Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: KAG5ZI08R4bJ8j9OpzI4JmYqcVna1rOSdVeBCMVAgZk=
Subject key identifier: 3E:FE:76:46:BA:3A:05:61:6E:7C:72:ED:B4:72:DB:16:7D:A0:CB:66
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 019A4D73AE8856014A0CE2AE7F5F33AFC31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: NaCA4gKV/8G3UediUltOT2D5d7PMBumvTo+Leq8vi2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ae:88:56:01:4a:0c:e2:ae:7f:5f:33:af:c3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=3efe7646ba3a05616e7c72edb472db167da0cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:19:1b:07:e0:20:b8:28:ce:89:2c:1a:0c:
86:21:8f:b0:da:48:a9:22:17:e9:af:08:8f:69:43:
62:02:d8:29:1a:3f:78:56:a9:1c:7c:5b:96:39:e1:
78:a9:39:ab:3e:67:a5:70:4a:57:6f:0f:72:70:f3:
20:d8:1c:e1:7d:d5:1c:81:10:05:0b:d7:90:b0:b0:
fa:bf:f6:93:8f:36:c7:21:c8:cb:27:c5:21:00:a4:
c3:1c:03:cd:15:8a:a4:e6:3c:aa:38:02:aa:f9:49:
77:e6:43:d2:25:22:7a:78:1e:f6:0e:38:3f:80:8c:
c7:4a:ba:0b:53:77:71:ad:4f:3b:1e:9d:5f:bf:65:
43:ff:86:eb:df:64:cf:47:ff:bf:95:9d:52:b5:f8:
9d:7f:c1:82:f0:4c:c3:b7:82:b7:a1:94:60:71:a7:
17:e5:3a:e6:96:1a:5d:8f:2a:5e:e1:0a:7b:ea:dc:
7c:6a:f1:b9:28:34:0a:33:18:d8:38:6c:b9:f5:83:
94:ad:1a:dc:8d:bd:bd:cf:c4:84:d1:78:be:f5:a8:
d9:0a:ba:fb:c8:d1:90:d1:44:b9:bb:0d:45:2c:c6:
38:09:32:24:8d:2b:63:2b:69:b6:c9:4f:3e:b0:df:
15:cc:49:58:fd:1c:79:37:9a:ba:55:53:08:1a:c6:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:76:46:BA:3A:05:61:6E:7C:72:ED:B4:72:DB:16:7D:A0:CB:66
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:50:a6:97:1a:db:09:9b:d2:ee:f7:90:b9:d3:0b:93:4c:
63:a4:9c:4d:ff:0b:d2:c4:0a:9f:03:c8:f3:4c:58:63:8d:53:
71:13:da:e5:b8:3c:3d:76:89:b3:6e:e4:63:6e:94:7e:44:60:
a9:0d:77:23:66:00:66:fb:4d:1c:6b:6c:cf:9f:9b:4f:6e:2d:
9b:fc:9e:7e:32:c1:c6:f6:d9:6a:10:85:f4:e7:69:9b:7f:22:
8a:6c:d7:37:e2:fa:e3:51:d8:91:12:47:8c:68:d6:ec:d5:3e:
3e:11:ef:1a:80:8a:1d:54:29:d8:7e:8e:fd:81:2c:6e:b6:5d:
95:13:40:bd:31:08:00:96:28:1e:34:be:0c:59:a0:c5:48:dc:
48:ae:34:a0:27:1f:52:b2:4c:e8:03:74:20:97:6b:84:f5:d9:
3c:c4:41:0c:60:27:a9:69:7f:e9:c4:aa:78:e2:f6:42:ac:6a:
f7:3f:b5:0a:0e:b6:21:58:b6:9e:51:57:56:6a:f8:5e:e4:49:
c4:6b:a6:07:d7:5c:32:3a:f7:17:a8:c8:53:aa:15:cb:3a:b0:
3e:2e:07:38:e6:6d:7f:89:06:f5:4e:ec:bc:3d:85:43:ab:6a:
20:30:86:39:7a:76:18:9c:ab:3c:66:51:62:df:06:34:f4:db:
65:b8:61:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:26 2025 by rpki-client