Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File: Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier: ZC7Bbj+iMmPo+h+xAq/I27xg1w5bFv9zIBowTG12u2A=
Subject key identifier: E7:99:F1:A1:96:A0:EB:62:FD:ED:A0:64:31:C1:14:94:2E:FB:12:EE
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer: /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial: 0196BECA62BEC2EAADFB826537ACE3B4E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number: 10EB
Signing time: Sun 11 May 2025 10:00:56 +0000
Manifest this update: Sun 11 May 2025 10:00:56 +0000
Manifest next update: Mon 12 May 2025 10:00:56 +0000
Files and hashes: 1: NI2TKci7WqCqy8kg5iraylXHZzQ.roa (hash: FBDYKoklGjXkJ0zMlLJAVAFso/2nr98wz98/NBCBllg=)
2: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: iBU+f22yLJuCvPQJjKq2dK1UCyD2KogQLIT4hYL7XiA=)
3: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
4: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:62:be:c2:ea:ad:fb:82:65:37:ac:e3:b4:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Validity
Not Before: May 11 10:00:56 2025 GMT
Not After : May 12 10:00:56 2025 GMT
Subject: CN=e799f1a196a0eb62fdeda06431c114942efb12ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e0:e0:7a:55:2b:90:a2:2a:6e:91:a1:6b:dd:
1d:db:d8:f9:9b:2f:b6:d6:73:36:4b:b5:d6:9b:dd:
f8:e2:41:68:aa:3c:4f:c0:49:72:bc:14:3d:fe:64:
6a:d1:15:24:dc:e1:52:33:63:67:73:64:cf:f4:07:
89:4b:5a:c5:fa:97:19:4f:0f:68:c9:d5:c7:39:c0:
e4:60:4f:9b:50:25:47:e0:7f:0a:bf:3e:2f:e7:81:
18:85:3f:9e:16:c5:f3:f1:25:9c:98:00:a4:c9:d3:
14:92:24:83:e3:b4:54:e7:6d:c8:3e:ec:84:dd:32:
32:c9:82:8d:45:0a:b0:d4:a8:c9:97:f0:b6:91:7a:
b5:c6:1b:38:d8:04:da:d4:85:f5:71:f3:22:46:22:
7a:19:af:d9:01:74:eb:53:ed:7f:9e:c1:a6:7f:bb:
cd:04:c3:0a:5b:98:f3:63:ed:89:24:fb:3e:8a:32:
7b:ab:82:ae:a3:6d:f8:04:4b:55:ac:27:92:02:b4:
4c:2d:39:02:6f:de:a8:a0:1a:a2:90:67:9f:4e:22:
67:36:93:cb:f1:f0:4b:c3:a0:23:81:ea:47:6c:54:
f1:2c:dc:d9:4a:41:74:ee:e3:11:3e:1e:4e:28:60:
00:4f:11:e9:f4:cc:ef:84:36:c7:c9:79:a1:a6:61:
27:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:99:F1:A1:96:A0:EB:62:FD:ED:A0:64:31:C1:14:94:2E:FB:12:EE
X509v3 Authority Key Identifier:
keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:01:ba:7a:12:a9:c2:8f:cb:d4:26:5d:94:17:9f:4e:28:
99:dd:ed:27:7f:00:fd:46:0f:cc:58:78:86:13:7d:a7:82:f4:
b2:1c:c8:f3:e9:c5:48:fe:75:4e:98:82:6d:46:70:50:6e:c5:
07:5e:78:5f:63:84:49:75:66:52:99:11:51:34:5b:48:e8:34:
5c:a6:39:07:9f:65:77:c4:3b:b2:f8:a9:18:8d:d3:65:ed:a0:
f8:63:46:53:14:d6:51:37:60:ae:e0:41:54:51:35:86:11:13:
63:57:1e:eb:00:d6:ed:e5:f7:c1:eb:fc:15:8c:2a:00:90:e8:
5e:c6:8d:ec:bf:9a:64:e1:3a:02:39:a5:7f:0d:be:25:8c:fb:
f3:d0:9d:1d:16:d1:60:f9:c0:2d:24:df:57:06:ab:4e:cd:ce:
1c:f8:a1:17:12:9a:2c:cf:3a:ec:dd:f0:6d:1d:97:6b:8d:c1:
fe:c5:0a:65:ad:7a:75:e1:7c:0c:74:75:cf:7c:cb:69:8e:ab:
5a:d6:27:8c:59:03:66:2b:32:9f:78:93:83:6d:59:0e:cf:47:
4a:e0:98:d7:16:ab:48:72:d3:34:0a:48:29:65:1c:47:0b:3e:
46:a8:8f:3e:25:44:ce:db:a4:77:bf:31:ca:7f:34:dc:f3:38:
0c:f2:85:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:22:33 2025 by rpki-client