Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
File: PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft (raw, json)
Hash identifier: n8zPg9o7+VjBHvR3EQL58nwLsQOBa0rimjII0tjnwYA=
Subject key identifier: 9A:12:00:56:56:A6:56:1F:0F:E4:12:5F:79:19:CC:27:F5:C4:08:B4
Authority key identifier: 3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
Certificate issuer: /CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Certificate serial: 01988F90ADB3430A58C493E644E362E5F0AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
Manifest number: 0D4F
Signing time: Sat 09 Aug 2025 16:01:20 +0000
Manifest this update: Sat 09 Aug 2025 16:01:20 +0000
Manifest next update: Sun 10 Aug 2025 16:01:20 +0000
Files and hashes: 1: AuOuUKhz7LbWM9xXAFqUFIS1KQI.roa (hash: yQUlcBfkC7CQTeK1Wv3DBode7pqw+A1kJYyGEQOXp9g=)
2: PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl (hash: b9RhGAWQI97j0DjG/ozQ7JD9I6MpzmAhUu/3Ts7D0e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:ad:b3:43:0a:58:c4:93:e6:44:e3:62:e5:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cabc3dde8f16cf6d918a40f1682ca41be4d0a41
Validity
Not Before: Aug 9 16:01:20 2025 GMT
Not After : Aug 10 16:01:20 2025 GMT
Subject: CN=9a12005656a6561f0fe4125f7919cc27f5c408b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:05:1e:5e:33:b1:62:41:27:6b:3d:30:c8:
73:e2:4c:e7:7f:fe:de:44:21:90:d2:c3:34:e2:71:
40:e9:ca:5e:14:b0:90:79:d1:3b:82:c3:cb:83:66:
e4:8f:f8:d2:a6:a4:ac:dd:49:c3:60:7a:d6:58:60:
6d:5c:23:95:8c:49:35:13:f6:af:ab:04:cb:28:39:
09:5e:b3:73:c7:3f:21:cc:f1:b3:ae:00:4e:3c:ef:
33:cb:14:52:20:d8:20:7b:45:33:f3:66:b2:f1:23:
d1:35:65:fb:d1:08:94:49:76:07:12:08:fe:f6:9d:
c0:ff:39:ef:a0:8f:fb:37:86:84:ea:7a:47:0b:14:
69:a5:72:a9:67:52:f6:08:c4:53:a0:9c:a2:d1:3c:
89:a8:9b:15:92:62:00:08:72:a6:99:6e:46:5d:98:
56:26:a4:41:69:d5:a8:00:98:66:bd:43:b5:04:c6:
e5:51:37:3e:e5:fc:fb:08:31:59:54:29:ac:74:0b:
80:65:9e:11:ed:e5:fe:0d:38:be:60:9b:c9:d0:84:
62:3e:1e:2e:c8:d9:02:6d:e3:27:c4:4b:af:bd:7a:
38:a8:32:5c:e0:14:80:40:e4:b0:cf:59:5f:3d:e2:
1d:cf:3d:f4:7c:0d:0a:0d:5c:f1:39:6e:63:2e:fd:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:12:00:56:56:A6:56:1F:0F:E4:12:5F:79:19:CC:27:F5:C4:08:B4
X509v3 Authority Key Identifier:
keyid:3C:AB:C3:DD:E8:F1:6C:F6:D9:18:A4:0F:16:82:CA:41:BE:4D:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKvD3ejxbPbZGKQPFoLKQb5NCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/910633-de46-4ae2-a15a-29c87c8d8335/1/PKvD3ejxbPbZGKQPFoLKQb5NCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a2:bf:b5:ae:b8:1d:8b:ac:b1:0b:b2:84:f0:7e:39:b9:fc:
