Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: zCfCEa+V9kbyTxurlIiXuRqrVy5Jt2NrWVJTbw4/+zg=
Subject key identifier: A1:41:61:49:79:10:84:49:9B:36:90:13:31:8E:13:6D:29:D1:50:6A
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019768BBCED035342425AC409CD0B512E5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 10:00:27 +0000
Manifest this update: Fri 13 Jun 2025 10:00:27 +0000
Manifest next update: Sat 14 Jun 2025 10:00:27 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: XPSPJxUkDRm6md2B3+6v3374At3c5CDUmI/DY/+pHtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ce:d0:35:34:24:25:ac:40:9c:d0:b5:12:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jun 13 10:00:27 2025 GMT
Not After : Jun 14 10:00:27 2025 GMT
Subject: CN=a1416149791084499b369013318e136d29d1506a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:72:c9:81:c1:93:f8:fb:ef:78:ae:6c:98:
c6:05:30:63:07:49:9d:14:5b:ed:1e:9a:2e:e9:8e:
a6:7d:99:b7:d6:2b:69:6d:2e:d0:67:3c:d5:dd:1e:
04:4d:c3:3a:4c:5b:43:1a:46:73:55:05:4e:87:c9:
3b:34:4e:82:67:82:07:7b:82:3f:7e:0d:b8:8d:de:
b2:15:0b:f7:5a:82:f4:f5:13:44:66:82:b8:6a:5b:
03:71:5d:c4:83:eb:81:3a:94:70:56:d1:82:9c:50:
1a:5d:10:2a:b8:20:f2:7d:2c:d5:0f:d2:6f:1d:16:
98:1f:74:f9:52:d0:cc:a8:8f:f8:89:84:dc:b9:e2:
f9:87:74:34:00:7f:77:47:28:2b:6b:06:f8:8b:b6:
e1:d1:aa:ee:aa:9c:15:26:92:a5:cd:c8:e4:7a:78:
a6:cc:97:86:bb:b0:3e:f2:3d:cd:91:b8:61:9c:47:
18:d7:3a:96:67:72:89:9d:21:a7:59:9c:ad:a1:fd:
9a:90:f6:62:8b:ff:8a:55:fb:b1:40:83:a2:31:99:
4b:b0:6c:c4:0b:0c:31:9b:bf:32:50:d2:09:d4:02:
91:71:4e:43:1a:b7:75:b4:0f:94:3e:dc:32:60:dd:
90:12:6e:2e:01:2c:01:71:18:2d:e4:d1:d0:cf:b0:
a0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:41:61:49:79:10:84:49:9B:36:90:13:31:8E:13:6D:29:D1:50:6A
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:15:6b:ba:5b:2e:2c:ea:0a:6a:d7:1e:dd:11:95:1d:c1:28:
60:df:02:db:df:e1:ea:34:41:bb:0d:ab:8f:56:47:22:7e:fc:
8c:5a:b3:b3:05:6c:42:74:db:c9:ff:31:85:80:33:51:55:f6:
0e:66:b8:37:13:17:13:43:27:bf:c1:21:53:bc:e7:47:75:05:
fa:23:68:34:c0:6b:64:2c:87:e5:69:da:3e:09:4a:13:db:29:
49:7e:99:9f:b2:fe:08:4a:8c:9d:66:95:fa:b1:2a:86:b5:1f:
04:ce:c7:8e:e5:fe:70:ec:2c:fa:b2:95:d8:fa:cf:31:5d:b5:
92:95:84:10:2e:48:3f:90:d4:22:54:47:d5:ae:95:44:8e:da:
12:4c:bb:45:9e:32:4d:64:e2:1c:d9:e1:6e:9b:72:5f:0e:3b:
d6:5e:c8:b7:35:b3:58:09:e6:26:24:30:fc:30:28:51:ad:e8:
ec:9f:3a:a7:b0:50:fa:88:14:69:22:5c:d7:06:88:ab:65:2b:
76:dc:d2:18:77:bb:bc:55:bb:88:fb:24:af:1b:92:14:2a:2f:
09:8d:04:53:2a:a8:5b:20:5a:68:e6:28:f6:a8:6d:1e:ed:88:
d4:ef:1e:30:66:58:af:53:f7:d4:19:63:43:89:e0:8e:5d:c9:
35:0c:f6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:00 2025 by rpki-client