Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: 4A+AmpZQcS0PN+0Mbmt6c6WwgOZ/gHMqyHLo/Ak9lh0=
Subject key identifier: 76:D3:53:A3:07:27:37:7B:82:61:2D:DC:69:A3:1C:A7:9C:71:A6:E5
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 019768BC5AE5A18E04233B9AE9A66C7AF5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 1143
Signing time: Fri 13 Jun 2025 10:01:03 +0000
Manifest this update: Fri 13 Jun 2025 10:01:03 +0000
Manifest next update: Sat 14 Jun 2025 10:01:03 +0000
Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=)
2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: SpCVgKmKbb4DhwYj0rov9xkCtpj048Au75vUVX0d8NM=)
3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:5a:e5:a1:8e:04:23:3b:9a:e9:a6:6c:7a:f5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Jun 13 10:01:03 2025 GMT
Not After : Jun 14 10:01:03 2025 GMT
Subject: CN=76d353a30727377b82612ddc69a31ca79c71a6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:3d:b5:a0:a0:11:30:c7:15:9e:39:cb:ab:
fb:5f:20:56:1e:bc:26:80:11:b8:e0:eb:52:c2:1a:
fb:f8:a0:31:5e:f7:8e:31:53:73:d6:77:c2:86:c4:
19:a0:75:b7:bd:56:7e:7d:d5:98:bd:75:26:ed:26:
2a:c7:3a:5f:8a:01:84:52:7b:a1:b6:92:c1:f7:38:
24:8e:4a:a7:f7:1b:be:6b:33:d8:6a:c5:9d:84:19:
77:9e:dd:18:f8:83:45:a3:a8:c5:5b:a7:54:9b:7a:
08:be:9b:4e:eb:96:40:64:ec:75:2f:cf:2e:b2:54:
04:6f:67:a6:8a:e2:b8:57:c7:3f:d3:8e:9a:d9:e3:
9f:dd:41:a6:b9:84:8b:ab:09:ac:6e:d4:af:c3:fa:
bc:b6:88:9f:f5:67:7a:ef:ca:f5:65:07:49:04:4c:
2b:3a:aa:ec:82:94:cb:57:8f:88:16:33:67:93:d6:
5d:56:1f:6b:a9:5d:38:6d:f9:69:91:62:e1:ed:b7:
ab:2c:07:69:6b:ce:d6:44:e7:dc:28:fd:eb:15:cf:
bf:76:ef:9b:8c:0a:49:8a:91:e5:f7:31:24:27:87:
b8:cb:5e:e2:70:23:99:64:37:0c:9f:4c:29:59:57:
9f:01:ec:15:11:78:19:85:c1:99:45:ae:64:30:86:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D3:53:A3:07:27:37:7B:82:61:2D:DC:69:A3:1C:A7:9C:71:A6:E5
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:64:7b:3a:92:31:7e:32:2f:b1:d8:da:6e:ef:01:cf:b4:
71:b1:ce:46:bf:14:93:e7:63:2b:88:64:d7:f2:6f:37:dc:81:
00:4e:ad:f1:76:b2:73:45:6d:23:03:e8:78:b3:5f:27:8f:98:
32:23:f0:bb:1c:9f:88:1e:fd:e5:3a:ed:6b:93:12:15:6f:d8:
9b:3d:7f:cd:65:ab:7f:95:83:77:27:7d:98:6d:12:f2:86:16:
f2:9f:eb:c9:20:70:0c:83:5e:7b:c9:af:44:b3:d1:b0:19:8d:
ed:bd:94:c6:84:9f:5d:5b:b6:c8:05:5b:bb:d8:fc:c2:fc:e9:
af:19:24:e1:3b:bf:b1:ea:26:c5:55:07:0c:8e:00:8d:aa:8d:
b6:dd:b5:0a:27:81:3d:58:7b:e4:39:81:0d:a6:35:e5:c7:c8:
96:52:ff:e5:6f:47:50:4b:79:89:d8:5d:e8:b2:0d:0a:37:6f:
b2:7d:5e:3d:f8:dc:0f:3b:4b:95:90:cb:7f:2c:2e:2a:b6:69:
47:50:09:08:ae:c1:8d:3b:1a:44:9b:f5:95:1b:a2:c7:5f:d5:
a2:41:ad:3d:b2:ac:eb:9f:12:7d:a7:7d:0e:e7:99:b6:54:a9:
b8:a5:7f:45:0e:6f:fc:6b:07:58:c4:fa:9f:e0:3e:43:26:08:
21:5e:36:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovFrloY4EIzua6aZsevXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1
YTkxMmYwHhcNMjUwNjEzMTAwMTAzWhcNMjUwNjE0MTAwMTAzWjAzMTEwLwYDVQQD
Eyg3NmQzNTNhMzA3MjczNzdiODI2MTJkZGM2OWEzMWNhNzljNzFhNmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG89taCgETDHFZ45y6v7XyBWHrwm
gBG44OtSwhr7+KAxXveOMVNz1nfChsQZoHW3vVZ+fdWYvXUm7SYqxzpfigGEUnuh
tpLB9zgkjkqn9xu+azPYasWdhBl3nt0Y+INFo6jFW6dUm3oIvptO65ZAZOx1L88u
slQEb2emiuK4V8c/046a2eOf3UGmuYSLqwmsbtSvw/q8toif9Wd678r1ZQdJBEwr
OqrsgpTLV4+IFjNnk9ZdVh9rqV04bflpkWLh7berLAdpa87WROfcKP3rFc+/du+b
jApJipHl9zEkJ4e4y17icCOZZDcMn0wpWVefAewVEXgZhcGZRa5kMIb8cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbTU6MHJzd7gmEt3GmjHKeccablMB8GA1UdIwQY
MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt
YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi
LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHFpkezqS
MX4yL7HY2m7vAc+0cbHORr8Uk+djK4hk1/JvN9yBAE6t8Xayc0VtIwPoeLNfJ4+Y
MiPwuxyfiB795Trta5MSFW/Ymz1/zWWrf5WDdyd9mG0S8oYW8p/rySBwDINee8mv
RLPRsBmN7b2UxoSfXVu2yAVbu9j8wvzprxkk4Tu/seomxVUHDI4AjaqNtt21CieB
PVh75DmBDaY15cfIllL/5W9HUEt5idhd6LINCjdvsn1ePfjcDztLlZDLfywuKrZp
R1AJCK7BjTsaRJv1lRuix1/VokGtPbKs658Sfad9DueZtlSpuKV/RQ5v/GsHWMT6
n+A+QyYIIV42hg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:43:29 2025 by rpki-client