Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: PT81RIpXBt9JbySIYA8MY6Y1DPM4rFPp3skHEX5AFXQ=
Subject key identifier: DA:46:42:49:8A:FE:65:9C:32:1C:A8:C1:4E:CE:A8:D3:8A:AA:CF:3D
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 01989411A29F58D57DA000CAABA64B2541E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 13:00:40 +0000
Manifest this update: Sun 10 Aug 2025 13:00:40 +0000
Manifest next update: Mon 11 Aug 2025 13:00:40 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: xr0IAU4GsrKJmL9vpPjt9EXRbrS3NQqhzq1LwG9yKhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:a2:9f:58:d5:7d:a0:00:ca:ab:a6:4b:25:41:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Aug 10 13:00:40 2025 GMT
Not After : Aug 11 13:00:40 2025 GMT
Subject: CN=da4642498afe659c321ca8c14ecea8d38aaacf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:ea:44:3d:de:ce:b2:42:e2:ee:85:33:52:
1a:e5:00:d6:f7:2d:e8:fa:90:0f:5b:b1:5a:d9:21:
71:72:16:94:41:78:99:54:ad:db:66:59:45:80:5e:
e0:f0:d0:ba:aa:64:fa:71:e4:df:87:19:18:11:9b:
4b:11:6f:08:99:72:c0:a3:c7:bb:6b:5d:1f:5a:05:
45:95:2f:1f:1a:f3:48:f2:7a:0c:43:d1:d0:1a:d5:
50:3a:20:8a:a2:a9:52:c9:76:b8:71:4b:cd:6b:e5:
86:6a:1a:14:3c:15:8a:83:f9:c6:2b:80:3e:ce:8e:
a4:6f:0f:4a:1d:f6:e4:fd:a0:32:1c:16:8a:95:b1:
a6:f2:bd:e5:45:1b:7b:4d:6d:4a:2f:72:ec:91:b4:
17:68:07:86:17:d9:ea:e8:fe:9d:4a:f3:5e:4d:9c:
63:a2:a4:94:8e:20:a4:ab:46:29:b9:6e:18:fc:c4:
b9:81:67:4f:59:60:d8:67:41:57:1c:1b:16:b3:9b:
52:97:48:fd:86:e6:0d:e0:9d:08:ef:c6:fb:54:5a:
aa:51:b0:81:76:df:c5:05:d5:a1:86:ee:95:b0:ab:
e1:b7:ff:40:e2:e7:d4:05:f9:d3:2a:60:10:bd:74:
66:35:09:8f:b3:c3:a7:23:e2:72:fe:9b:d6:85:52:
6d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:46:42:49:8A:FE:65:9C:32:1C:A8:C1:4E:CE:A8:D3:8A:AA:CF:3D
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:44:3f:c2:b9:c2:24:0b:e7:5c:42:ae:aa:dd:40:17:ee:db:
cd:c7:b1:03:f8:4f:3d:31:c6:e0:48:4e:0e:71:5a:7e:fb:b1:
34:5d:d7:54:aa:5f:d7:ad:dc:0c:b8:f1:92:d1:a2:c7:29:f7:
04:81:cd:34:c7:a3:b5:cd:70:52:6d:fc:cc:09:80:5a:1e:d1:
cc:b2:2b:04:56:1f:ee:bc:7b:a4:bb:6b:d9:ce:13:5a:ca:ac:
31:43:7c:e9:bb:e2:ef:22:ae:ba:d9:aa:1d:c4:5a:58:d1:2b:
f4:07:22:2e:e0:61:36:b4:5f:10:d8:03:94:2b:bb:db:1a:47:
e2:1b:63:ee:9b:21:3b:44:b0:55:4c:af:af:47:6b:98:13:3b:
ae:89:32:18:a8:0f:2f:13:32:67:d4:8b:27:14:89:6a:eb:f4:
d1:4b:e2:ae:62:06:b5:46:4d:8c:2a:39:25:58:70:3f:59:d3:
4f:91:71:78:59:cd:9c:64:7f:8d:88:cb:e3:00:e5:cf:22:7a:
18:7f:4f:4d:87:0f:3e:26:57:b8:ad:07:9d:bb:91:5d:a4:9d:
9c:eb:20:81:2d:a8:8c:d5:f6:17:57:53:57:96:ae:31:00:e5:
0a:f6:3f:bc:17:08:87:3b:f3:5a:2a:46:e4:0a:88:f4:b1:25:
33:20:45:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:38 2025 by rpki-client