Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
File: pvh89KFbnngiRVs6qK8LXtOimfc.mft (raw, json)
Hash identifier: 7F3hv79rOTg06JKgBjA5xC/QUQdbfe7O31SewQ5bS78=
Subject key identifier: 7F:F2:99:6E:9F:E5:B9:CA:85:D4:F4:1E:4E:E8:FE:E9:A4:31:7A:E8
Authority key identifier: A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
Certificate issuer: /CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Certificate serial: 019777F8523729F9B04337E5FEB802E59B53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
Manifest number: 159B
Signing time: Mon 16 Jun 2025 09:00:52 +0000
Manifest this update: Mon 16 Jun 2025 09:00:52 +0000
Manifest next update: Tue 17 Jun 2025 09:00:52 +0000
Files and hashes: 1: A0AYtzxUnj18_WVT-ZtPo3VQOok.roa (hash: Ky9GG0Y6/3CRG+EZa6gdZtX+mEutz5bg1CsKFSgBHBU=)
2: YoFLZelk0KvVc2c4StbzyHcrvm0.roa (hash: 1/qU4jnzCv1Ym4GrpqvgYqQAdtCVCWo1utnZCleM9zs=)
3: pvh89KFbnngiRVs6qK8LXtOimfc.crl (hash: hKbtozc/6LKdVgoEVkID9cym7LEIbCUEZBFq2pSICY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:52:37:29:f9:b0:43:37:e5:fe:b8:02:e5:9b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f87cf4a15b9e7822455b3aa8af0b5ed3a299f7
Validity
Not Before: Jun 16 09:00:52 2025 GMT
Not After : Jun 17 09:00:52 2025 GMT
Subject: CN=7ff2996e9fe5b9ca85d4f41e4ee8fee9a4317ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:7d:6f:e6:77:65:21:89:b4:64:7c:40:65:
63:a8:40:aa:ce:eb:a0:8c:1a:0a:ad:aa:f3:95:e8:
32:06:32:e4:37:24:5f:2d:dc:5d:b6:e3:7e:a8:fa:
3f:92:db:2c:fb:f5:fe:2b:7d:eb:55:27:4f:f9:12:
40:64:f1:5d:78:c9:ca:b6:f9:39:5a:11:c2:6a:8c:
c8:eb:37:66:f3:03:15:1a:d4:00:4b:c0:02:46:9e:
fd:97:d5:09:c1:16:14:09:01:b3:7b:aa:64:04:b4:
f7:2a:16:7e:7e:47:f5:4e:31:77:6d:b4:c0:5b:26:
8a:7b:f6:bf:c8:f2:15:49:af:2e:0a:d7:99:45:a9:
f6:a9:70:f8:a8:e7:cc:fc:a6:72:e8:f3:d6:38:e4:
eb:ff:aa:5c:4f:2b:f3:d1:db:59:26:e0:99:c6:74:
f2:01:a0:0a:23:75:25:d8:f8:42:4a:56:06:65:33:
1d:a5:36:9f:c4:7f:82:08:e2:51:64:2b:57:c9:3a:
58:e0:b4:55:1d:7b:d8:99:ac:e8:f6:58:c0:58:88:
21:a9:24:14:73:08:43:99:0d:73:3a:6f:12:96:54:
92:d8:04:87:97:b1:09:5b:a0:f5:4f:04:be:c7:2b:
2a:b7:24:f7:68:84:19:6f:16:bd:88:a5:c2:c4:67:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:99:6E:9F:E5:B9:CA:85:D4:F4:1E:4E:E8:FE:E9:A4:31:7A:E8
X509v3 Authority Key Identifier:
keyid:A6:F8:7C:F4:A1:5B:9E:78:22:45:5B:3A:A8:AF:0B:5E:D3:A2:99:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvh89KFbnngiRVs6qK8LXtOimfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/289b1d-08dd-4d53-b12d-7d4028a1bf59/1/pvh89KFbnngiRVs6qK8LXtOimfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6f:b4:d7:79:df:0e:ca:79:09:df:a7:e0:fc:06:b6:62:4d:
32:3d:21:53:05:1a:85:5d:97:6b:a7:72:8c:ee:5d:89:98:91:
e6:e8:f7:8e:eb:00:a2:ef:82:2d:0f:59:9b:06:f1:b4:4a:a0:
5e:20:b0:31:c6:9b:70:21:84:5a:1c:1c:92:96:52:6a:9d:d4:
a9:f8:4d:88:b6:95:08:53:dc:b6:ab:76:d9:cb:72:61:d3:5d:
75:05:67:a5:48:ee:8f:3d:98:4b:fb:d7:fe:8e:bc:4a:25:4d:
e3:13:6b:bd:5f:f4:45:7e:f3:49:66:1e:54:01:42:13:9f:f8:
49:e7:ac:20:cd:da:21:80:f4:f9:ac:35:2b:4e:14:53:61:5e:
dc:f7:2f:84:f9:ae:90:c4:f1:cf:27:b7:f5:be:9d:bf:ab:84:
33:a4:d9:ba:36:2c:60:f6:be:a4:67:e8:47:16:73:de:19:6c:
d4:1b:4e:85:4a:1d:e1:87:14:a2:4e:05:fb:a9:d3:5f:5a:ae:
cd:d2:66:c6:86:af:b0:50:94:58:c2:c2:82:dd:8b:d1:62:6a:
d6:83:93:3e:02:14:8d:76:49:3f:b5:87:48:c4:ea:42:cc:f7:
ec:f3:c9:96:56:8e:a9:91:68:6a:50:5d:14:2b:1c:c7:51:38:
3c:d9:21:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:51:52 2025 by rpki-client