Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: OAE2XYM/1PIIvvsefJiDji2q66Fu1My97fuCT++k5F8=
Subject key identifier: 2E:BE:B3:CF:34:4B:AA:82:0D:5F:64:62:0B:A3:1E:BB:12:0D:95:5B
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0198868D4226A9492A049DC213D32FFF6FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 11D7
Signing time: Thu 07 Aug 2025 22:01:01 +0000
Manifest this update: Thu 07 Aug 2025 22:01:01 +0000
Manifest next update: Fri 08 Aug 2025 22:01:01 +0000
Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=)
2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: OC+iV+lgTkqdXK31Jd4oEDRYM5UMhxzc9Yd7S3Z2Hjo=)
3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:42:26:a9:49:2a:04:9d:c2:13:d3:2f:ff:6f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Aug 7 22:01:01 2025 GMT
Not After : Aug 8 22:01:01 2025 GMT
Subject: CN=2ebeb3cf344baa820d5f64620ba31ebb120d955b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d9:0e:76:33:c4:90:50:93:46:b7:ea:3b:09:
0e:4f:98:e2:f5:f0:2c:9b:85:e7:45:9f:76:5a:ca:
a4:a2:4d:2f:e8:f9:ea:0d:9e:9d:7c:7a:a2:16:6a:
9d:ee:d3:fe:5c:35:dc:81:ab:07:20:b0:e9:c2:7b:
4b:21:77:b9:c1:82:f8:af:b1:91:3b:2a:4e:7b:58:
d1:cb:bc:f6:bc:4e:cf:cb:57:9f:5f:3f:41:de:08:
37:be:7f:db:7c:c8:3e:ee:c7:12:a1:11:f3:1c:12:
c1:ae:15:13:33:36:7a:96:f5:ff:63:76:8a:80:4f:
4e:47:c7:42:6f:db:04:40:a5:31:c5:9f:60:3a:d0:
0d:37:ea:38:bb:8c:f3:33:18:5c:e9:d9:a2:cd:c8:
f8:8c:09:54:cb:d0:b6:1a:3e:43:9c:ca:0d:36:87:
5d:a3:e5:7b:23:50:08:b5:68:12:14:df:69:cf:12:
5a:d2:43:d0:d3:30:27:ee:4a:6e:2d:44:73:96:14:
fe:46:ad:6f:47:a4:bc:17:51:7a:3a:08:cc:da:57:
a9:c8:42:3f:1d:50:19:21:1b:51:68:37:23:9f:7a:
c9:8a:5c:7a:7a:df:2e:9d:07:ad:bb:e9:23:4a:81:
f7:84:94:b8:b2:1e:00:00:1d:06:13:67:29:17:df:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:B3:CF:34:4B:AA:82:0D:5F:64:62:0B:A3:1E:BB:12:0D:95:5B
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ee:22:e4:71:3e:cc:c4:6d:b2:10:5f:36:8f:36:1f:c9:e1:
60:d1:da:c3:ef:7e:11:fb:ab:89:06:eb:89:e5:2a:46:dc:d7:
05:6a:50:5f:81:da:19:71:00:24:81:f1:85:86:db:31:85:e8:
23:53:75:78:e7:c8:93:c7:a1:83:e9:29:71:43:75:43:6c:7f:
45:94:01:03:8b:85:7e:e9:97:d5:de:ea:42:01:de:c3:c3:c2:
f7:da:9b:e8:82:bb:10:74:52:b2:bc:95:77:ad:2d:13:63:5c:
35:2b:82:fd:28:01:af:9d:fb:7a:5c:a1:ea:6d:2c:c6:d2:de:
f1:74:a0:19:c5:b0:41:b7:37:fd:4a:96:20:12:d4:28:11:f8:
9e:6a:0e:4a:a0:2a:da:bc:54:fe:4f:2a:b7:c0:bc:83:aa:d3:
7b:e7:06:9a:0d:d5:10:b4:5e:1a:23:3d:b9:34:26:cd:1a:2e:
5c:da:d4:8e:4e:13:52:48:a2:f1:d3:2c:36:b1:e8:c3:9b:00:
77:20:b6:3f:99:7f:ff:36:79:24:cb:88:51:05:1a:ed:61:22:
24:9b:ee:6d:8a:13:c6:e8:87:b2:78:10:4b:9f:3f:b6:97:f9:
c9:e7:97:59:ed:04:86:9b:f1:33:b0:04:fb:b1:8e:8f:81:15:
a2:2f:2f:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGjUImqUkqBJ3CE9Mv/2/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1
YTkxMmYwHhcNMjUwODA3MjIwMTAxWhcNMjUwODA4MjIwMTAxWjAzMTEwLwYDVQQD
EygyZWJlYjNjZjM0NGJhYTgyMGQ1ZjY0NjIwYmEzMWViYjEyMGQ5NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tkOdjPEkFCTRrfqOwkOT5ji9fAs
m4XnRZ92Wsqkok0v6PnqDZ6dfHqiFmqd7tP+XDXcgasHILDpwntLIXe5wYL4r7GR
OypOe1jRy7z2vE7Py1efXz9B3gg3vn/bfMg+7scSoRHzHBLBrhUTMzZ6lvX/Y3aK
gE9OR8dCb9sEQKUxxZ9gOtANN+o4u4zzMxhc6dmizcj4jAlUy9C2Gj5DnMoNNodd
o+V7I1AItWgSFN9pzxJa0kPQ0zAn7kpuLURzlhT+Rq1vR6S8F1F6OgjM2lepyEI/
HVAZIRtRaDcjn3rJilx6et8unQetu+kjSoH3hJS4sh4AAB0GE2cpF9/36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6+s880S6qCDV9kYgujHrsSDZVbMB8GA1UdIwQY
MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt
YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi
LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAke4i5HE+
zMRtshBfNo82H8nhYNHaw+9+EfuriQbrieUqRtzXBWpQX4HaGXEAJIHxhYbbMYXo
I1N1eOfIk8ehg+kpcUN1Q2x/RZQBA4uFfumX1d7qQgHew8PC99qb6IK7EHRSsryV
d60tE2NcNSuC/SgBr537elyh6m0sxtLe8XSgGcWwQbc3/UqWIBLUKBH4nmoOSqAq
2rxU/k8qt8C8g6rTe+cGmg3VELReGiM9uTQmzRouXNrUjk4TUkii8dMsNrHow5sA
dyC2P5l//zZ5JMuIUQUa7WEiJJvubYoTxuiHsngQS58/tpf5yeeXWe0EhpvxM7AE
+7GOj4EVoi8vsw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:51 2025 by rpki-client