Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: d9fPydhTR9E5bdYaffdjG5IytDQ0zHhyrZ33BxrAobQ=
Subject key identifier: AB:05:70:75:B5:91:E3:E3:92:4B:20:15:5D:39:EB:20:A1:15:49:67
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01987E6608170F73E1A398D81CBAC96D68E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 08:01:12 +0000
Manifest this update: Wed 06 Aug 2025 08:01:12 +0000
Manifest next update: Thu 07 Aug 2025 08:01:12 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: OTPR4NGN9qXvyA9/BRuXXoDH7/5LhNh4lGxNDyezs5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:66:08:17:0f:73:e1:a3:98:d8:1c:ba:c9:6d:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Aug 6 08:01:12 2025 GMT
Not After : Aug 7 08:01:12 2025 GMT
Subject: CN=ab057075b591e3e3924b20155d39eb20a1154967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:55:c8:98:dc:72:9c:20:cf:f0:d1:3f:3e:28:
44:f4:a2:e8:f3:56:6c:3e:4e:2d:6f:69:bb:30:2a:
79:32:ea:76:23:e2:b4:56:59:5b:6e:ee:9c:b1:5a:
64:95:a7:82:5c:e7:ff:78:f6:68:45:4d:86:3d:69:
8a:6d:8f:d0:00:88:58:4c:58:64:b9:c7:c8:bb:0d:
8c:ed:9e:c0:b2:35:b1:84:23:28:ef:36:8e:14:b0:
97:82:2a:83:cc:96:ec:a1:e7:90:37:27:b3:2c:2f:
92:1f:0a:a0:fc:c2:d6:e1:c6:10:64:8d:42:28:8e:
97:75:2f:09:87:1e:f2:4d:5c:e5:21:a5:9c:44:03:
f4:e9:24:ed:aa:b0:c2:9e:63:83:68:b9:c5:6c:4f:
0c:d6:25:a6:ae:2f:7f:a9:e4:0a:b1:e7:a2:25:9d:
9c:60:ce:b0:0b:f8:2c:81:1d:57:a4:36:07:34:e6:
46:20:2a:cf:a5:87:43:8a:8e:8d:07:3c:e9:23:24:
6a:ad:7b:62:a9:22:1f:10:9d:54:4b:7d:ea:84:49:
2d:39:b2:39:5a:66:4e:e6:51:50:bf:bb:69:ac:fa:
76:bb:1d:9f:f2:ec:05:5c:17:08:b4:78:87:f5:f6:
58:b0:76:59:ce:b5:9a:b4:da:e2:ab:ce:b2:b7:0e:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:70:75:B5:91:E3:E3:92:4B:20:15:5D:39:EB:20:A1:15:49:67
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e9:66:a1:51:47:9e:10:9b:37:03:ca:ec:03:9e:fc:9d:5a:
ee:a6:c7:80:b1:ca:1a:5c:85:a1:cd:8b:68:2f:af:ca:84:6a:
97:48:02:4d:6a:d8:80:89:b9:36:76:8e:30:1f:a9:83:1e:07:
fb:e3:96:b6:ec:03:b6:c2:70:e4:35:ef:c3:c2:50:95:dd:03:
ef:06:e1:43:12:b6:6c:be:df:7d:16:9d:7a:54:86:5a:01:fe:
d9:21:8b:8a:39:12:32:07:4d:69:25:da:41:be:75:e6:d1:00:
a9:fa:b8:65:0c:1f:00:d1:0c:6c:2a:4c:fd:e1:ab:c6:52:44:
c9:a6:6a:84:97:bc:33:cd:1c:c7:91:ca:a4:01:14:4d:e0:3f:
b7:2e:5e:03:33:c8:f5:04:31:80:22:c5:4d:63:f8:19:4c:70:
2a:5d:01:35:41:e2:7c:47:35:d7:88:98:ff:56:da:bb:7d:93:
a0:62:cf:7d:8a:fd:88:8e:31:2d:11:ff:ea:96:72:6a:09:d2:
de:0b:81:c7:45:3d:7b:45:15:8a:fb:12:d3:0f:5e:ea:ab:2b:
89:fb:37:f2:4f:09:ad:75:59:e7:88:2b:e6:fe:6e:af:be:72:
ef:11:a0:ae:74:cc:c9:e3:67:f0:1c:b8:f1:55:97:db:c5:32:
98:3b:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:14:56 2025 by rpki-client