Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: ++gxXYbkf0dH9PvFVVRdfz0dO8plqUqrz/0HJAiEP88=
Subject key identifier: B2:AD:91:8B:13:4F:3C:FF:75:2A:D2:9F:2F:61:59:88:3A:30:FE:1D
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01974AE8F628893CFB66FC224F4F83915BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 15:01:10 +0000
Manifest this update: Sat 07 Jun 2025 15:01:10 +0000
Manifest next update: Sun 08 Jun 2025 15:01:10 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: HtYH7IfWThQC0FjsfIOLJnPcCb0.roa (hash: JQOoHMUiGQozF5WEbUjnDZo1IaMc3weZxMTmvWza6pA=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: N6eWqTyIwzVZIAV/S/CqanGJPX8krc5oC/Ga69rGDqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:f6:28:89:3c:fb:66:fc:22:4f:4f:83:91:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jun 7 15:01:10 2025 GMT
Not After : Jun 8 15:01:10 2025 GMT
Subject: CN=b2ad918b134f3cff752ad29f2f6159883a30fe1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:7f:6d:b6:d9:64:11:1b:c6:4d:ca:94:9f:
f6:cc:48:0d:e9:58:3e:2f:2f:79:de:c0:ad:14:95:
29:55:96:ed:91:a3:91:28:30:c9:42:75:bf:a4:67:
65:52:f3:3e:67:18:f4:1f:ad:87:a8:83:3f:e6:b1:
c6:b3:b1:92:f4:1a:74:33:5b:29:12:e8:21:45:0c:
e8:8b:62:55:2f:d1:d5:cf:da:2b:b6:5c:4e:0b:b2:
53:e0:45:0f:db:4c:b2:89:c7:dd:6a:f8:ba:8c:46:
8c:2e:e4:fa:38:e4:01:8d:73:b8:b1:d4:48:2b:3e:
4a:ca:f7:50:bb:25:05:0e:75:63:bd:4b:1e:33:c3:
ad:a3:1a:a9:86:2c:98:64:d3:81:c2:92:1c:a0:34:
46:12:01:7d:32:e5:68:5a:e9:90:12:91:aa:96:87:
4a:28:d6:bd:43:e6:01:d1:57:dc:de:ae:b9:16:77:
4f:72:2f:8c:b3:6b:69:cb:5b:be:2a:24:e0:91:85:
c3:e9:d3:ad:07:0b:36:4b:dc:86:60:a4:33:bd:9f:
f0:a8:17:14:dd:99:5e:8e:b6:e2:99:db:30:4f:a4:
19:62:db:c3:15:ca:a7:38:17:6b:c8:a3:84:24:9e:
6e:34:52:a9:0d:c0:9a:2f:50:d7:69:89:95:75:c4:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AD:91:8B:13:4F:3C:FF:75:2A:D2:9F:2F:61:59:88:3A:30:FE:1D
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:23:ee:6c:57:04:32:25:83:e8:64:e7:20:09:a1:48:42:e8:
c5:56:9e:73:bf:ce:c8:8d:96:85:91:85:91:20:80:66:c6:29:
f3:d2:c6:b3:7f:e2:2e:e9:60:f1:84:65:7c:bd:6a:c8:8f:b7:
25:b3:8d:b9:96:10:c0:3c:fb:de:00:a3:0a:fd:d0:80:25:cd:
d2:fb:a3:4f:a8:f9:da:93:1c:3e:59:10:93:63:25:d5:fb:4d:
9f:36:78:7e:5f:f6:e5:1c:62:84:a8:cc:6e:a0:7e:11:66:01:
c6:ec:1c:b3:d7:a4:5f:c5:2e:a1:a9:06:fb:cf:f6:c3:ec:92:
f4:37:0a:fc:e7:6e:d3:ae:0d:55:77:a4:bd:63:7b:af:d2:31:
e8:e3:8f:2c:df:94:2f:66:c3:2a:f9:66:0a:75:07:91:ec:8e:
21:04:84:d7:f5:c3:73:bf:40:e6:41:42:bf:f4:61:f2:a6:6b:
7e:fc:51:45:e8:96:f1:6e:30:ce:8b:62:d5:af:c6:66:a4:9b:
dc:9f:93:75:7c:7d:9e:4a:26:27:fa:f5:c8:f8:33:e6:1b:98:
24:b6:40:e7:01:7c:7d:3e:aa:96:6f:17:e9:24:8c:2d:04:63:
99:d8:8e:1a:ba:45:48:e5:c1:c9:70:59:c0:30:cf:07:bf:01:
2b:aa:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:05:35 2025 by rpki-client