Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier: mlTVQMCBOtHwWdXoiwTaTEu+Qaaqm4AB6WeXSBe0ZIw=
Subject key identifier: 22:7B:41:16:FF:85:E0:7B:7B:19:2A:11:7D:14:2C:7F:E5:19:52:3E
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial: 01987B9D24D65CD3A371306DB234F5D83A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number: 1016
Signing time: Tue 05 Aug 2025 19:02:32 +0000
Manifest this update: Tue 05 Aug 2025 19:02:32 +0000
Manifest next update: Wed 06 Aug 2025 19:02:32 +0000
Files and hashes: 1: 5fcpJVl5DXDFgBV-5G0BOvh2tGg.roa (hash: urXegQalP46Ga7kO5s8Ojf4B2voXZNk4EbUTvjtFENw=)
2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: I9h5DTOFwzSBGgJGxXEROIJ+IDDUeSAKjcOHp6iZ4bA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:24:d6:5c:d3:a3:71:30:6d:b2:34:f5:d8:3a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Validity
Not Before: Aug 5 19:02:32 2025 GMT
Not After : Aug 6 19:02:32 2025 GMT
Subject: CN=227b4116ff85e07b7b192a117d142c7fe519523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:4c:79:2e:24:f4:c5:28:6e:0a:ee:91:83:
cc:f8:d1:3c:20:70:87:84:c9:29:26:91:54:fe:a6:
23:0c:eb:a9:62:ff:53:a6:d7:6a:13:37:22:1c:f9:
cf:06:f2:35:6b:d3:92:34:0f:50:c4:ca:05:ec:88:
7d:20:ca:d2:2f:e7:d2:e7:2f:a7:b5:72:66:df:f7:
6a:f3:33:41:de:35:ef:1e:4b:cb:8e:90:ea:3d:44:
f9:6c:fa:03:ea:95:7b:7c:67:26:9c:05:f5:53:0c:
9c:28:bf:f6:80:c0:9e:14:e1:40:47:b9:8d:2a:a0:
02:79:9c:e3:e7:a0:41:61:66:c0:97:dd:f2:67:bb:
5b:26:8c:2d:51:12:a4:4c:cb:2f:61:7a:6c:45:54:
b6:49:11:d9:a1:69:cf:02:58:8d:ff:af:db:a8:c5:
1f:08:b3:7a:89:6c:3b:c7:1d:8e:2d:58:89:81:c9:
1c:b2:74:9a:0c:b6:d3:72:8d:70:7e:49:32:92:47:
62:6b:6e:f8:a1:2e:a5:19:9c:33:cf:42:18:47:fe:
92:d7:42:86:80:05:e9:5a:b7:dc:30:56:d6:29:f2:
de:a5:28:71:32:fd:cf:c7:cf:94:e4:0d:95:df:7c:
f5:90:db:03:2b:e4:22:c5:e1:b2:20:38:df:67:81:
3c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:41:16:FF:85:E0:7B:7B:19:2A:11:7D:14:2C:7F:E5:19:52:3E
X509v3 Authority Key Identifier:
keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:50:b2:24:da:04:2b:f3:73:c9:a5:e1:01:5d:8d:48:18:7f:
61:de:36:de:6a:6c:5b:b0:07:6a:6f:d0:8a:15:92:92:8e:eb:
ee:f0:95:56:c0:f0:8d:36:97:cf:d5:f6:73:16:7f:15:74:31:
31:39:ef:b0:27:60:6b:94:ea:e3:0b:7c:71:b4:41:d4:9b:ea:
aa:f5:32:eb:e3:a5:83:5d:41:b2:92:a9:79:a9:4c:fa:42:58:
ea:cc:56:38:72:88:7a:8b:26:a6:a6:3a:0a:3b:39:cc:9c:c8:
d7:12:93:e5:17:0c:e0:44:97:9a:25:b1:b1:43:b4:e3:32:9d:
32:e5:1b:b9:c2:64:b9:7b:bc:3b:8d:09:86:be:c4:61:5b:16:
d2:3e:73:ab:4a:4b:0a:09:cf:d6:84:c5:94:cf:6c:63:1c:66:
f1:73:78:0b:2d:81:4e:c8:8a:da:34:c7:9c:35:fc:c6:cb:1c:
3b:30:fd:3f:df:69:d7:e1:09:f2:e5:92:be:08:c4:4c:91:69:
c7:b6:8e:e0:cf:d9:d0:f2:b1:56:9a:83:80:d6:0a:f9:ca:c1:
59:7c:a9:0d:96:e7:25:a0:fc:09:9a:aa:8c:2a:20:13:a3:bb:
fe:e8:89:85:c7:0e:44:aa:08:ba:e6:54:55:21:de:23:48:eb:
9f:1b:ab:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:24:43 2025 by rpki-client