ed:c0:e6:9f:14:0e:32:2e:ed:69:a7:fe:82:ee:89:e7:03:9e:
91:9e:35:3b:3e:58:25:d4:1a:42:00:0b:1d:df:7c:56:88:2c:
e0:6f:62:c9:74:8d:72:af:39:99:59:6e:11:f0:14:9b:b2:90:
a0:8e:78:49:99:63:d3:8c:4c:4f:b1:76:e8:01:20:9c:4c:86:
4a:17:a8:51:9b:4a:c6:8e:78:9b:e1:fd:51:04:e3:32:dc:0a:
f5:cd:0a:4d:e1:aa:ac:5a:7b:52:d7:0c:89:38:f3:ff:4c:ec:
3c:62:4b:e3:2e:f6:ca:b0:d2:78:a6:82:f3:62:6b:53:69:a8:
2c:2e:46:09:65:d7:d0:ae:d7:e5:74:5b:2d:80:fc:ae:5b:a1:
06:4f:4a:85:6f:64:3d:0d:bb:08:a0:bc:13:e0:cb:c7:47:62:
3f:47:fc:e8:a9:d6:92:71:c1:d9:93:91:ea:71:2c:9d:de:10:
5a:96:69:34:2f:27:60:68:cd:fc:2a:22:e9:f8:07:50:01:bb:
f6:e8:18:fd:5c:74:fd:34:4d:88:f8:3c:06:a4:e0:67:a8:fb:
f2:31:be:54:5b:75:f8:51:26:e8:ca:87:ef:d9:ec:f8:7f:4c:
d1:af:d6:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkK2zQwpYxJPmRONi5fCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYWJjM2RkZThmMTZjZjZkOTE4YTQwZjE2ODJjYTQxYmU0
ZDBhNDEwHhcNMjUwODA5MTYwMTIwWhcNMjUwODEwMTYwMTIwWjAzMTEwLwYDVQQD
Eyg5YTEyMDA1NjU2YTY1NjFmMGZlNDEyNWY3OTE5Y2MyN2Y1YzQwOGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo00FHl4zsWJBJ2s9MMhz4kznf/7e
RCGQ0sM04nFA6cpeFLCQedE7gsPLg2bkj/jSpqSs3UnDYHrWWGBtXCOVjEk1E/av
qwTLKDkJXrNzxz8hzPGzrgBOPO8zyxRSINgge0Uz82ay8SPRNWX70QiUSXYHEgj+
9p3A/znvoI/7N4aE6npHCxRppXKpZ1L2CMRToJyi0TyJqJsVkmIACHKmmW5GXZhW
JqRBadWoAJhmvUO1BMblUTc+5fz7CDFZVCmsdAuAZZ4R7eX+DTi+YJvJ0IRiPh4u
yNkCbeMnxEuvvXo4qDJc4BSAQOSwz1lfPeIdzz30fA0KDVzxOW5jLv1bXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoSAFZWplYfD+QSX3kZzCf1xAi0MB8GA1UdIwQY
MBaAFDyrw93o8Wz22RikDxaCykG+TQpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEt2RDNlanhiUGJaR0tRUEZvTEtRYjVOQ2tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85MTA2MzMtZGU0Ni00YWUyLWExNWEt
MjljODdjOGQ4MzM1LzEvUEt2RDNlanhiUGJaR0tRUEZvTEtRYjVOQ2tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC85MTA2MzMtZGU0Ni00YWUyLWExNWEtMjljODdjOGQ4MzM1
LzEvUEt2RDNlanhiUGJaR0tRUEZvTEtRYjVOQ2tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6K/ta64
HYussQuyhPB+Obn87cDmnxQOMi7taaf+gu6J5wOekZ41Oz5YJdQaQgALHd98Vogs
4G9iyXSNcq85mVluEfAUm7KQoI54SZlj04xMT7F26AEgnEyGSheoUZtKxo54m+H9
UQTjMtwK9c0KTeGqrFp7UtcMiTjz/0zsPGJL4y72yrDSeKaC82JrU2moLC5GCWXX
0K7X5XRbLYD8rluhBk9KhW9kPQ27CKC8E+DLx0diP0f86KnWknHB2ZOR6nEsnd4Q
WpZpNC8nYGjN/Coi6fgHUAG79ugY/Vx0/TRNiPg8BqTgZ6j78jG+VFt1+FEm6MqH
79ns+H9M0a/Wtw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:18:33 2025 by rpki-client