Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.mft (raw, json)
Hash identifier: JXcU2dpADW6/TjKx44cf8WbhNOTMbChyRzmwlG0pltI=
Subject key identifier: DE:72:5F:D9:B0:28:C2:6F:6E:9D:B3:C5:9E:9A:90:C0:21:44:55:BB
Authority key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Certificate issuer: /CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Certificate serial: 0197BF35943AC77518C1C35A7D1082AC34FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
Manifest number: 7B
Signing time: Mon 30 Jun 2025 05:00:48 +0000
Manifest this update: Mon 30 Jun 2025 05:00:48 +0000
Manifest next update: Tue 01 Jul 2025 05:00:48 +0000
Files and hashes: 1: pRZKRoFl6caTvYGEw8pWbKcP1WA.crl (hash: b/jue5jwGPec0TG6TJ9/7/nFqKVWXDoklaCRTlBN3k0=)
2: rIL66Wr2JO0hUiDgtrzPfwsPCdg.roa (hash: IzHYSyi3wxidgryTdPg9C85nPJtyfKau5Hu7/N9OG4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:35:94:3a:c7:75:18:c1:c3:5a:7d:10:82:ac:34:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Validity
Not Before: Jun 30 05:00:48 2025 GMT
Not After : Jul 1 05:00:48 2025 GMT
Subject: CN=de725fd9b028c26f6e9db3c59e9a90c0214455bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:37:f0:e4:f9:7f:23:fd:5d:aa:e4:71:ea:
a4:a2:99:fd:65:c8:ec:60:7f:da:ab:1a:5d:25:9c:
ab:9d:10:c2:4f:00:dd:42:c8:99:4d:2b:17:2c:c9:
72:66:8d:8b:28:c7:1c:45:b3:93:e6:a0:a2:9e:c6:
ee:6d:4b:01:6e:4e:f4:49:47:8c:ef:e1:aa:26:0b:
7a:83:1c:34:76:fb:d0:c8:eb:50:c3:e4:61:1c:70:
a2:66:4d:13:e0:02:28:93:d6:4d:63:3d:29:5c:22:
59:fe:23:f0:29:d4:e5:07:23:6d:99:39:f1:95:2d:
9b:95:9d:ca:66:7d:1e:79:81:53:dd:4b:6b:9e:49:
e2:62:c4:2c:92:e0:22:d5:dc:22:f6:a2:f6:23:4e:
04:a0:ac:e6:85:45:e4:00:56:a4:ef:11:5c:8c:b8:
dc:fd:47:ef:d6:08:de:1f:9f:ab:42:14:e5:bc:e3:
be:5e:3c:24:21:7d:60:c9:77:84:6f:4a:17:9b:e4:
ff:ae:84:f7:cc:de:8f:76:df:c6:23:72:a1:b3:3d:
c9:5d:7a:5b:1d:da:f1:1a:9c:76:95:36:c2:f2:55:
83:49:23:a5:ce:df:2d:dc:c4:b3:c4:98:5d:f3:a2:
c9:e7:39:4d:e0:37:4f:b8:30:8f:e9:3e:35:b8:94:
10:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:5F:D9:B0:28:C2:6F:6E:9D:B3:C5:9E:9A:90:C0:21:44:55:BB
X509v3 Authority Key Identifier:
keyid:A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bd:d4:67:1b:19:b8:af:7d:75:29:bf:52:75:fa:ab:b9:2c:
c2:da:27:84:fd:5e:b4:ad:d9:60:ef:b5:3a:7f:fc:2c:4d:6a:
cc:a4:2f:32:c6:af:b7:02:55:ae:6d:52:f8:25:66:d4:af:ff:
90:f9:b8:18:9b:a5:73:4f:55:56:4b:14:48:82:41:03:b9:a5:
c7:dd:6f:d7:16:af:b8:a9:96:2d:a3:f9:7a:c8:fe:48:2d:cd:
27:b9:83:e2:14:fd:c9:f2:c0:a3:b9:41:14:c9:18:88:30:25:
7d:24:e7:4b:dd:2a:40:8d:5c:83:e4:70:96:d0:35:45:ec:f7:
61:f2:4b:84:6f:91:78:5a:eb:f9:53:a5:59:96:7d:0a:93:71:
9e:6f:8e:fa:a3:52:a0:ac:68:53:8e:2b:88:a2:1e:46:ff:0e:
96:5e:01:e4:9c:84:6e:77:69:8c:66:f4:04:61:c2:28:1c:10:
14:d6:4b:b7:e7:96:62:0f:ce:2b:3b:7d:29:7c:7b:6f:c1:c0:
31:b9:3e:d9:7d:c7:f0:e9:19:3a:2b:18:4d:53:92:0a:29:07:
3f:a4:99:c1:cb:25:fb:a7:c6:40:a1:72:a1:6b:b9:89:84:4b:
f9:24:2e:64:94:10:08:43:52:d1:21:45:e4:c3:6e:07:d0:1f:
e0:0f:6e:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/NZQ6x3UYwcNafRCCrDT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MTY0YTQ2ODE2NWU5YzY5M2JkODE4NGMzY2E1NjZjYTcw
ZmQ1NjAwHhcNMjUwNjMwMDUwMDQ4WhcNMjUwNzAxMDUwMDQ4WjAzMTEwLwYDVQQD
EyhkZTcyNWZkOWIwMjhjMjZmNmU5ZGIzYzU5ZTlhOTBjMDIxNDQ1NWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jA38OT5fyP9Xarkceqkopn9Zcjs
YH/aqxpdJZyrnRDCTwDdQsiZTSsXLMlyZo2LKMccRbOT5qCinsbubUsBbk70SUeM
7+GqJgt6gxw0dvvQyOtQw+RhHHCiZk0T4AIok9ZNYz0pXCJZ/iPwKdTlByNtmTnx
lS2blZ3KZn0eeYFT3UtrnkniYsQskuAi1dwi9qL2I04EoKzmhUXkAFak7xFcjLjc
/Ufv1gjeH5+rQhTlvOO+XjwkIX1gyXeEb0oXm+T/roT3zN6Pdt/GI3Khsz3JXXpb
HdrxGpx2lTbC8lWDSSOlzt8t3MSzxJhd86LJ5zlN4DdPuDCP6T41uJQQ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5yX9mwKMJvbp2zxZ6akMAhRFW7MB8GA1UdIwQY
MBaAFKUWSkaBZenGk72BhMPKVmynD9VgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMt
OTQ1ODdkODMzMWY5LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xZmNmYmEtY2RhMC00YWQzLTk4OTMtOTQ1ODdkODMzMWY5
LzEvcFJaS1JvRmw2Y2FUdllHRXc4cFdiS2NQMVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcb3UZxsZ
uK99dSm/UnX6q7kswtonhP1etK3ZYO+1On/8LE1qzKQvMsavtwJVrm1S+CVm1K//
kPm4GJulc09VVksUSIJBA7mlx91v1xavuKmWLaP5esj+SC3NJ7mD4hT9yfLAo7lB
FMkYiDAlfSTnS90qQI1cg+RwltA1Rez3YfJLhG+ReFrr+VOlWZZ9CpNxnm+O+qNS
oKxoU44riKIeRv8Oll4B5JyEbndpjGb0BGHCKBwQFNZLt+eWYg/OKzt9KXx7b8HA
Mbk+2X3H8OkZOisYTVOSCikHP6SZwcsl+6fGQKFyoWu5iYRL+SQuZJQQCENS0SFF
5MNuB9Af4A9ueA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:00:58 2025 by rpki-client