Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: 8XNJVHA9BZdRAdbwpy57PvBPD8npOhvoX/WDyS6ueyA=
Subject key identifier: C8:95:23:BC:34:E6:30:2C:99:FE:A9:94:FD:F0:7E:4F:C0:D5:FB:D9
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 019A21E50C301DF9CB63D9E87F91543EBD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0B76
Signing time: Sun 26 Oct 2025 19:00:50 +0000
Manifest this update: Sun 26 Oct 2025 19:00:50 +0000
Manifest next update: Mon 27 Oct 2025 19:00:50 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: wSv6r6CHJPjQajCftxNuoxZ6i1kREDRN3N3D7O7JZ+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:0c:30:1d:f9:cb:63:d9:e8:7f:91:54:3e:bd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Oct 26 19:00:50 2025 GMT
Not After : Oct 27 19:00:50 2025 GMT
Subject: CN=c89523bc34e6302c99fea994fdf07e4fc0d5fbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:5a:01:8f:3e:75:ff:dc:ef:0b:c2:97:3f:
b6:bb:6e:a8:de:88:e2:18:57:1a:c2:ad:41:fe:63:
fd:b7:1f:30:3f:38:d4:d2:0b:bb:c3:85:fd:33:bc:
c5:32:04:98:b0:b0:c5:c5:c7:41:35:c6:a7:d9:39:
74:e7:4b:22:74:a4:1a:5c:c3:91:7e:3d:e8:9e:b9:
dd:61:cd:06:86:12:cd:6d:13:66:11:52:10:b7:bb:
8f:23:53:54:06:a7:56:7a:f8:48:16:0c:c1:8a:f4:
ac:e4:f8:ef:58:03:9c:ec:16:42:64:a9:7a:d6:54:
e2:15:e8:36:b0:97:6e:b8:7e:dd:61:a1:3f:c2:3c:
21:c8:d9:61:50:f0:7f:1f:d2:ca:27:1b:78:5e:13:
a7:7e:cf:90:8d:d0:80:c8:b8:2a:b9:9f:1a:fb:87:
dc:c4:23:dd:71:e1:48:f6:90:e0:20:ca:bb:c2:64:
c5:ef:ef:c9:e2:10:7f:96:7a:f9:3b:2d:18:39:b0:
96:c2:e0:ed:41:ae:87:1f:a8:9c:05:8a:a0:43:6c:
b0:82:0a:fd:e6:0b:4f:d9:42:e3:43:0e:7b:87:d1:
99:fe:5b:68:44:bb:bb:87:ae:03:13:e4:0c:e0:6f:
f4:a3:80:c3:d4:91:eb:5e:b4:16:51:6f:d5:51:ce:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:95:23:BC:34:E6:30:2C:99:FE:A9:94:FD:F0:7E:4F:C0:D5:FB:D9
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:b1:0f:f1:c0:41:e9:38:ec:b2:fa:f0:4c:00:d8:be:3d:
cd:47:12:08:56:bb:c5:7c:2f:57:84:6f:3f:45:75:4b:b1:21:
8c:d7:c4:9b:30:64:98:e1:16:7f:70:0e:d4:ee:bc:f5:76:db:
d5:81:fe:86:e4:9b:c1:36:b5:f0:53:62:1e:84:bd:ef:af:28:
e8:5c:70:79:d3:d2:55:c1:37:80:43:9c:9d:65:c1:48:ca:1b:
d1:3b:aa:ce:63:1f:8e:a9:95:3c:a4:38:78:d6:ce:8a:50:86:
54:fb:05:2a:d8:e5:0a:ea:9f:da:a8:9a:e9:a3:21:11:08:fd:
e3:06:f3:6c:d1:f6:a5:f0:f0:81:54:3e:3b:98:bc:6c:32:8f:
0e:09:7a:32:19:16:c4:96:b5:e3:c2:f6:bc:98:fd:30:c5:2d:
32:1f:ea:2b:21:44:ff:23:c7:e1:c0:1a:bf:fd:ca:8a:fc:be:
13:e1:f2:42:3e:25:07:7a:fc:68:55:41:9b:b9:50:4b:95:96:
a7:81:79:1f:6a:6d:c4:da:83:25:01:40:99:98:9c:19:39:4b:
03:a9:54:ab:cd:9e:d3:37:bf:14:a0:a9:9a:be:6f:43:c1:0e:
67:a8:dd:5b:0c:c6:f4:64:54:e6:3a:d7:d7:1a:f5:1f:61:4f:
a9:a1:e3:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoh5QwwHfnLY9nof5FUPr1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjJjMzEyOTA2ZWI2NzM2MTJiYWU3NGRhMmRkMThhMDM2
ODI0YjEwHhcNMjUxMDI2MTkwMDUwWhcNMjUxMDI3MTkwMDUwWjAzMTEwLwYDVQQD
EyhjODk1MjNiYzM0ZTYzMDJjOTlmZWE5OTRmZGYwN2U0ZmMwZDVmYmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2FaAY8+df/c7wvClz+2u26o3oji
GFcawq1B/mP9tx8wPzjU0gu7w4X9M7zFMgSYsLDFxcdBNcan2Tl050sidKQaXMOR
fj3onrndYc0GhhLNbRNmEVIQt7uPI1NUBqdWevhIFgzBivSs5PjvWAOc7BZCZKl6
1lTiFeg2sJduuH7dYaE/wjwhyNlhUPB/H9LKJxt4XhOnfs+QjdCAyLgquZ8a+4fc
xCPdceFI9pDgIMq7wmTF7+/J4hB/lnr5Oy0YObCWwuDtQa6HH6icBYqgQ2ywggr9
5gtP2ULjQw57h9GZ/ltoRLu7h64DE+QM4G/0o4DD1JHrXrQWUW/VUc6xgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiVI7w05jAsmf6plP3wfk/A1fvZMB8GA1UdIwQY
MBaAFD7ywxKQbrZzYSuudNot0YoDaCSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYt
YzlmZmJlOWI5NGQzLzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYtYzlmZmJlOWI5NGQz
LzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+WxD/HA
Qek47LL68EwA2L49zUcSCFa7xXwvV4RvP0V1S7EhjNfEmzBkmOEWf3AO1O689Xbb
1YH+huSbwTa18FNiHoS9768o6FxwedPSVcE3gEOcnWXBSMob0TuqzmMfjqmVPKQ4
eNbOilCGVPsFKtjlCuqf2qia6aMhEQj94wbzbNH2pfDwgVQ+O5i8bDKPDgl6MhkW
xJa148L2vJj9MMUtMh/qKyFE/yPH4cAav/3Kivy+E+HyQj4lB3r8aFVBm7lQS5WW
p4F5H2ptxNqDJQFAmZicGTlLA6lUq82e0ze/FKCpmr5vQ8EOZ6jdWwzG9GRU5jrX
1xr1H2FPqaHjzw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:06 2025 by rpki-client