Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: Uvb3b/pzDtDAbARfsZRqJNbDD7JyZegH0HrSVNsO8Vo=
Subject key identifier: 1A:E7:7E:56:DF:0B:B6:0C:73:C1:E0:D5:73:BB:5A:0C:2B:3B:29:BA
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 019A50E3993FD1B89EFE510A14C1D3489C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0CE8
Signing time: Tue 04 Nov 2025 22:01:24 +0000
Manifest this update: Tue 04 Nov 2025 22:01:24 +0000
Manifest next update: Wed 05 Nov 2025 22:01:24 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: hihXJQV0qtPoOXAaY/oUu82sfD5/Amt7nYAx3bHJUAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:99:3f:d1:b8:9e:fe:51:0a:14:c1:d3:48:9c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Nov 4 22:01:24 2025 GMT
Not After : Nov 5 22:01:24 2025 GMT
Subject: CN=1ae77e56df0bb60c73c1e0d573bb5a0c2b3b29ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:62:8e:b0:6c:ed:76:49:f9:0a:68:a2:f4:
04:a6:b8:1a:2c:c3:20:cd:dd:19:be:3e:f1:ab:df:
49:ff:e3:12:da:35:cd:8f:3d:a1:a7:fd:31:ba:9d:
c5:16:b5:35:bd:f5:98:bc:a2:88:3f:dc:c4:f3:87:
9d:30:34:a7:89:34:6e:46:d9:15:aa:19:25:7b:9a:
85:24:da:01:37:02:0e:bd:a1:92:b1:0d:b8:eb:9c:
1b:97:2c:83:c6:a8:26:e4:cb:65:19:dd:15:9b:bf:
4d:e2:23:74:a0:01:e8:8c:a5:46:0c:e7:08:b3:b6:
9f:2b:6e:88:a7:3f:4f:56:30:13:0f:63:c6:97:4c:
75:1b:9f:b3:4e:86:fe:be:e1:a4:89:e1:5e:cb:61:
eb:96:27:c9:dc:ca:12:5f:17:34:74:f0:55:1f:ae:
f9:b5:89:49:2b:9c:be:9f:44:01:c2:cd:1d:0a:c3:
2f:1c:d6:94:37:b7:8f:b2:ef:b3:a9:74:92:10:17:
41:d9:d5:4f:c0:9b:24:bf:80:1c:0f:f8:b1:fe:ca:
d2:67:7b:62:47:62:5a:f6:65:9c:f4:c2:76:cc:c9:
3f:3f:b0:c1:40:f5:41:e8:97:98:d8:2e:d3:73:f4:
28:cc:85:7b:99:e0:aa:a7:2c:a4:03:43:7e:7f:65:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E7:7E:56:DF:0B:B6:0C:73:C1:E0:D5:73:BB:5A:0C:2B:3B:29:BA
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:93:64:b7:61:76:95:e0:18:af:31:52:ed:41:8d:c7:8c:0b:
a1:9e:de:ef:69:e9:44:9b:90:e3:57:c0:3d:cc:72:dd:6e:a0:
68:d5:3b:3b:5c:e5:90:fa:10:dd:e8:bd:10:e3:49:44:84:08:
7a:b0:58:df:0d:43:7f:54:04:a1:e4:1d:87:90:04:19:6d:60:
95:97:aa:dd:a5:bd:03:92:9e:2b:92:44:24:a5:56:ed:ba:15:
25:6d:a8:ef:38:19:da:f3:7e:9e:f6:d0:b9:8d:e8:27:db:61:
df:37:c5:96:32:24:69:00:f9:5d:8b:6e:0b:1f:1f:5d:dd:27:
4d:cd:05:33:81:37:b4:e7:af:7e:48:21:69:74:3b:4d:f8:99:
6f:20:8b:75:b8:8a:7b:88:38:09:e4:ea:2b:db:c2:51:c9:43:
3c:a6:eb:56:69:7d:d5:94:3a:37:31:e8:04:c0:3d:18:b8:be:
be:04:38:3f:12:f1:a3:2e:f4:da:45:13:1b:9b:0d:53:f8:34:
85:60:e8:61:1d:3a:a0:3f:af:c6:8a:54:7a:b0:ca:c4:25:d1:
76:39:a1:4c:cf:ed:e0:b6:43:55:1a:b5:46:e5:c7:b1:df:4c:
b1:62:67:93:65:32:03:11:a0:60:63:b7:00:c4:41:16:16:a7:
5e:81:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:15:38 2025 by rpki-client