Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier: LTkIboebAJOCZ/NWv6e7KnD1VeTxx0iaXJKJso9HxL0=
Subject key identifier: 2A:95:4C:2C:5B:AB:E7:14:86:CF:EB:58:1A:34:FA:88:17:BC:04:04
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial: 01976F2BF9B553BB27E681992CA307395780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number: 0F8B
Signing time: Sat 14 Jun 2025 16:00:42 +0000
Manifest this update: Sat 14 Jun 2025 16:00:42 +0000
Manifest next update: Sun 15 Jun 2025 16:00:42 +0000
Files and hashes: 1: 5fcpJVl5DXDFgBV-5G0BOvh2tGg.roa (hash: urXegQalP46Ga7kO5s8Ojf4B2voXZNk4EbUTvjtFENw=)
2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: Di2kfX6/LlKFCRviCcb8VqLL6XiFsXQSDvKTftmNF9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f9:b5:53:bb:27:e6:81:99:2c:a3:07:39:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Validity
Not Before: Jun 14 16:00:42 2025 GMT
Not After : Jun 15 16:00:42 2025 GMT
Subject: CN=2a954c2c5babe71486cfeb581a34fa8817bc0404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f0:03:f1:34:80:5f:0a:9e:aa:11:6a:3e:3e:
12:60:92:5b:cb:43:85:84:61:c3:aa:ca:d6:c8:2c:
14:ee:33:1a:db:97:ba:bd:df:f6:f4:85:5a:71:81:
fd:75:a4:14:fd:c7:49:fc:39:95:a5:17:31:df:a0:
31:7d:d8:72:b8:af:fa:1b:61:05:08:23:4f:a4:75:
53:33:47:be:1e:5e:f8:94:cc:c8:1f:a1:c2:72:bf:
ef:6e:23:e4:35:c4:75:d4:ed:76:7c:d4:54:cd:3f:
5a:bf:30:5f:67:bc:51:6c:95:00:38:d0:26:a2:90:
d1:4d:21:f3:a5:d1:ce:3f:ef:53:01:f5:ea:87:14:
39:36:bb:6b:d7:4b:01:a3:88:d3:e8:43:6c:bd:9c:
89:1f:78:c6:c2:a3:62:f7:b0:8b:f4:5a:84:d4:85:
f0:3f:87:3a:84:81:de:e7:9a:ea:94:30:5a:ba:fb:
e1:0f:24:21:fd:f2:75:4b:8a:39:21:b6:04:b9:6e:
92:eb:ec:0f:73:78:38:ee:7a:c4:fb:40:12:b5:c2:
b6:d2:a1:3e:26:77:ba:11:7d:09:ac:7f:b1:71:c3:
d9:8e:6b:12:9d:c5:4a:57:60:eb:63:bd:ff:44:20:
dd:9c:fc:37:43:6b:55:85:b2:2f:6b:a9:ba:33:31:
ce:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:95:4C:2C:5B:AB:E7:14:86:CF:EB:58:1A:34:FA:88:17:BC:04:04
X509v3 Authority Key Identifier:
keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8e:4d:9b:4b:19:8c:7c:39:cc:21:d4:01:eb:f5:1a:c6:4c:
47:21:b8:88:91:0e:18:16:40:a4:79:ff:3f:36:be:0f:67:3b:
71:d3:44:f6:e9:ce:37:71:e0:da:d5:3d:e4:a5:ee:a5:8d:cb:
12:a0:61:94:5b:39:fd:37:e2:a6:ea:3e:9a:28:69:5b:e8:9d:
65:22:83:5f:bd:8f:cf:33:ff:5c:95:01:57:83:ec:8a:96:4a:
92:75:88:e5:ea:a0:ff:d3:03:ca:da:aa:45:bb:2e:f3:ed:37:
16:64:51:44:e8:00:ee:66:9b:7f:7f:de:6d:26:fc:e2:6e:4c:
95:8e:19:1d:43:ab:5a:47:41:19:1b:45:c8:75:1a:8e:37:75:
31:ee:1f:8f:21:00:d3:88:ec:81:0c:c7:63:9c:69:01:90:5a:
c3:6c:47:9f:2d:a5:91:cc:3e:c1:07:6d:40:44:2e:8d:63:72:
44:2f:f0:9f:a7:a0:a0:f9:42:92:a0:f9:b0:a5:68:94:6b:5d:
2d:c4:ae:96:59:26:3f:cd:67:41:71:3d:d7:d7:0f:ba:9e:b8:
e8:94:72:af:40:25:36:d0:41:35:c7:e1:ad:3e:30:40:95:28:
6b:19:9c:b0:99:bb:50:03:42:10:7d:86:c2:30:4e:e4:3d:fe:
3a:dc:d2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:04:14 2025 by rpki-client