Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
File: pzh53iWUz91MnkIlVWKBsgjZRhQ.mft (raw, json)
Hash identifier: Ha1i7LMUW01VjXx2lblkaZ5pICHDOy0dSB1d/7tcOiE=
Subject key identifier: 4E:A2:7D:BB:9F:BA:B3:FF:9D:D6:41:20:CF:34:AE:51:8D:0A:74:45
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Certificate issuer: /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial: 01988D34100901B5469BC8A73E3EF1F0AA07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
Manifest number: 08E0
Signing time: Sat 09 Aug 2025 05:00:55 +0000
Manifest this update: Sat 09 Aug 2025 05:00:55 +0000
Manifest next update: Sun 10 Aug 2025 05:00:55 +0000
Files and hashes: 1: jCdTYmvYMmAVCpwgaEf86kYug58.roa (hash: ztqwVKV63uIGzbrcGebHuh3wlQjH5xZyStSjcOzpGqU=)
2: pzh53iWUz91MnkIlVWKBsgjZRhQ.crl (hash: qEASVTvvK8mzJXTIG/i2w7Ok3vrDMcrm951e53xCYMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:34:10:09:01:b5:46:9b:c8:a7:3e:3e:f1:f0:aa:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
Validity
Not Before: Aug 9 05:00:55 2025 GMT
Not After : Aug 10 05:00:55 2025 GMT
Subject: CN=4ea27dbb9fbab3ff9dd64120cf34ae518d0a7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:fa:70:c0:70:3d:04:b5:43:a9:cf:0a:6c:
c8:0d:dd:bc:8a:4e:36:99:59:56:85:7f:b9:a6:59:
56:7a:40:d8:2e:ed:90:24:84:bc:d7:3a:2c:55:a3:
0c:fc:92:13:d3:50:50:5d:1f:3b:91:7c:b2:c7:4f:
18:d1:c0:b7:8b:f8:1b:ea:fe:63:b3:a7:7c:c1:18:
68:d8:75:2f:d2:d0:16:81:ae:6d:c0:78:67:94:22:
ee:ca:74:e7:78:87:5a:04:50:b2:83:49:8f:dd:fe:
a8:86:74:c4:66:05:aa:8e:e3:c9:ba:ce:cb:14:b9:
97:dd:fd:2e:4f:dc:b7:2d:a1:92:eb:2d:86:1e:e8:
22:52:2d:ac:bf:f4:2a:ae:29:05:e8:85:92:0b:45:
17:6a:bb:a4:cf:9e:db:3c:11:d3:f7:bf:7f:b0:66:
f6:3c:35:ea:f1:a5:bf:b3:57:b6:0e:c8:4b:f5:4f:
4d:63:af:55:d1:17:a4:6b:5b:ef:3f:b4:55:57:56:
b2:99:65:aa:b7:bd:85:f4:9f:ed:4b:46:3f:ad:dd:
bd:61:b6:4f:a1:03:d6:3f:3e:27:78:92:50:2f:29:
84:46:b6:00:a0:01:82:2c:b0:ee:d5:6f:6e:35:bd:
1e:75:8c:f1:18:1e:7d:ea:f5:38:fc:5d:df:60:78:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A2:7D:BB:9F:BA:B3:FF:9D:D6:41:20:CF:34:AE:51:8D:0A:74:45
X509v3 Authority Key Identifier:
keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7c:c7:4c:02:4f:08:28:56:0f:28:fa:cc:0a:5b:2e:5e:4c:
82:0a:d8:3d:a1:db:22:25:e0:b9:ce:26:53:9c:48:b4:ca:13:
8a:ce:c5:7a:1a:0f:1a:3a:d3:b1:16:8b:eb:1a:af:00:3c:2d:
fa:58:1c:f6:91:6c:2a:a1:a7:a3:5c:dc:f1:8b:87:5a:3e:af:
9b:71:71:b2:6b:25:71:cd:7a:89:2b:2c:4b:9d:e8:c5:a9:df:
b1:5f:40:23:a1:99:e8:49:a5:82:80:9a:cf:cf:36:d1:8a:3c:
c0:43:77:fc:78:09:be:31:20:d1:59:c7:b2:cf:53:53:99:6c:
09:54:1d:1b:2a:54:80:d0:5d:1b:4e:1b:2a:88:34:48:25:1d:
3c:7a:96:6e:c5:b9:05:e5:1c:0c:cf:89:8d:c5:af:fc:f0:0c:
84:91:5b:4b:b5:80:82:4d:52:8f:f1:9e:cb:da:64:99:66:ef:
3d:d6:54:ff:a3:77:9e:99:78:4c:7f:76:42:3f:b0:a1:a2:03:
75:49:4e:5e:17:01:76:ed:e7:cb:4a:b3:b7:63:af:ee:a8:e8:
c0:4c:f7:9c:d6:07:13:0a:05:67:9a:e4:40:00:9c:7d:b2:aa:
d8:a8:d6:1c:41:e1:dd:71:c7:1b:49:c6:7e:a3:b1:83:15:0d:
61:da:7e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:00 2025 by rpki-client