
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: 1AINwkKQ0eLd8J/JmyJ1EPmuXcw3uQ8FcjiQOwreCd0=
Subject key identifier: 4E:35:BD:D7:0C:2D:1D:A1:A8:A9:AC:F7:77:54:19:25:32:6E:5C:F3
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01988BEA6B9B2F936181770E42D37A457D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:00:52 +0000
Manifest this update: Fri 08 Aug 2025 23:00:52 +0000
Manifest next update: Sat 09 Aug 2025 23:00:52 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: t1bVFuK69VCKDZM92ZrhlEy8cJrSH1f3uWnjdvaxVTE=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:6b:9b:2f:93:61:81:77:0e:42:d3:7a:45:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Aug 8 23:00:52 2025 GMT
Not After : Aug 9 23:00:52 2025 GMT
Subject: CN=4e35bdd70c2d1da1a8a9acf777541925326e5cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:b8:c3:59:ba:b1:d3:45:db:43:34:7e:60:
7e:1a:7a:8d:f2:cc:b1:1b:4b:c7:37:30:a0:62:c7:
ce:39:d8:c9:25:74:8d:1f:b2:f1:6b:d8:4d:0e:ab:
c9:da:bb:33:33:80:0d:b9:f9:92:e0:f1:72:90:4f:
f7:33:51:db:99:86:18:d4:6e:4f:97:95:84:a1:a6:
47:09:d7:e4:88:58:28:d8:95:f1:e7:55:08:8a:93:
5c:ea:03:3f:28:11:dd:1d:2d:e9:4f:e9:41:dd:56:
26:56:f2:8d:3b:9d:77:1c:61:dd:35:b4:18:b3:bd:
e7:1e:26:73:3b:93:d2:0f:55:8c:a4:95:b6:ac:ab:
7c:ef:7c:f6:9e:91:8f:18:9e:c5:8a:8b:f4:41:4b:
34:dc:86:9a:d6:4a:09:55:d5:41:06:5a:85:45:a4:
81:2a:a7:db:0b:2d:df:87:c0:bf:d0:58:60:23:8e:
f0:22:6e:25:45:9c:bd:4e:a4:33:a3:a9:6f:cb:2e:
4c:2e:7f:fb:6e:7c:e5:3e:b3:44:b6:43:e8:ff:b0:
ad:0e:41:9e:9c:62:bc:5d:83:b7:07:c7:ba:e9:10:
0a:00:4f:7b:81:9e:3f:e8:58:65:57:12:9b:00:02:
74:0a:ab:35:06:4a:0a:aa:97:d5:e9:56:ef:a1:c9:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:35:BD:D7:0C:2D:1D:A1:A8:A9:AC:F7:77:54:19:25:32:6E:5C:F3
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a8:8c:6c:27:fa:34:b5:18:a9:9f:d6:28:f6:d6:a6:68:ad:
ef:24:53:3b:cd:fd:96:54:44:c7:39:e2:a5:d5:7d:95:94:bb:
a5:21:52:83:7b:d2:a3:f6:53:e1:2c:8f:ba:e7:5e:02:7a:31:
11:5b:3c:b4:18:04:4c:70:82:02:39:c0:cd:73:1d:a0:81:a7:
66:35:ad:8e:f9:14:2f:b8:64:fb:6a:06:93:5b:dd:10:13:1d:
0c:c7:56:78:12:7a:0d:b5:31:51:2a:f6:d8:a5:be:ec:c2:a4:
c7:b3:56:63:22:16:b2:cc:4f:ca:9e:e9:11:82:fc:a8:39:bb:
26:40:f0:0b:ca:48:6e:e4:a4:35:14:3c:ef:97:27:5a:c9:1f:
aa:0a:4b:04:0f:4c:8a:ba:90:ea:af:67:b6:ba:90:2e:ce:a8:
68:52:80:0d:22:b0:ef:40:5e:7f:e3:4b:28:71:ea:b7:24:19:
02:6d:01:8d:50:1f:ba:e0:02:32:51:2a:80:a6:e0:6a:2f:8e:
1c:53:8e:2c:66:e9:5e:e4:bb:94:77:b1:11:6d:37:6d:f1:be:
35:29:fa:1c:e0:97:9b:a0:73:fe:3c:7f:58:1a:8a:fa:00:ad:
3e:eb:a1:d4:50:80:0f:65:7a:25:5b:0c:43:59:2c:d0:5e:0d:
01:8a:19:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:47 2025 by rpki-client