Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: sfmO9q9EGc3i5YrPG+jdAdJwuuiOnTRHZd/YZZzVn8U=
Subject key identifier: F5:D7:59:93:1A:1E:34:98:27:21:DD:72:5A:92:CF:54:56:7A:DA:DC
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019747E72C94225DE2B37E2482D2BCE21EA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 09FC
Signing time: Sat 07 Jun 2025 01:00:21 +0000
Manifest this update: Sat 07 Jun 2025 01:00:21 +0000
Manifest next update: Sun 08 Jun 2025 01:00:21 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: DckQD8CewQnO9qRoCERDO96syt2953WLrHm0IDSgsP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:2c:94:22:5d:e2:b3:7e:24:82:d2:bc:e2:1e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Jun 7 01:00:21 2025 GMT
Not After : Jun 8 01:00:21 2025 GMT
Subject: CN=f5d759931a1e34982721dd725a92cf54567adadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b7:9f:6e:6b:b2:37:04:32:00:46:f7:8e:42:
f6:b8:b9:51:9d:c0:82:30:7b:d7:cc:d7:da:3a:24:
ed:78:32:20:8e:67:b6:0b:49:57:b2:a5:77:99:72:
68:24:53:2e:40:1c:7a:c1:89:ae:a9:83:77:e1:d0:
6e:0a:e5:69:fc:c6:28:5c:bf:ff:73:e8:15:56:61:
8f:05:7a:a0:bb:21:2b:c2:88:21:6c:39:5f:f7:b6:
7e:3a:fb:80:ec:c5:c2:5a:9b:58:0e:7f:d0:21:a9:
12:b5:97:be:78:21:51:a4:c9:c0:bf:ac:e9:6d:38:
42:9e:e0:0e:e4:55:6b:da:b3:c8:17:bb:a1:98:0c:
56:7d:f1:13:07:a4:e1:63:54:84:0a:58:48:97:a9:
65:82:2f:7c:22:ac:c8:7d:79:9a:c6:9a:d3:8d:3e:
2d:d4:67:43:2f:9b:15:ee:cf:00:86:89:b2:c1:f8:
26:40:3b:8a:56:58:9d:32:02:f2:33:db:05:4e:ee:
29:8e:cd:71:5b:0a:0a:5c:3c:65:a8:11:8e:94:16:
3a:25:42:5e:f7:ae:39:69:bc:c0:3e:60:89:92:36:
86:50:16:e1:11:c9:31:0e:3c:16:1c:ee:07:ed:e1:
f2:3f:9f:a6:49:14:74:b8:93:93:d3:03:1e:56:e4:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:59:93:1A:1E:34:98:27:21:DD:72:5A:92:CF:54:56:7A:DA:DC
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:0c:9e:40:6a:8d:49:87:d5:bc:ae:33:ef:d5:e8:e0:64:
29:46:70:4d:a2:cb:6f:a0:86:6e:86:a5:53:bc:df:cb:d7:2a:
28:c7:ec:a2:f1:8c:8b:e5:2d:18:57:e0:e1:7a:ac:83:44:db:
c3:fc:64:d0:ad:71:99:17:6c:e4:ab:e3:5f:f6:d8:ec:02:79:
78:62:9b:05:91:a5:68:ca:be:f0:1e:5c:cb:93:ac:ea:58:eb:
12:19:4f:0f:8e:d8:76:76:fc:a7:42:4d:e2:92:52:3f:29:9a:
c7:0a:4a:07:21:3b:51:02:12:a5:38:df:b6:2f:b6:50:df:2c:
3a:8d:56:fe:01:a2:ad:5c:3d:ef:ae:a6:ba:16:95:26:fe:ae:
64:f3:b6:be:ea:d0:a5:1a:38:8a:f7:31:a3:cd:86:47:1f:d8:
a4:fb:15:b6:1f:e3:a0:bf:e9:ae:7f:9a:b7:a5:f7:08:12:c0:
6e:64:5e:a5:87:00:68:59:66:e0:93:94:3a:bc:d2:d3:da:4c:
84:c2:01:79:98:a9:55:72:be:dc:71:6e:f1:82:d2:75:50:3e:
6f:64:ce:75:dd:92:a9:58:bc:cd:1a:b8:1b:13:23:82:b9:eb:
58:43:a4:57:95:71:e1:f0:0f:16:8d:32:46:e5:da:25:8f:3e:
50:d6:60:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:12:03 2025 by rpki-client