Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: +doHJgHbN5ac4gpk+jaBv70pzIdVoj4H/QaWXrAR/mY=
Subject key identifier: 93:C1:EB:57:69:19:E4:54:10:11:50:44:6B:70:05:DD:CA:9A:9B:29
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0196711D3B55655EF9CA7529129DD6AC5EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 10C2
Signing time: Sat 26 Apr 2025 08:01:03 +0000
Manifest this update: Sat 26 Apr 2025 08:01:03 +0000
Manifest next update: Sun 27 Apr 2025 08:01:03 +0000
Files and hashes: 1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: GXf6uTrUz7M0WuUgPYBw2vnV14SzNnDp37j7MjZ8yd8=)
2: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
3: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:1d:3b:55:65:5e:f9:ca:75:29:12:9d:d6:ac:5e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Apr 26 08:01:03 2025 GMT
Not After : Apr 27 08:01:03 2025 GMT
Subject: CN=93c1eb576919e454101150446b7005ddca9a9b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:ec:fd:02:70:37:f6:4c:94:46:e4:2d:7b:
83:d2:67:26:55:3d:98:1d:f0:21:74:44:7e:28:47:
41:5c:76:9d:11:72:09:7e:82:a9:c1:a7:ca:ec:01:
5a:04:f2:e0:5c:56:49:45:84:b2:16:5d:7e:d8:3b:
18:26:11:ea:44:ba:ac:9b:82:0a:0e:2d:31:a8:d8:
87:10:0f:5d:32:be:84:38:66:b5:e8:d2:ff:30:69:
44:9e:37:95:82:08:ce:4e:0c:67:9e:23:8e:04:e3:
a7:89:ac:eb:2c:f2:7f:da:ea:17:5a:ea:09:e2:be:
11:c0:ec:cf:a4:cd:e8:32:bf:86:82:28:cb:c9:98:
35:cd:89:86:90:2a:0a:6d:b3:19:c2:35:72:b0:d8:
0f:db:90:64:d2:05:8b:14:96:11:73:53:80:27:e6:
85:e1:1b:9a:21:f2:be:67:1a:1c:51:fc:48:62:81:
18:4c:94:d3:9f:00:8b:1d:02:39:07:b9:72:d5:11:
f7:8c:b0:9a:36:e9:23:ab:34:86:0d:fc:59:f3:45:
8c:65:11:89:0f:07:4d:ed:57:6e:4a:14:36:fb:59:
e1:68:11:50:8f:1e:b5:4c:a0:7c:65:01:dc:3c:8e:
01:c5:d5:f3:6d:4e:2e:64:b3:5f:78:6e:c2:eb:79:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C1:EB:57:69:19:E4:54:10:11:50:44:6B:70:05:DD:CA:9A:9B:29
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:09:4f:5d:c8:4e:1e:ac:69:3c:1b:da:a2:88:d1:aa:75:77:
14:9a:60:3b:f5:1d:22:4a:c2:9c:58:8b:75:bd:b9:4a:c6:c9:
8b:2f:9e:1f:c4:22:7a:23:bb:b0:27:f5:89:16:a3:df:d0:e0:
11:09:0f:b5:6b:a6:b3:cf:8c:d1:04:aa:68:23:ee:07:a8:fe:
da:e6:5d:8a:55:17:c5:cc:29:5d:4f:bf:6d:52:0b:11:e0:ba:
52:58:05:ec:e7:e7:c5:28:7b:a7:da:1c:a0:33:00:d7:32:9b:
36:cc:fa:e0:50:64:79:cc:81:4c:1b:c1:69:46:97:44:0b:39:
ce:66:0d:d1:55:44:7d:7a:ed:74:43:30:2a:cc:ba:4e:03:38:
76:ca:18:81:4e:07:61:5b:0b:95:85:f6:65:2f:7d:1e:b9:7c:
b0:25:88:4a:e8:e5:3c:28:f8:49:18:28:df:b5:94:65:ca:a2:
69:a2:e3:d6:9f:42:2c:c5:90:c3:7f:fb:9a:9e:71:71:ec:f1:
25:b7:4e:07:0e:f3:3f:c4:39:3a:e9:e8:a3:36:4d:bf:f3:72:
b7:59:b6:84:98:e9:7c:7c:44:da:d9:09:16:3f:c0:4d:e2:2d:
0b:52:69:c5:6f:76:56:05:6e:12:4e:ca:c5:57:7f:1b:9a:fd:
23:79:c6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZxHTtVZV75ynUpEp3WrF7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1
YTkxMmYwHhcNMjUwNDI2MDgwMTAzWhcNMjUwNDI3MDgwMTAzWjAzMTEwLwYDVQQD
Eyg5M2MxZWI1NzY5MTllNDU0MTAxMTUwNDQ2YjcwMDVkZGNhOWE5YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpXs/QJwN/ZMlEbkLXuD0mcmVT2Y
HfAhdER+KEdBXHadEXIJfoKpwafK7AFaBPLgXFZJRYSyFl1+2DsYJhHqRLqsm4IK
Di0xqNiHEA9dMr6EOGa16NL/MGlEnjeVggjOTgxnniOOBOOniazrLPJ/2uoXWuoJ
4r4RwOzPpM3oMr+GgijLyZg1zYmGkCoKbbMZwjVysNgP25Bk0gWLFJYRc1OAJ+aF
4RuaIfK+ZxocUfxIYoEYTJTTnwCLHQI5B7ly1RH3jLCaNukjqzSGDfxZ80WMZRGJ
DwdN7VduShQ2+1nhaBFQjx61TKB8ZQHcPI4BxdXzbU4uZLNfeG7C63mVjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPB61dpGeRUEBFQRGtwBd3KmpspMB8GA1UdIwQY
MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt
YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi
LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAlPXchO
HqxpPBvaoojRqnV3FJpgO/UdIkrCnFiLdb25SsbJiy+eH8QieiO7sCf1iRaj39Dg
EQkPtWums8+M0QSqaCPuB6j+2uZdilUXxcwpXU+/bVILEeC6UlgF7OfnxSh7p9oc
oDMA1zKbNsz64FBkecyBTBvBaUaXRAs5zmYN0VVEfXrtdEMwKsy6TgM4dsoYgU4H
YVsLlYX2ZS99Hrl8sCWISujlPCj4SRgo37WUZcqiaaLj1p9CLMWQw3/7mp5xcezx
JbdOBw7zP8Q5OunoozZNv/Nyt1m2hJjpfHxE2tkJFj/ATeItC1JpxW92VgVuEk7K
xVd/G5r9I3nGTg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:12:49 2025 by rpki-client