Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: MkfWPlvf77aJbMje6i467Wqeu8vtrQKxV8Ae4k8gy8M=
Subject key identifier: CA:08:A3:89:09:1D:96:2A:1D:26:A1:F7:54:BD:33:94:0E:42:C1:C0
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 019A4DAAE64480806BB69BEF153513F139C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 07:00:36 +0000
Manifest this update: Tue 04 Nov 2025 07:00:36 +0000
Manifest next update: Wed 05 Nov 2025 07:00:36 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: LIqvw+KHzrTi/WPTTNN++1XUwIsk5PG09Czek3ZkMIU=)
3: THythJBp9HlvhR4Ucra3aB5a1rw.roa (hash: s/hqAL5pfO/TIJ20hhiLhrBaWL37u8uzz5dP4J4SZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:e6:44:80:80:6b:b6:9b:ef:15:35:13:f1:39:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Nov 4 07:00:36 2025 GMT
Not After : Nov 5 07:00:36 2025 GMT
Subject: CN=ca08a389091d962a1d26a1f754bd33940e42c1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:65:3f:ee:93:30:41:5f:b3:37:7e:78:9a:73:
e6:cf:af:12:72:5b:aa:ef:ee:71:3e:63:ae:60:a2:
40:cf:55:77:8f:00:e9:07:de:f0:4d:af:20:ab:13:
ca:62:b1:3b:97:20:57:9f:df:be:ac:65:60:b9:7d:
d7:8b:4e:77:99:ac:2d:fd:16:59:41:e4:65:57:a2:
30:b3:dc:c5:1b:fa:ee:e8:e5:6d:eb:4a:e9:54:3f:
47:de:f0:48:be:74:86:63:bf:f9:de:f2:4a:3c:4d:
84:fa:ca:fd:7a:67:6e:08:9a:2c:62:bc:30:fe:6b:
a2:3f:01:67:e0:bd:09:65:3f:e4:18:90:87:f8:b6:
84:35:ff:2d:dc:31:b0:98:f2:2f:51:05:1d:58:01:
67:4d:f8:11:99:9a:6f:77:6f:e2:87:df:7c:10:86:
67:82:8a:6b:84:21:b3:79:4f:9f:95:eb:4c:1b:c9:
82:2a:6c:e8:b5:05:4f:d7:eb:73:f9:9e:3a:dc:83:
3c:a2:73:f7:12:50:57:0a:81:83:15:1b:ce:26:08:
15:d0:92:06:18:c0:ce:92:ee:bb:35:4b:a1:07:0d:
e6:a3:a9:f6:17:4e:63:9d:b5:63:ea:e8:1c:6d:4c:
d5:e8:e2:d3:90:fd:e5:72:67:15:58:1e:d6:2c:a9:
48:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:A3:89:09:1D:96:2A:1D:26:A1:F7:54:BD:33:94:0E:42:C1:C0
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:05:53:1a:93:de:93:c9:fe:b2:e1:9e:7c:73:eb:3f:86:91:
f6:78:3f:85:bf:e0:3b:6f:c3:75:7c:68:8d:00:bf:8e:da:b5:
c8:ac:9e:cf:c9:22:98:3d:57:7a:7f:a4:a7:ef:8f:6f:37:6e:
20:5a:d9:88:fe:5c:54:10:8a:76:2d:f0:ce:28:f0:05:5b:6a:
37:d5:01:39:78:29:0d:b3:a3:14:cb:3e:e9:5c:b3:44:a9:c0:
2c:b3:68:b9:e9:a2:0f:5b:33:7c:c8:73:b0:c2:bc:c7:25:25:
77:63:d9:9e:0a:4e:43:70:d6:a9:67:79:14:25:26:1a:7c:f3:
7c:9e:95:c0:a9:b5:e0:3b:2f:97:cf:95:ab:9a:2b:f5:dc:00:
96:a2:ee:e4:6b:9a:67:9d:b7:75:10:43:fb:04:ea:4b:3a:4a:
80:e9:14:f1:e5:8c:9d:a4:0a:fd:10:34:97:cb:4d:c4:42:29:
4e:09:e0:bc:ff:f0:e4:02:73:1f:b8:de:35:de:34:e2:64:62:
7f:a5:b2:d5:6e:4d:2b:5e:f1:2a:fb:e1:5b:9c:aa:ac:1f:51:
47:8f:2a:f4:ee:b6:3e:33:65:d1:17:74:1b:5a:de:fe:b0:48:
c5:c1:5e:13:98:26:7c:97:50:88:c1:de:b7:0e:0f:ee:71:f6:
cb:92:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:59 2025 by rpki-client