Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: ycyw1iud9/JIXlnSx7MHDEEWPkZ0+krJxrlcyacVXkI=
Subject key identifier: D3:08:B7:7B:99:16:12:6A:E8:37:32:31:2F:99:45:2B:C0:85:1A:DC
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0198D5BC04FE02422BF70886173FDFA09F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 1200
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=)
2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: aUf/U2LQkbYJ42sW1nxyev0PSBXI77S4v1br0SleSZ4=)
3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:04:fe:02:42:2b:f7:08:86:17:3f:df:a0:9f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=d308b77b9916126ae83732312f99452bc0851adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:47:89:42:40:44:63:79:a8:3c:64:74:b1:
89:f5:9f:85:ad:62:d1:e6:92:81:e8:de:c7:f4:99:
93:c7:93:60:0c:bd:73:04:2f:c5:c4:de:3d:87:1b:
e9:93:dc:97:24:93:c6:0c:7b:d1:36:d0:06:6f:16:
c1:36:74:0c:5c:33:d5:38:b4:84:05:53:1d:cc:f9:
49:70:bd:3f:bf:97:3a:11:9b:d1:a6:ce:dc:6d:1c:
23:d6:18:aa:97:a2:30:3c:80:79:ea:a0:dd:6d:7e:
be:13:7a:b0:de:5a:6b:a2:c8:8f:63:37:f8:04:17:
35:77:88:83:18:81:4a:92:1a:cd:c2:f0:03:43:8c:
9a:19:cf:f4:ee:06:5c:a6:aa:3a:27:1b:4e:0d:d2:
f7:df:cb:ba:7a:cb:9f:21:99:cb:d8:1f:84:ec:66:
0f:82:26:e9:a7:1f:ce:b5:3e:74:64:0b:28:83:78:
4b:13:88:ad:47:a7:9a:fe:b8:8a:ca:75:45:69:84:
aa:72:0b:33:76:c4:9a:d5:ec:0c:d7:64:76:8e:9e:
13:02:29:ad:1e:3c:19:84:f8:c3:35:8a:32:6a:96:
77:db:5f:24:29:99:81:49:cd:84:29:df:6c:1d:7e:
13:2d:41:72:48:7c:2a:e3:d6:aa:18:b0:3f:13:52:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:08:B7:7B:99:16:12:6A:E8:37:32:31:2F:99:45:2B:C0:85:1A:DC
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:59:d0:5c:5c:29:9c:6a:89:47:6a:7a:57:e4:be:2b:ae:53:
07:0b:9f:4c:6b:12:9a:50:c6:7e:3c:08:8f:39:89:64:18:b2:
64:95:98:ca:3c:a5:cf:09:2e:53:06:d3:55:d3:7c:cd:81:3b:
c4:56:84:66:8d:ec:57:68:d5:4a:91:3f:80:fa:6a:23:a3:e8:
14:d9:1f:0b:68:0a:d8:00:a9:69:97:89:04:a3:d9:2c:d4:bd:
e6:92:39:8f:b9:34:0f:62:ae:b3:4e:4d:e6:0a:85:de:dc:0a:
dc:5c:e6:cc:19:84:11:dc:21:91:9c:d3:33:49:59:ad:c8:98:
91:11:50:8f:26:f8:65:1a:a4:cf:ff:a3:30:9f:4b:5c:6a:cf:
81:d1:d1:d9:8f:16:9b:27:ce:08:33:a1:97:38:ed:ac:da:fa:
a9:fb:30:70:6b:a5:aa:ac:a1:a6:8d:c0:d9:59:23:ff:e5:c8:
f6:38:c7:3b:2f:b9:a5:a1:07:9f:92:9f:0c:c3:76:8d:19:93:
40:dc:7e:75:7d:77:7b:e3:09:8b:72:72:f7:f7:73:71:a6:05:
49:c4:8c:8f:b0:61:be:97:98:c2:e0:9a:67:d8:62:f8:0d:44:
02:17:0b:80:a7:9d:a6:8c:07:34:bd:4f:58:6e:71:a6:cd:2a:
4f:6d:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:13 2025 by rpki-client