Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
File: pzh53iWUz91MnkIlVWKBsgjZRhQ.mft (raw, json)
Hash identifier: LYPVpJk6sm5iDUjpRqN7HfTFnHSx6W3Y4KM9QtHivj4=
Subject key identifier: FA:01:57:24:A9:CA:5C:F7:C0:95:A0:1B:58:27:27:65:53:A3:48:68
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Certificate issuer: /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial: 01976D7483AFE7A55D95AA38F17796FA97E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
Manifest number: 084B
Signing time: Sat 14 Jun 2025 08:00:41 +0000
Manifest this update: Sat 14 Jun 2025 08:00:41 +0000
Manifest next update: Sun 15 Jun 2025 08:00:41 +0000
Files and hashes: 1: jCdTYmvYMmAVCpwgaEf86kYug58.roa (hash: ztqwVKV63uIGzbrcGebHuh3wlQjH5xZyStSjcOzpGqU=)
2: pzh53iWUz91MnkIlVWKBsgjZRhQ.crl (hash: 8HmTzbv1/tWMwofY6YiDpZ7M3C7ePoTKF2KcgB47p/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:83:af:e7:a5:5d:95:aa:38:f1:77:96:fa:97:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
Validity
Not Before: Jun 14 08:00:41 2025 GMT
Not After : Jun 15 08:00:41 2025 GMT
Subject: CN=fa015724a9ca5cf7c095a01b5827276553a34868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:5a:45:c3:f1:e4:4a:19:73:95:03:32:8f:
08:c4:bb:d8:d9:d3:72:c1:9b:91:21:75:ed:f1:da:
be:89:d4:c3:6a:96:b5:3d:08:d3:15:bf:f2:49:9c:
0c:9b:fb:d5:ed:ab:54:ef:8b:0e:48:c2:26:49:a9:
e0:54:b2:f2:cc:fa:62:8b:ba:bd:d6:c7:5f:70:2b:
99:c5:58:19:e1:61:53:d0:40:e5:75:c3:83:07:ca:
74:26:d6:d9:1e:b7:ce:83:64:2f:57:a0:eb:a6:8e:
26:6d:d6:d0:d7:a4:bd:b6:9b:e0:46:27:07:9f:48:
c1:6e:08:1c:58:4c:c9:13:87:35:13:de:ce:3f:77:
c3:f7:58:82:ee:b3:99:43:bc:64:86:81:e8:f9:2d:
a2:6e:54:15:0b:5b:23:38:0c:79:d7:25:76:e5:3e:
f0:3e:ae:e7:88:53:9d:70:a8:4e:1a:28:6b:bd:02:
72:02:ad:64:96:41:72:fd:08:77:40:35:43:a7:8c:
de:e2:2d:5d:76:a8:84:4e:81:43:fc:ea:0f:cc:d5:
7a:57:f0:10:08:4d:8f:ca:35:1d:31:37:75:4d:b7:
40:50:95:d6:a1:0f:2a:5c:62:37:82:d6:49:c7:43:
72:da:4b:04:15:30:f6:23:61:3e:41:40:1b:c0:57:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:01:57:24:A9:CA:5C:F7:C0:95:A0:1B:58:27:27:65:53:A3:48:68
X509v3 Authority Key Identifier:
keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:24:b5:cc:48:29:06:fe:8f:ed:5e:6c:62:bf:62:f6:e6:a1:
14:80:d8:4f:dd:5b:f7:eb:ca:b5:5b:4c:d6:35:b1:83:05:c9:
49:52:98:a7:49:f3:57:d7:0a:d2:b2:34:0a:15:f6:65:a9:dd:
ac:f0:ba:ad:c9:63:4e:6a:0b:14:27:6e:2e:d8:21:e7:6f:e9:
d9:02:c6:ab:73:44:99:30:d9:ba:e4:6c:1e:a2:fb:80:54:52:
e2:d0:fc:9d:bc:5c:75:8d:66:c7:86:c6:e5:4d:2e:43:20:7e:
14:5b:1d:81:d6:6e:b8:f6:97:a3:bb:28:e4:8a:c1:73:7d:4d:
1b:a4:50:44:f5:13:b3:b7:a0:e9:cb:f2:ac:13:62:c6:67:e9:
41:d1:a3:b7:a9:74:74:ea:6b:d2:ee:5b:f4:db:1b:62:75:2f:
24:ef:9d:2e:4f:96:03:37:f6:cb:b2:fc:3b:4c:d1:dc:d4:21:
98:7d:8b:43:de:97:5a:70:f6:23:0b:f5:51:08:0a:05:8e:3c:
78:ea:b8:ad:9e:02:eb:b9:20:47:f0:91:92:8a:d3:cb:35:b0:
49:21:80:10:06:4b:8b:66:2a:6d:4e:90:b5:32:0b:01:12:f7:
5e:06:ca:aa:de:39:8c:40:d9:bd:b1:7d:d9:3d:0e:0b:fa:d6:
8c:bd:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:47:43 2025 by rpki-client