Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: /KVIJOoi6S5AlSVV4BvdUT317m5LORtzO2nwbIuNCjs=
Subject key identifier: 93:DC:B9:95:78:6B:2F:AC:C9:FF:AF:D6:98:1D:C2:D4:04:C3:3B:42
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 01976C61FBEADA41E629D36A0061EC6AE0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0AAB
Signing time: Sat 14 Jun 2025 03:00:50 +0000
Manifest this update: Sat 14 Jun 2025 03:00:50 +0000
Manifest next update: Sun 15 Jun 2025 03:00:50 +0000
Files and hashes: 1: 4HFAWmQXrJvJPwvQ-nacdREAjwA.roa (hash: smesMzM3abS3/IiONa1NHYIBIDWL+noqBcVPlJGz8P8=)
2: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: 9I34sGDqvwj5cLGzvlAXX+KUCdyYzvFgbUPXdZ0Zc1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:fb:ea:da:41:e6:29:d3:6a:00:61:ec:6a:e0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jun 14 03:00:50 2025 GMT
Not After : Jun 15 03:00:50 2025 GMT
Subject: CN=93dcb995786b2facc9ffafd6981dc2d404c33b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:93:16:bf:c1:58:59:e4:c6:cf:be:fe:da:
3e:34:28:b2:1c:a7:0e:1b:f0:9a:e2:fa:cb:21:9d:
e8:52:4f:91:3b:84:e9:08:5b:c6:8f:3e:90:76:86:
29:4b:13:45:b2:56:1d:9d:ed:78:94:c4:91:6c:9b:
fc:f5:d5:1c:c1:38:ae:74:e0:a8:78:aa:1d:d7:8e:
d6:a5:76:3e:9f:77:16:b9:58:82:33:6f:f4:bc:a2:
09:8d:fe:82:5d:a5:57:66:c4:aa:87:5c:c6:c5:5d:
0a:d7:73:58:ba:e0:2d:d7:3d:b6:d3:69:c6:dc:cc:
40:d8:3b:54:22:a0:42:78:ae:bf:52:d3:80:41:7a:
84:92:0f:83:01:3a:4e:8e:1e:b0:11:8d:3a:58:81:
5e:3f:4d:84:95:0f:44:2f:cf:44:08:20:97:e9:ae:
a1:37:73:bf:2a:03:1e:af:24:3a:00:13:88:02:db:
b8:4d:2c:bb:df:aa:63:15:7f:05:d5:39:6b:bf:a7:
9d:2f:e0:84:cc:1e:6e:d8:56:f8:82:00:55:f2:7e:
2c:a2:e2:4e:ab:2a:c5:b4:f9:9d:6a:5c:85:46:9f:
44:b8:0d:d1:50:61:8d:4f:3a:26:61:0c:90:99:02:
84:6d:dd:4f:56:9b:65:05:39:83:60:99:9e:77:1a:
14:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DC:B9:95:78:6B:2F:AC:C9:FF:AF:D6:98:1D:C2:D4:04:C3:3B:42
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:32:0b:0b:df:14:6a:08:a4:b6:96:86:2f:50:0d:73:d4:c7:
80:4b:8b:e6:c6:e3:bc:f2:23:58:70:7c:11:ee:be:3a:4a:0d:
94:70:27:92:12:bb:fe:9a:21:f8:a8:d2:9d:ec:0a:f7:ee:99:
9d:eb:3e:05:26:70:04:72:7c:50:08:de:e9:18:d9:3c:c7:eb:
fa:29:ad:b7:1d:ae:b1:64:5e:f3:55:63:8d:32:8a:de:66:67:
e2:23:da:de:78:bb:2e:3a:8f:c2:be:56:72:0b:37:00:0d:5a:
9c:1a:ee:04:9d:44:4c:12:8a:bb:02:84:c3:b4:09:df:cd:99:
c1:ff:17:bb:24:c1:f6:8a:e3:b3:6e:f5:92:37:de:a5:12:94:
2d:85:f4:13:50:8d:c8:94:35:30:75:27:34:22:cc:7e:05:7c:
b7:c5:5b:3b:f1:9f:5f:da:ff:af:4b:d7:6e:c5:e8:b3:0c:cb:
fe:2e:3a:03:94:c6:56:49:83:a9:28:e1:1d:c8:74:8d:27:4f:
b4:cd:54:47:b0:59:52:76:01:0e:01:03:f6:66:9a:65:7d:f9:
07:91:25:b8:fe:d1:00:ba:01:2c:30:53:f2:7c:bd:2f:e0:cb:
6c:81:f5:88:c8:59:23:d2:b8:02:8c:9a:63:5a:d1:f6:3c:c7:
c7:72:56:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:45 2025 by rpki-client