Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: MMBTc7IwThUz5EBeL7QOIGtKFXVnKFKCi1ZUW1pP/Ns=
Subject key identifier: 10:EB:25:80:61:4F:D6:E6:8D:D3:59:0C:7A:B1:BE:E7:ED:4F:76:B8
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0199FD348E3FA32953AE1B46BA3E247CF803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 1299
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=)
2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: dZ9LEGbsSrAFO5/X7VWhXuE7xb8+p6lIDeFQIzQJdvs=)
3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8e:3f:a3:29:53:ae:1b:46:ba:3e:24:7c:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=10eb2580614fd6e68dd3590c7ab1bee7ed4f76b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:c2:12:28:2a:b3:bd:64:1c:a5:ef:95:92:
a2:4a:60:43:5d:56:cc:e9:4b:d2:a3:95:48:6e:44:
86:e0:45:3e:b3:1e:fa:aa:ef:a0:fc:de:6c:7e:46:
c8:2c:a5:a7:49:97:07:4f:da:8b:fa:8b:de:f3:ad:
05:2a:95:3c:58:09:ff:ec:50:7b:b7:44:48:33:d4:
e3:f2:c2:82:47:24:ea:3c:d6:40:09:b0:ea:2c:79:
01:99:c5:d2:7e:a5:0c:e0:7c:21:b9:44:c5:17:6c:
07:a0:a9:21:87:ee:ca:71:ef:29:a4:2f:8d:c9:3e:
85:15:ef:e7:51:f5:de:3e:6f:cd:c0:e5:d9:b3:39:
fa:d8:a2:51:b2:f4:20:21:2e:94:19:a7:f4:7f:9f:
fb:8d:e2:6c:cc:78:e9:fe:34:71:02:f9:05:56:0a:
d6:48:26:1f:7b:27:79:df:a0:74:6a:2c:f2:38:8f:
32:bf:53:2a:80:01:25:0e:66:31:27:05:db:4f:0c:
41:ba:4b:ca:60:be:10:e2:32:cc:f6:fe:f4:82:b5:
77:7b:b6:01:67:3a:e6:6c:8e:c5:36:6d:64:19:3a:
cd:2c:86:41:85:6e:65:67:6c:46:50:4a:c9:d0:dd:
63:9f:e9:04:fe:d9:af:c7:88:70:df:0a:66:7e:83:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EB:25:80:61:4F:D6:E6:8D:D3:59:0C:7A:B1:BE:E7:ED:4F:76:B8
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:ce:10:65:63:66:f0:81:70:a6:eb:d6:e8:06:e8:88:5b:
e8:ff:7a:a7:93:9a:4b:77:2f:75:ef:a8:30:84:7b:f8:11:9c:
37:c7:02:49:ae:6d:0c:72:0f:cc:ed:15:6e:4c:58:52:bb:1d:
c5:29:d2:01:13:8f:82:74:71:aa:4d:8f:5c:3c:84:71:0a:5d:
b7:f4:dd:93:a2:0b:bc:75:4b:7d:a6:e4:d9:35:e9:d3:41:8f:
95:5a:d8:45:dd:65:db:2d:7b:24:14:72:70:5a:c9:8f:a6:f9:
46:4c:c2:b8:75:33:48:43:4a:81:fb:71:2f:2f:98:5f:15:b2:
2a:d5:d2:38:78:98:15:89:00:03:03:df:bb:01:16:57:6f:bf:
7a:7b:eb:7f:04:e9:e9:ed:5c:c9:9e:b1:de:96:a3:37:98:fd:
68:ae:67:4c:a0:07:61:3f:ef:23:27:20:b6:52:9a:36:1d:1a:
cf:7a:ee:38:67:d8:bc:bc:67:42:7b:b0:b8:c8:a6:ce:fa:71:
27:17:c0:7c:97:77:05:53:bf:88:42:2b:1b:08:dd:81:96:42:
60:48:56:fb:76:00:97:e1:09:76:bd:33:ae:d2:03:06:70:3e:
85:fc:ea:da:72:4c:72:f1:28:2f:a8:b7:2d:4b:05:11:6a:76:
0d:33:3e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:49 2025 by rpki-client