Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: CCdgPYMkxJL+uCcZTscctvSekgfau4ghbgti9estGkg=
Subject key identifier: B1:C1:D6:9A:D4:ED:58:C0:17:B7:34:A9:21:AF:01:F3:76:AB:49:0C
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 019896375AD0E236A33E8BBB06BBB93004D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 23:01:06 +0000
Manifest this update: Sun 10 Aug 2025 23:01:06 +0000
Manifest next update: Mon 11 Aug 2025 23:01:06 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: aEZq42ifpCDZrmPHKqTcUOYbngEz0+5wGIrtHZRduKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:5a:d0:e2:36:a3:3e:8b:bb:06:bb:b9:30:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Aug 10 23:01:06 2025 GMT
Not After : Aug 11 23:01:06 2025 GMT
Subject: CN=b1c1d69ad4ed58c017b734a921af01f376ab490c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:53:c4:d7:48:cc:91:3c:f3:74:55:69:a8:
a4:51:b8:21:b8:a4:cb:ef:38:b6:87:3f:e0:83:6a:
93:03:ef:a7:ee:ce:33:43:57:eb:5e:ea:04:2d:29:
ac:5e:d1:18:f3:8a:27:8d:78:a3:a3:e7:fe:30:96:
07:92:9b:22:66:91:27:c9:60:02:01:83:09:ae:f7:
b0:9d:e4:b3:4b:33:fe:97:a7:21:e5:b0:9d:1c:cc:
ca:02:6a:42:39:12:50:27:fa:68:9d:5b:e6:0d:2e:
9e:2d:41:c5:b6:9f:de:bc:63:df:f7:b7:0f:1a:99:
2e:a6:5a:eb:02:b0:f4:e5:4f:17:28:e5:f2:c2:22:
07:44:e3:e4:00:68:20:b5:0a:23:fc:a8:40:87:e2:
94:7c:97:20:95:5f:bf:a7:4c:95:a7:7c:4e:ef:06:
06:7b:f3:a2:54:a3:c7:ef:89:4b:ce:17:b8:f5:47:
52:2b:79:87:b6:e1:54:80:5d:d2:36:e2:0c:11:97:
f9:7c:99:32:40:e5:1a:99:95:69:63:60:b9:a2:78:
87:a8:81:8e:0f:c4:5b:71:3e:9b:0f:29:2c:54:02:
08:93:db:6a:aa:8a:eb:b8:75:92:2c:32:5b:35:3c:
eb:46:a4:a3:5f:c1:fc:cd:b8:35:06:22:bb:b2:37:
bd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:D6:9A:D4:ED:58:C0:17:B7:34:A9:21:AF:01:F3:76:AB:49:0C
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8e:54:df:9a:27:85:55:c2:d7:a2:0e:fe:e3:c4:a4:12:db:
d1:58:42:db:5d:20:5c:1f:89:db:56:ca:fe:e7:f6:f6:f6:80:
e0:71:4e:96:8b:c7:ef:8d:8e:81:2a:99:2a:a0:8a:2a:12:68:
e3:6d:97:6e:75:da:04:a5:12:94:8f:b5:22:6c:7b:f5:2f:7c:
0d:af:3f:cb:fc:58:6e:95:90:fe:d4:24:8b:6c:52:47:cf:13:
2d:fd:3a:6a:99:1f:30:32:f4:6a:d5:5d:99:66:6c:9c:62:fc:
a3:01:10:09:50:82:26:4f:d3:68:1e:81:4d:83:39:39:9f:68:
92:2b:1b:d0:92:3d:fe:b4:f9:af:40:fa:03:af:65:65:ee:40:
80:ed:aa:ec:0b:e7:0f:12:d6:41:3f:ea:05:cb:5c:5c:e1:e1:
c0:4d:c5:e2:94:70:84:8b:8d:b6:42:2d:4a:12:d9:93:93:ab:
9d:9d:54:d2:9a:ea:c7:ec:2d:bd:f7:a1:f6:29:ab:e6:3c:a1:
74:8e:7f:55:af:e7:c7:03:44:09:47:93:03:9c:ba:6f:56:d3:
71:c4:81:69:74:20:30:fc:60:1a:1b:89:5a:d2:81:39:41:eb:
ce:aa:3b:8e:2f:d0:86:d7:fa:13:b5:b2:20:a1:a0:dd:44:f6:
46:1f:44:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:24 2025 by rpki-client