Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
File: PvMl70y6pmzHH_zGiAh3524Umv0.mft (raw, json)
Hash identifier: jSHztsS0RSOKte9ZpB1zQ60GfCMbL/jTbRKpgpRyg00=
Subject key identifier: 35:A3:9B:93:AC:A2:C0:C1:A8:F0:33:B4:5B:99:6E:EF:2E:1E:56:39
Authority key identifier: 3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
Certificate issuer: /CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Certificate serial: 01976BBCE0DA35C5DB16AFF7089C229346B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 00:00:29 +0000
Manifest this update: Sat 14 Jun 2025 00:00:29 +0000
Manifest next update: Sun 15 Jun 2025 00:00:29 +0000
Files and hashes: 1: 2dLH0vNFJnWg2lZelybNLzc06cc.roa (hash: r/Z+8xB7CHc6LECAv+vBuRY+QqUaeEKJ5DtFzihx2Zs=)
2: HtYH7IfWThQC0FjsfIOLJnPcCb0.roa (hash: JQOoHMUiGQozF5WEbUjnDZo1IaMc3weZxMTmvWza6pA=)
3: PvMl70y6pmzHH_zGiAh3524Umv0.crl (hash: tRR+72XhHFBTYszvQFkUTesR+ElD+sesI5gglSFfZ/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bc:e0:da:35:c5:db:16:af:f7:08:9c:22:93:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef325ef4cbaa66cc71ffcc6880877e76e149afd
Validity
Not Before: Jun 14 00:00:29 2025 GMT
Not After : Jun 15 00:00:29 2025 GMT
Subject: CN=35a39b93aca2c0c1a8f033b45b996eef2e1e5639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:0c:af:67:e1:11:54:b4:0b:f2:96:91:9b:
e2:ea:07:39:31:2c:9f:4a:b1:b5:1c:ca:b2:ff:09:
7a:b0:b0:86:37:c0:9b:ec:4b:15:76:33:b8:cb:a1:
01:ff:6a:d4:3e:cb:83:e4:6c:04:80:2e:12:86:70:
2a:0d:ad:a3:7e:08:38:21:bf:e0:e6:1a:1c:48:07:
ee:6d:17:5d:ae:7f:90:c1:83:e4:bf:ec:7e:d2:75:
3b:8b:4e:f0:10:7f:46:06:ca:28:70:9c:a1:40:11:
c0:b7:64:fb:1f:3b:2e:82:c2:c2:dd:ea:7c:e6:81:
74:9e:5e:9b:50:c4:50:11:f6:ea:f3:ff:5f:89:88:
24:7e:5a:1b:fe:89:ce:a0:ae:47:53:4d:f7:28:4b:
2c:25:8b:86:0b:25:aa:9e:3a:54:0f:de:8e:6d:2b:
02:8f:1b:c4:a4:1c:b9:5f:f9:b4:b2:92:a1:ad:88:
9a:96:5f:06:e6:f4:01:56:34:2d:6c:e9:ab:89:8d:
a6:57:d2:7f:01:79:eb:ab:05:94:ae:e4:f9:84:6f:
fe:5d:7a:b4:32:ef:43:b7:95:41:d0:e7:f4:3d:87:
dd:ec:b2:30:de:ef:81:12:f2:b9:1b:95:4e:13:6f:
97:0d:24:d6:5c:e1:0a:b6:d9:bd:a0:66:02:b7:40:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:9B:93:AC:A2:C0:C1:A8:F0:33:B4:5B:99:6E:EF:2E:1E:56:39
X509v3 Authority Key Identifier:
keyid:3E:F3:25:EF:4C:BA:A6:6C:C7:1F:FC:C6:88:08:77:E7:6E:14:9A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvMl70y6pmzHH_zGiAh3524Umv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4fd090-6fae-4a6a-8f9e-34d71485c547/1/PvMl70y6pmzHH_zGiAh3524Umv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:98:71:5b:c7:cb:17:49:96:12:c1:f0:74:47:36:ce:3c:54:
