Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: IrtA3VrTZH7lwRDYkF/i6PFDfa7PDBSIFsa+V7fL140=
Subject key identifier: 0F:DB:6B:04:72:B6:6F:25:75:F2:8B:E2:44:BC:E8:79:BD:A3:3F:FB
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 019896A4A89B4219FCCAF5B33CA7C8590781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0C03
Signing time: Mon 11 Aug 2025 01:00:30 +0000
Manifest this update: Mon 11 Aug 2025 01:00:30 +0000
Manifest next update: Tue 12 Aug 2025 01:00:30 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: O7DNwNWC4G/V8OqfpwMo6CDUYIh0i3PECatC/PZeaLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:a8:9b:42:19:fc:ca:f5:b3:3c:a7:c8:59:07:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Aug 11 01:00:30 2025 GMT
Not After : Aug 12 01:00:30 2025 GMT
Subject: CN=0fdb6b0472b66f2575f28be244bce879bda33ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:ac:fb:3d:22:60:f2:5d:7d:cf:f0:9e:4f:
92:b5:a6:5c:87:22:f2:46:98:d8:67:ff:f0:02:a6:
6a:88:d8:13:a6:83:40:19:f1:65:72:81:a0:4a:74:
21:94:2e:65:be:ae:7f:83:a8:b0:2c:02:3d:e1:5f:
46:db:85:10:6d:e6:55:7c:39:8d:67:c6:ab:8d:11:
32:f4:af:87:7c:9e:b1:e8:59:d0:a2:c2:78:78:e6:
54:ef:37:98:d7:09:d2:53:1f:bd:d4:0b:a6:a9:4e:
22:cf:e8:ce:bb:b9:f5:81:36:c1:8e:88:e0:b2:e0:
3c:b7:55:fb:3d:df:ff:c0:53:a9:10:60:80:b1:c9:
80:6e:0a:32:b1:40:40:fa:62:d9:c4:da:b3:f2:78:
d9:85:ba:ae:48:17:44:fd:13:9f:b5:72:ec:44:ec:
70:43:44:9b:b4:5f:e9:70:47:72:25:84:e6:e4:27:
0f:c9:d7:d5:4a:d8:3b:6b:bf:c7:a1:5e:9e:8e:df:
7a:c1:e9:04:18:f6:33:11:d5:b9:79:ff:db:cb:7c:
49:99:1f:e8:ca:70:36:06:1c:cf:bf:66:41:40:8a:
0b:bf:1e:e4:ff:e2:1e:13:ba:94:53:7c:0d:0c:d1:
a4:fe:ca:3f:75:15:d3:84:38:87:d3:0a:77:23:82:
95:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DB:6B:04:72:B6:6F:25:75:F2:8B:E2:44:BC:E8:79:BD:A3:3F:FB
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:96:c8:35:7b:23:ba:cb:6a:cc:89:60:aa:05:26:f9:1b:
96:f0:67:f7:f0:df:9d:e7:d7:7e:a1:50:6f:04:15:0b:1d:ea:
4e:55:d7:2c:ae:0f:8f:b4:4b:f2:64:82:f8:a6:a7:84:c1:ca:
5d:43:93:56:c6:bd:4d:2b:c4:99:92:29:32:de:df:d5:19:5a:
86:fb:f2:1e:73:a4:5f:f4:08:f5:0a:73:b7:60:5d:64:b0:39:
1a:a3:97:ce:71:37:e5:e7:00:41:36:ea:01:26:cb:e1:8c:78:
ad:43:d9:9a:95:7d:0e:9c:30:bf:68:a2:92:63:f4:6e:b0:07:
d8:40:6f:a2:66:06:12:ec:a5:67:b6:4f:47:29:9a:e6:09:bd:
b7:40:05:a6:0c:e9:5b:0c:b5:19:52:6f:f9:43:77:d8:54:a5:
c3:70:9b:03:dd:1f:bf:c4:c2:cb:51:28:cf:ef:a7:d9:a7:03:
50:d1:37:f7:a1:76:f3:58:3f:bc:35:42:c3:4b:61:a4:0d:3e:
a0:a9:1a:ec:49:68:f9:56:ab:e3:88:ae:7e:a0:ad:fb:ff:e9:
01:46:c2:8e:57:ab:d5:7d:7f:49:0e:10:e7:71:0c:7a:5f:cb:
27:96:94:21:65:a8:b8:4b:c1:78:49:41:f1:da:21:90:18:93:
ed:66:79:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:10:07 2025 by rpki-client