:
b5:23:51:9c:c3:9d:ea:a9:4b:3e:93:1f:31:00:5b:
3e:3e:21:68:c4:cb:33:e1:97:6d:c1:3b:5f:1d:49:
82:62:95:23:8c:8e:67:fa:3a:78:6e:4a:e1:55:d8:
db:d6:e7:45:70:9a:a5:e5:96:4f:49:b7:8b:1e:e7:
c8:67:61:9e:e6:20:a6:bf:5b:aa:ab:be:31:23:46:
d1:14:d8:d4:ae:35:b7:f5:c4:53:c6:92:18:fd:4a:
0e:9f:00:61:7d:33:31:43:fe:51:f9:52:4e:d2:fb:
b0:cc:b2:00:09:29:6d:cf:e7:c7:da:18:c5:2f:70:
af:59:7d:1e:cc:b6:1e:d8:3f:e4:b6:8c:39:4b:3e:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D0:E7:A8:7D:AA:54:66:79:F9:6F:4C:6A:BA:C0:31:73:03:48:81
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:42:94:a9:09:d6:e0:61:19:6f:fe:de:cb:4b:4e:41:8b:e0:
75:e5:49:54:a6:00:c7:bf:89:69:c9:e1:3d:fb:f3:97:a4:93:
dd:3a:f3:e1:fa:37:cc:31:ae:af:9c:70:3b:c6:99:16:5c:80:
d2:65:33:1a:d2:a4:3d:d7:56:d4:f8:d6:4f:48:e6:68:bc:ee:
0d:18:7e:a6:73:87:f8:83:17:42:d9:90:f6:0f:1d:05:c1:e0:
93:86:84:62:1d:80:8b:ba:09:50:f5:c0:22:87:89:f2:5d:b8:
55:40:db:7e:54:04:01:c6:ff:38:b9:f9:af:e5:e6:ed:a7:b4:
04:d3:9e:69:78:38:62:b1:9a:15:db:ec:00:a7:a4:c0:07:b6:
b7:37:4c:11:ff:13:3b:fb:6c:77:8a:e2:1f:3e:e9:ab:e1:18:
46:45:0f:3d:1f:ff:7d:c9:f8:2d:cc:a2:15:fb:4f:e6:52:8c:
21:99:b8:f5:29:fb:db:5b:98:e2:63:9d:ea:ac:90:82:d3:16:
bd:8e:d9:d5:7c:bb:82:1d:24:61:ff:cc:dc:0c:03:5b:ca:fc:
e9:3d:25:ca:38:bd:df:67:9f:0a:68:1d:12:d6:35:00:f7:0d:
41:df:e7:83:4a:a6:a4:5e:88:d1:70:f5:75:1f:cf:6e:17:9d:
a9:6c:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:16:20 2025 by rpki-client