9b:e4:bf:84:5b:99:f2:3a:99:0d:26:dc:e8:ba:1d:fc:bb:c9:
6a:29:bb:df:c7:0e:54:c0:bf:55:f1:5f:10:7d:d2:23:da:c6:
96:d2:51:e6:01:9d:74:5d:54:aa:e1:9f:e9:90:42:94:1b:7e:
69:33:76:e2:a1:ff:de:d2:2d:bb:80:c2:1e:9c:a2:3f:8f:a0:
6b:91:21:30:00:26:5c:70:79:4b:94:62:ec:80:a8:f2:cb:9d:
1b:f3:2f:16:25:c6:80:8b:70:98:8b:04:4a:38:e3:05:ed:b3:
bf:54:8d:a5:4c:46:df:2d:36:4e:83:b7:c5:e7:de:3a:fb:61:
1c:d7:8a:a2:18:31:d1:d6:a5:d6:b4:4a:e1:09:2f:11:37:0e:
3d:77:ba:05:07:b9:66:52:6b:49:ff:30:92:11:8a:bb:2a:75:
df:e6:8e:83:53:50:e9:94:52:db:50:81:c9:7a:50:04:2a:73:
31:50:36:75:a3:66:ea:d2:fa:85:a6:b9:33:65:25:cc:20:12:
e7:95:8d:25:0d:09:a8:1d:98:ad:c5:4b:ae:41:cc:4e:ee:b8:
c0:f5:b9:c5:7d:66:63:52:83:43:d1:65:9d:fa:6f:81:d0:28:
d4:59:bf:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvODaNcXbFq/3CJwik0a4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjMyNWVmNGNiYWE2NmNjNzFmZmNjNjg4MDg3N2U3NmUx
NDlhZmQwHhcNMjUwNjE0MDAwMDI5WhcNMjUwNjE1MDAwMDI5WjAzMTEwLwYDVQQD
EygzNWEzOWI5M2FjYTJjMGMxYThmMDMzYjQ1Yjk5NmVlZjJlMWU1NjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5AMr2fhEVS0C/KWkZvi6gc5MSyf
SrG1HMqy/wl6sLCGN8Cb7EsVdjO4y6EB/2rUPsuD5GwEgC4ShnAqDa2jfgg4Ib/g
5hocSAfubRddrn+QwYPkv+x+0nU7i07wEH9GBsoocJyhQBHAt2T7HzsugsLC3ep8
5oF0nl6bUMRQEfbq8/9fiYgkflob/onOoK5HU033KEssJYuGCyWqnjpUD96ObSsC
jxvEpBy5X/m0spKhrYiall8G5vQBVjQtbOmriY2mV9J/AXnrqwWUruT5hG/+XXq0
Mu9Dt5VB0Of0PYfd7LIw3u+BEvK5G5VOE2+XDSTWXOEKttm9oGYCt0CcFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWjm5OsosDBqPAztFuZbu8uHlY5MB8GA1UdIwQY
MBaAFD7zJe9MuqZsxx/8xogId+duFJr9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUt
MzRkNzE0ODVjNTQ3LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80ZmQwOTAtNmZhZS00YTZhLThmOWUtMzRkNzE0ODVjNTQ3
LzEvUHZNbDcweTZwbXpISF96R2lBaDM1MjRVbXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZhxW8fL
F0mWEsHwdEc2zjxUm+S/hFuZ8jqZDSbc6Lod/LvJaim738cOVMC/VfFfEH3SI9rG
ltJR5gGddF1UquGf6ZBClBt+aTN24qH/3tItu4DCHpyiP4+ga5EhMAAmXHB5S5Ri
7ICo8sudG/MvFiXGgItwmIsESjjjBe2zv1SNpUxG3y02ToO3xefeOvthHNeKohgx
0dal1rRK4QkvETcOPXe6BQe5ZlJrSf8wkhGKuyp13+aOg1NQ6ZRS21CByXpQBCpz
MVA2daNm6tL6haa5M2UlzCAS55WNJQ0JqB2YrcVLrkHMTu64wPW5xX1mY1KDQ9Fl
nfpvgdAo1Fm/UQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:44 2025 by rpki-client