Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: xgVSPZ58ON0JoM+9I4gJwJlrREBvnWm238JvpGJlDbM=
Subject key identifier: 84:54:41:1B:84:C6:70:E5:C1:56:67:BB:82:93:6D:6C:27:7D:07:06
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 01987450C3860B11CD6F2FA064AC2B755694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 11A0
Signing time: Mon 04 Aug 2025 09:01:46 +0000
Manifest this update: Mon 04 Aug 2025 09:01:46 +0000
Manifest next update: Tue 05 Aug 2025 09:01:46 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: 9GfgvSeUHxHdKEVgzSqMrNMMBUVqbzc1f2yvOXm7KiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:c3:86:0b:11:cd:6f:2f:a0:64:ac:2b:75:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Aug 4 09:01:46 2025 GMT
Not After : Aug 5 09:01:46 2025 GMT
Subject: CN=8454411b84c670e5c15667bb82936d6c277d0706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:35:33:43:e6:93:e5:33:98:c4:48:a6:cb:
57:86:c6:5b:d1:0a:2a:6b:ac:b1:aa:2d:f4:98:b0:
f6:fc:d9:6e:10:44:92:48:fd:77:0c:8c:7c:7e:07:
15:1f:de:21:19:b0:57:5c:d0:36:d3:5a:43:0f:07:
05:4d:ad:a0:1b:0a:ab:cf:b6:40:3d:d6:42:8d:20:
ea:8b:ba:ea:a3:69:43:3d:b7:ba:32:b5:fb:2e:b0:
db:1e:9a:8a:a0:b8:d9:29:e1:d5:10:59:95:20:83:
73:ff:78:23:43:4a:75:79:e4:11:a0:41:ec:51:05:
ae:61:5a:fd:a2:7f:7c:0a:8d:d1:fd:e0:15:f4:b4:
b8:c0:d9:06:f4:eb:34:68:96:6d:67:d8:f3:4d:3f:
46:9d:e1:f5:83:43:01:11:02:da:40:43:0b:e7:dc:
cd:58:c0:17:31:ab:f3:33:de:eb:d9:69:b6:65:ab:
98:1c:e5:04:f2:e4:0b:df:66:11:32:9a:c7:7d:af:
ef:b2:37:0e:c9:42:1a:e1:8b:5c:15:ca:32:14:66:
27:e8:ea:ac:4e:90:e1:3c:3a:7f:d7:78:d3:9e:48:
39:dd:c3:24:2d:a7:b4:be:fd:fe:cd:68:3a:c8:3f:
c2:d6:cc:53:d5:4a:1c:df:d4:06:0e:47:82:72:63:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:54:41:1B:84:C6:70:E5:C1:56:67:BB:82:93:6D:6C:27:7D:07:06
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:1b:89:18:d1:b1:6d:fc:52:45:8a:ab:2d:5e:ab:b9:1a:03:
5d:bc:06:11:e1:71:d5:ac:ec:ff:65:bd:1f:30:f9:58:23:ec:
ca:05:d4:f8:c0:bf:c5:27:cb:42:68:75:42:84:b4:66:a5:b8:
68:86:b1:a3:10:2f:4e:f0:11:09:26:55:6a:ed:d4:73:3d:22:
61:e2:19:e9:0e:49:05:fd:44:3c:93:5a:df:19:07:c5:82:6e:
96:d5:5b:83:c3:a3:cf:ae:f3:f5:ff:21:d9:d9:e5:67:b5:06:
06:5f:1e:79:c9:e1:41:bf:db:35:4c:8c:a5:bd:f4:58:8f:87:
7d:81:73:99:78:98:3a:b7:a7:ff:5e:98:4a:37:28:cf:cf:4f:
a3:05:d8:44:01:e0:f4:29:b0:ca:3d:fe:f7:98:a2:60:3f:7a:
cc:a7:e8:cc:19:d2:74:e8:52:9b:a3:61:0c:c9:46:34:0d:76:
bb:e6:75:c8:24:9a:37:2f:e4:05:b3:48:b3:23:65:c4:f3:39:
27:46:a9:0c:ee:b4:c2:ba:32:ce:90:2f:51:66:f0:1e:41:42:
fd:96:2a:b4:8c:da:72:1e:7e:71:e6:ed:68:2f:3f:95:1f:78:
5d:26:75:51:4b:e7:69:df:07:a3:68:e5:d7:35:64:2c:ba:df:
91:63:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:35 2025 by rpki-client