Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: m1ROg77m26SBhctoeyuHKvWzHZusEDnZzAFQCGMypj8=
Subject key identifier: 28:21:A5:5B:BD:CA:CF:48:60:16:CB:B8:37:FC:B8:45:BB:D5:6F:A8
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 0197B8212DB1B7F6F5B7F836CEF3C8DFFD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 14E0
Signing time: Sat 28 Jun 2025 20:01:11 +0000
Manifest this update: Sat 28 Jun 2025 20:01:11 +0000
Manifest next update: Sun 29 Jun 2025 20:01:11 +0000
Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: zlQz7i/X66647a5LWMWnNjAsyCLj7oUstBti8kPOns8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:2d:b1:b7:f6:f5:b7:f8:36:ce:f3:c8:df:fd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Jun 28 20:01:11 2025 GMT
Not After : Jun 29 20:01:11 2025 GMT
Subject: CN=2821a55bbdcacf486016cbb837fcb845bbd56fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:eb:aa:a3:37:8d:92:35:92:81:12:2f:22:
8f:5b:49:61:8d:e3:4c:bd:35:e0:9c:eb:a4:35:c7:
61:0f:a1:9e:e1:71:35:53:e1:ee:56:b3:1f:7c:55:
58:3e:da:b2:e8:0d:8b:bf:9e:06:8d:12:b2:6c:3b:
7e:38:94:f4:1a:35:10:49:5b:c7:97:3e:da:80:3a:
9a:82:c3:98:2d:97:a8:f4:44:be:7f:27:d0:ec:ea:
f8:e5:0c:c4:c0:5b:51:25:7f:72:19:11:6f:6e:c3:
ca:fe:b5:af:73:60:e5:e4:aa:d6:1c:1c:ba:0d:4c:
02:3c:de:30:8d:7a:8d:3f:5b:88:f6:7f:83:94:dd:
a2:27:8b:7c:f7:be:80:ae:b1:10:ef:99:76:59:bc:
cc:1e:59:85:60:33:f3:59:66:52:60:67:60:fb:c1:
da:02:98:c9:70:b7:a5:7f:68:d3:9b:65:60:a5:dc:
51:08:8c:7d:e0:5d:7f:fa:0e:33:bb:3d:8e:a5:1c:
46:12:a4:7c:b4:d5:f7:0c:7e:43:66:1d:49:b6:2e:
e3:3b:a4:e2:af:a4:cd:5e:d2:44:3b:cc:e7:f3:3d:
34:5e:4b:90:13:dd:91:09:6e:3b:cd:cd:cf:bf:30:
da:20:d7:fe:86:24:36:c8:41:53:a7:34:2d:64:fc:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:21:A5:5B:BD:CA:CF:48:60:16:CB:B8:37:FC:B8:45:BB:D5:6F:A8
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:91:bc:a6:07:ae:f5:3c:e4:64:21:26:55:74:a8:07:1b:6c:
57:02:5d:4a:7b:fa:6a:09:f7:b4:b5:23:6d:e4:cb:15:ee:cd:
56:fb:17:1b:a3:a4:5c:ab:4b:29:68:c4:d7:e2:a0:c1:f2:cb:
74:a7:f1:4d:fa:37:57:73:88:0b:47:b7:bf:8b:0d:3b:a7:d8:
12:7c:fb:0a:a5:32:51:40:31:48:1d:35:bd:7d:48:e0:9c:a2:
a7:1c:6f:32:f8:26:07:d0:af:de:34:18:c2:af:b4:62:15:d5:
db:f6:9f:04:90:51:98:41:31:e5:fb:db:93:0a:b9:0d:0a:a9:
b4:ce:f0:32:b4:55:be:8a:94:4f:3e:1a:af:85:50:1f:62:b1:
c7:fc:28:96:91:8b:bb:f9:78:c9:cc:9f:7f:2b:ce:62:70:f8:
e0:13:06:0d:23:2b:db:b2:5f:ff:da:de:e8:dd:8f:c3:6e:f3:
bb:ee:fd:40:df:96:31:52:d9:8c:e0:84:0c:d7:f4:e0:12:b6:
3e:8a:d9:e1:5f:89:09:bd:28:4d:6d:d0:e2:54:82:2b:92:96:
62:d7:6e:1d:72:f8:1b:a7:a5:f2:e2:f6:1b:7e:2a:43:6e:42:
68:21:61:cb:f9:c0:c4:7c:d8:76:5d:df:8c:66:fd:39:04:4b:
da:90:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:18 2025 by rpki-client