Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File: PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier: MCEi5EX//emaTTqx+6cbtpGgTPW21ock+/izVR2eKj4=
Subject key identifier: 9A:A2:23:72:74:BD:7C:5F:7A:19:63:79:DE:65:50:5B:1D:32:8B:24
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer: /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial: 0198733D7BDC7B0BEED0A6B12D7EBEA7FFC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number: 0A97
Signing time: Mon 04 Aug 2025 04:01:05 +0000
Manifest this update: Mon 04 Aug 2025 04:01:05 +0000
Manifest next update: Tue 05 Aug 2025 04:01:05 +0000
Files and hashes: 1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: kY4/kwdyMT+fHdx/kdjOqnuGaT7GrMWryrDZXvTRrmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:7b:dc:7b:0b:ee:d0:a6:b1:2d:7e:be:a7:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
Validity
Not Before: Aug 4 04:01:05 2025 GMT
Not After : Aug 5 04:01:05 2025 GMT
Subject: CN=9aa2237274bd7c5f7a196379de65505b1d328b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:26:5c:12:20:af:f3:f8:20:bb:48:6c:05:
43:b2:73:c2:9a:7b:b2:50:96:b5:3b:f8:84:af:64:
53:fa:70:1b:b7:52:b2:9c:5c:d7:e5:9c:8a:b0:e4:
cb:68:40:98:de:6d:e8:a1:f2:40:1f:e3:e9:32:18:
35:b9:3e:28:e5:6e:97:c2:cb:e7:ab:71:86:e4:b1:
09:06:4b:b0:bf:23:d6:f6:a8:53:d2:32:2d:f5:da:
4f:fb:06:f9:61:45:c1:da:dd:61:82:f7:36:f2:05:
c1:4b:eb:d9:b0:98:0d:6c:e2:9e:45:ef:e4:7b:9e:
d2:74:cb:ef:c9:34:fc:ad:c9:58:57:55:00:42:f1:
08:ae:1c:e5:74:24:e3:d8:d9:a6:85:00:70:70:20:
75:01:df:57:8e:d8:33:91:4d:bc:41:2e:b5:32:48:
60:48:55:81:55:69:44:36:74:85:12:06:78:1a:04:
6a:c0:4b:99:93:47:03:ea:5f:5e:0f:18:c0:07:03:
0d:78:11:cc:3a:6f:6f:86:cd:2c:b5:56:bf:6c:b9:
c0:c1:b6:4d:9b:87:44:41:a9:08:4c:2e:dd:01:50:
7a:f8:21:34:29:38:7f:a2:b4:ac:dc:a7:2c:b0:1e:
c1:8f:6c:8d:5a:2a:49:67:93:ae:0c:68:20:94:85:
2f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A2:23:72:74:BD:7C:5F:7A:19:63:79:DE:65:50:5B:1D:32:8B:24
X509v3 Authority Key Identifier:
keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:7a:12:1e:65:40:5f:06:55:ef:a3:13:1d:3f:3d:f8:40:84:
66:56:49:53:d0:79:25:fd:4e:ea:24:25:5c:8a:93:32:58:3e:
d0:f3:f3:9b:f0:4e:25:ba:39:48:dd:87:77:33:69:d9:84:a8:
95:1a:f2:df:15:66:8a:2a:28:86:4c:1f:1e:c8:60:00:a3:5b:
a8:1d:69:48:61:cd:b2:2d:93:fe:46:d2:ba:94:08:a7:d7:f1:
c2:e5:b3:a8:7e:a9:52:1a:1a:21:ee:5d:c5:a7:9f:62:99:c2:
25:dc:19:86:d4:b5:68:ed:eb:32:e1:ed:e5:6f:33:d3:37:e1:
1d:29:24:48:63:8d:40:c0:c4:56:62:7d:3e:4b:b5:6d:6e:98:
c9:ce:d1:9d:0e:fa:3d:00:9c:df:89:fe:78:90:88:32:46:80:
13:ab:61:b5:58:ab:9d:a9:e4:b6:c4:49:63:d3:9a:57:6d:c5:
bc:0b:28:4e:46:b6:7e:0c:9d:56:46:34:7d:54:d0:fd:15:ce:
82:3b:8b:fc:d3:ef:d5:40:20:69:bb:5e:97:53:ed:5a:25:27:
37:54:4b:48:ce:98:5e:b0:06:4b:1f:b2:58:e8:c4:76:cd:45:
85:ac:8a:e0:3c:57:aa:e5:03:1c:88:b7:12:b7:6a:b1:9c:d6:
a4:a9:1c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPXvcewvu0KaxLX6+p//IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZjJjMzEyOTA2ZWI2NzM2MTJiYWU3NGRhMmRkMThhMDM2
ODI0YjEwHhcNMjUwODA0MDQwMTA1WhcNMjUwODA1MDQwMTA1WjAzMTEwLwYDVQQD
Eyg5YWEyMjM3Mjc0YmQ3YzVmN2ExOTYzNzlkZTY1NTA1YjFkMzI4YjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNcmXBIgr/P4ILtIbAVDsnPCmnuy
UJa1O/iEr2RT+nAbt1KynFzX5ZyKsOTLaECY3m3oofJAH+PpMhg1uT4o5W6Xwsvn
q3GG5LEJBkuwvyPW9qhT0jIt9dpP+wb5YUXB2t1hgvc28gXBS+vZsJgNbOKeRe/k
e57SdMvvyTT8rclYV1UAQvEIrhzldCTj2NmmhQBwcCB1Ad9XjtgzkU28QS61Mkhg
SFWBVWlENnSFEgZ4GgRqwEuZk0cD6l9eDxjABwMNeBHMOm9vhs0stVa/bLnAwbZN
m4dEQakITC7dAVB6+CE0KTh/orSs3KcssB7Bj2yNWipJZ5OuDGgglIUvMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJqiI3J0vXxfehljed5lUFsdMoskMB8GA1UdIwQY
MBaAFD7ywxKQbrZzYSuudNot0YoDaCSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYt
YzlmZmJlOWI5NGQzLzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC83ODgyZTMtZGU4Zi00NzUxLTliNmYtYzlmZmJlOWI5NGQz
LzEvUHZMREVwQnV0bk5oSzY1MDJpM1JpZ05vSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHoSHmVA
XwZV76MTHT89+ECEZlZJU9B5Jf1O6iQlXIqTMlg+0PPzm/BOJbo5SN2HdzNp2YSo
lRry3xVmiioohkwfHshgAKNbqB1pSGHNsi2T/kbSupQIp9fxwuWzqH6pUhoaIe5d
xaefYpnCJdwZhtS1aO3rMuHt5W8z0zfhHSkkSGONQMDEVmJ9Pku1bW6Yyc7RnQ76
PQCc34n+eJCIMkaAE6thtVirnanktsRJY9OaV23FvAsoTka2fgydVkY0fVTQ/RXO
gjuL/NPv1UAgabtel1PtWiUnN1RLSM6YXrAGSx+yWOjEds1FhayK4DxXquUDHIi3
ErdqsZzWpKkcNw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:29 2025 by rpki-client