Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: 5xM+rCrPMc7S6tdoPuEUX3fv08Gw7HDrKBvecTLO+24=
Subject key identifier: 22:11:2D:58:7A:B3:8A:17:AB:91:B0:76:D3:1A:F6:F3:B2:A2:B4:74
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 0198A04DD8283103C2148104249BF0EBBD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0F1D
Signing time: Tue 12 Aug 2025 22:01:52 +0000
Manifest this update: Tue 12 Aug 2025 22:01:52 +0000
Manifest next update: Wed 13 Aug 2025 22:01:52 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: Wtqham8EaxWvLu2TxXeNCs//AB8ehLoH+cQNQvroxaU=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:d8:28:31:03:c2:14:81:04:24:9b:f0:eb:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Aug 12 22:01:52 2025 GMT
Not After : Aug 13 22:01:52 2025 GMT
Subject: CN=22112d587ab38a17ab91b076d31af6f3b2a2b474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:b1:1f:9a:e2:65:bf:2f:34:5d:6c:da:20:
f1:9c:97:c4:da:57:e5:37:36:2c:2c:0f:25:c9:9a:
9a:b6:ce:66:c5:b1:d0:56:8a:bc:40:eb:f5:6e:25:
7e:30:ae:8b:e4:6b:cf:23:f1:41:0b:ad:98:0e:96:
a8:f6:d3:74:7e:e0:19:b1:e4:6b:68:30:2c:54:bd:
f0:4b:ec:81:3b:cd:2e:a7:8d:93:55:88:dc:59:6a:
2f:37:e4:1d:c4:a9:03:ad:f1:5c:d7:25:75:c7:a8:
92:bd:61:fe:43:94:22:be:24:95:c5:30:01:e9:2b:
ca:b2:0e:63:23:af:34:40:3c:ec:62:64:2d:e1:bb:
0f:f5:0d:06:45:76:3b:eb:03:05:3a:49:1f:c2:6b:
60:51:10:15:cf:9f:cf:2f:5a:38:0f:f5:eb:a1:e7:
24:87:20:b3:08:db:a6:1f:a1:ec:5c:4d:5b:3d:b1:
3e:dd:3f:37:88:fc:aa:6b:58:86:72:15:18:88:78:
2f:26:a2:bc:a6:47:05:35:84:59:8d:44:85:dd:7e:
e4:d4:1d:9a:62:b1:59:bc:d8:78:27:e9:ce:5b:e8:
9d:a6:9f:52:4c:b3:cd:84:80:cd:e9:e5:57:db:65:
c3:5f:8c:5a:64:0b:18:80:30:78:58:50:8f:6a:21:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:11:2D:58:7A:B3:8A:17:AB:91:B0:76:D3:1A:F6:F3:B2:A2:B4:74
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fb:97:32:f1:81:0b:a6:93:b7:2a:fb:47:b0:f9:c1:dc:b3:
5a:8a:f4:50:51:bc:63:27:55:39:c4:11:0f:7d:da:8d:91:12:
45:ad:81:ab:bf:c4:df:d9:91:ee:54:e9:4f:23:ca:05:cd:4f:
84:4f:a2:d9:6e:1d:5b:76:61:2d:95:15:1f:e9:3a:ca:9c:76:
b2:ba:69:9e:ff:8f:60:58:79:a5:63:14:b7:3d:33:ae:d5:d0:
10:91:7a:0e:74:65:ba:90:9a:ac:97:66:8c:40:0e:28:ec:fc:
fd:e9:03:6d:40:a2:cf:61:36:5d:15:00:a5:46:9e:18:5a:dd:
af:a0:07:5b:39:e4:49:0f:1d:ab:59:52:74:39:56:60:0f:d6:
57:4d:cd:62:08:fc:7a:08:22:98:d6:51:1c:db:8b:d8:3e:fb:
0d:27:02:c3:41:14:d1:27:d0:dc:f7:a6:6c:00:5b:64:10:38:
a6:ec:8a:88:74:bc:08:3b:50:98:dc:49:f1:9e:de:72:e0:ea:
cd:96:98:ad:0c:e1:86:19:f9:b4:f3:83:9a:63:d8:53:58:cd:
42:a5:16:b0:6a:e3:d6:35:dd:12:bc:c8:00:b2:42:f3:f6:5a:
63:f0:46:6e:7d:c7:37:62:ad:7b:7d:1d:89:40:9c:e0:61:5b:
0e:9e:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:41 2025 by rpki-client