Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: a6GREx3TzS9Aju3rwZ1Q8IxNfVTDSjc2NR84d08wD8E=
Subject key identifier: 44:83:CA:73:B1:FF:16:B6:A8:CC:30:A4:37:32:45:28:13:6E:1E:E7
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 01974D7C20655E06724B6391E2EE5CE181F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 1585
Signing time: Sun 08 Jun 2025 03:01:09 +0000
Manifest this update: Sun 08 Jun 2025 03:01:09 +0000
Manifest next update: Mon 09 Jun 2025 03:01:09 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: l43Mayu83ZV35CqyImrIlPXC84kMWU0E/AyKu/2XNKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:20:65:5e:06:72:4b:63:91:e2:ee:5c:e1:81:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jun 8 03:01:09 2025 GMT
Not After : Jun 9 03:01:09 2025 GMT
Subject: CN=4483ca73b1ff16b6a8cc30a437324528136e1ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:31:3f:11:23:90:7c:37:eb:f1:87:8e:d9:9c:
eb:2d:3c:59:c9:7f:f8:34:b0:19:20:f2:3b:41:4e:
99:08:71:09:a0:90:34:b8:57:21:cc:12:ec:51:fd:
b9:ea:00:54:26:77:be:c3:70:29:68:9e:a9:12:b4:
49:0d:8b:13:bd:34:13:27:de:7f:25:98:73:9d:a3:
8f:ba:c7:4f:29:b1:61:75:87:92:06:01:b8:ce:3e:
70:86:82:24:1f:f3:93:38:c1:f0:69:56:37:f6:c6:
1b:40:ab:0b:d8:20:99:b5:6f:78:85:20:fc:47:9a:
4c:c4:9b:fc:93:c5:59:1a:9b:54:a9:02:ab:cd:cc:
90:a1:57:42:c6:1f:3e:2a:5f:76:2e:c6:a8:7e:88:
35:d7:b9:f0:62:8f:78:33:10:a7:3f:6c:95:52:ee:
0d:65:1c:e2:3e:85:71:64:0f:29:05:5f:08:8b:6b:
e0:7c:89:06:b2:0a:e9:e8:4e:ff:26:46:43:56:53:
00:70:cf:39:77:e1:d1:5d:22:43:e3:fe:95:c2:78:
92:e4:fa:c1:99:cb:6c:4e:c0:11:93:2b:c3:19:bf:
73:6e:0f:56:3e:b8:cc:73:ee:5d:f6:c3:7f:fa:05:
cc:77:75:ce:ba:a2:ea:09:36:0f:2a:28:ab:ae:69:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:CA:73:B1:FF:16:B6:A8:CC:30:A4:37:32:45:28:13:6E:1E:E7
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:7a:df:c7:dc:72:5c:6e:3b:ec:82:58:07:4d:ec:30:69:
a8:7d:d5:fe:3e:7a:b2:4d:b1:43:46:fd:19:a6:bb:c8:f7:41:
06:47:2f:d3:6e:dc:fb:28:3b:58:dd:d4:4c:21:bd:c2:83:3c:
7b:c4:ee:37:58:a6:a0:83:e4:28:76:47:d3:51:a9:75:24:bf:
1f:d3:c6:31:0b:87:4b:ff:76:00:01:fc:f0:30:b2:49:df:2b:
0b:3e:b3:69:08:02:5c:b4:44:2d:05:bf:e8:8d:2e:ac:a4:11:
59:c1:6e:32:a7:8f:5a:a6:59:cd:f7:71:f6:5c:31:c3:a2:24:
79:3f:99:ae:ed:83:3b:70:36:58:9b:b0:8f:dc:5a:4f:73:71:
30:ef:43:d9:0a:d0:b8:3f:1d:3f:f4:98:de:22:9b:ec:b3:4e:
59:2b:3c:f3:d5:71:3d:55:bd:d2:59:e5:1e:d9:e1:76:a4:9e:
76:03:df:44:8e:16:f0:e3:4b:9f:14:02:b3:e1:8d:ba:a0:ab:
dc:d0:5c:cb:e8:d0:c6:07:cd:c0:e4:61:0a:79:5f:1e:7e:df:
36:28:ba:ca:c5:92:29:72:d7:3c:ba:ce:43:e9:d0:de:bc:b5:
2e:fd:13:1d:ad:66:45:68:31:b1:7e:2b:a8:cd:a7:57:a1:b5:
42:10:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:58:14 2025 by rpki-client