Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: /zaXtRuM3DOYXisOsnb+4zJZJyQ9Zgr6oMAOLRYoX4w=
Subject key identifier: 1A:98:61:56:F6:BB:18:DB:D0:A5:55:5D:8B:8C:DB:DA:1F:D0:C0:7B
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 0196C0EF7E342F19145961A94077446D9C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 1460
Signing time: Sun 11 May 2025 20:00:42 +0000
Manifest this update: Sun 11 May 2025 20:00:42 +0000
Manifest next update: Mon 12 May 2025 20:00:42 +0000
Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: u2ndi1CsIfUBp0DjK+fUhLMsEVv4vSxk06PqV+MA+zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:7e:34:2f:19:14:59:61:a9:40:77:44:6d:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: May 11 20:00:42 2025 GMT
Not After : May 12 20:00:42 2025 GMT
Subject: CN=1a986156f6bb18dbd0a5555d8b8cdbda1fd0c07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:e0:38:e3:07:4a:ae:79:31:59:a3:1b:55:
c1:1a:56:79:2b:1e:34:dd:f8:65:44:de:c9:a3:77:
e7:2b:df:1a:0b:43:d6:29:e3:58:26:f1:74:73:54:
9e:f3:c7:cd:ce:d6:ae:eb:f2:7e:eb:90:40:17:76:
83:46:19:8d:5d:eb:67:47:d3:50:10:4c:ee:ef:0a:
30:b9:d7:02:cd:0e:d6:b1:50:88:a0:db:eb:3c:ca:
4e:39:08:68:f0:14:d6:47:2e:a1:6f:0d:2e:e8:b7:
e6:66:91:78:51:8d:6f:64:de:cc:9d:4d:7b:ca:0f:
fa:e0:5d:e7:ae:e9:6c:21:e6:6e:3c:28:19:18:cd:
63:32:b9:2c:89:24:25:3b:20:25:1a:20:d6:dd:cc:
f1:65:8b:f7:1d:a5:67:3c:3d:c2:71:2f:a7:a8:33:
15:a7:36:08:20:3f:0f:4f:87:1b:80:70:f9:86:a0:
f1:13:92:75:61:54:83:26:31:96:66:2c:ee:e1:44:
7b:07:5d:29:9b:e0:3f:7e:79:cb:49:fb:89:da:ad:
16:3b:e6:1c:30:45:9e:d0:af:c1:e3:ac:1b:b7:e2:
2e:88:bb:79:58:95:ea:30:f3:b9:0c:9b:9d:3b:5c:
00:7f:b0:d9:24:e3:70:b1:4c:87:e3:3a:f9:f2:61:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:98:61:56:F6:BB:18:DB:D0:A5:55:5D:8B:8C:DB:DA:1F:D0:C0:7B
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:44:06:cc:37:e4:04:44:d1:d9:1b:3f:f7:c2:20:6c:1c:9f:
45:44:ce:37:f0:2e:15:5e:a8:4b:5c:cb:28:f4:09:29:09:ce:
3d:40:68:72:34:51:65:74:ed:91:2e:a3:a0:c3:a6:7d:b7:bb:
9c:10:26:83:72:a7:a3:ff:88:03:ec:6e:0c:de:dd:f3:38:fc:
1e:ca:38:27:ed:bf:46:34:92:2c:f0:38:cb:57:9c:72:f5:18:
e5:32:fb:a6:3d:a5:a2:bc:b3:61:92:e5:cc:29:da:45:a0:80:
f6:88:44:f0:43:c2:a1:98:55:a7:40:29:54:9a:60:1f:59:0f:
cd:69:61:09:ac:19:8a:4d:4d:f7:e5:d6:41:71:e8:75:0d:a0:
88:8a:19:3a:75:8e:a8:9c:27:21:5d:f0:48:fd:e7:9e:9e:3b:
e3:da:19:14:ba:18:e0:4e:c1:d3:63:ff:b9:e9:a3:f2:15:f0:
5f:39:cf:58:f2:f3:54:34:14:87:65:27:79:90:23:51:c4:25:
d7:c7:a4:4f:0d:86:61:26:c1:0c:4c:a4:05:6a:6a:4f:97:da:
0c:aa:d6:d3:17:76:22:fc:64:1e:84:0d:ff:c0:8a:34:ee:e1:
97:84:db:33:c2:05:6e:04:fe:7a:1b:a7:bc:ae:98:2a:e9:5b:
5c:60:29:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbA7340LxkUWWGpQHdEbZxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGNkZmEwMTYwMjM5MTcwMzM3YmE2MDkzNGJhMDZlNDVi
OGNkMTEwHhcNMjUwNTExMjAwMDQyWhcNMjUwNTEyMjAwMDQyWjAzMTEwLwYDVQQD
EygxYTk4NjE1NmY2YmIxOGRiZDBhNTU1NWQ4YjhjZGJkYTFmZDBjMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGjgOOMHSq55MVmjG1XBGlZ5Kx40
3fhlRN7Jo3fnK98aC0PWKeNYJvF0c1Se88fNztau6/J+65BAF3aDRhmNXetnR9NQ
EEzu7wowudcCzQ7WsVCIoNvrPMpOOQho8BTWRy6hbw0u6LfmZpF4UY1vZN7MnU17
yg/64F3nrulsIeZuPCgZGM1jMrksiSQlOyAlGiDW3czxZYv3HaVnPD3CcS+nqDMV
pzYIID8PT4cbgHD5hqDxE5J1YVSDJjGWZizu4UR7B10pm+A/fnnLSfuJ2q0WO+Yc
MEWe0K/B46wbt+IuiLt5WJXqMPO5DJudO1wAf7DZJONwsUyH4zr58mHpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBqYYVb2uxjb0KVVXYuM29of0MB7MB8GA1UdIwQY
MBaAFKZM36AWAjkXAze6YJNLoG5FuM0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMt
OGJkM2M2YzcwNGRjLzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMtOGJkM2M2YzcwNGRj
LzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL0QGzDfk
BETR2Rs/98IgbByfRUTON/AuFV6oS1zLKPQJKQnOPUBocjRRZXTtkS6joMOmfbe7
nBAmg3Kno/+IA+xuDN7d8zj8Hso4J+2/RjSSLPA4y1eccvUY5TL7pj2loryzYZLl
zCnaRaCA9ohE8EPCoZhVp0ApVJpgH1kPzWlhCawZik1N9+XWQXHodQ2giIoZOnWO
qJwnIV3wSP3nnp4749oZFLoY4E7B02P/uemj8hXwXznPWPLzVDQUh2UneZAjUcQl
18ekTw2GYSbBDEykBWpqT5faDKrW0xd2IvxkHoQN/8CKNO7hl4TbM8IFbgT+ehun
vK6YKulbXGAptQ==
-----END CERTIFICATE-----
Generated at Mon May 12 00:15:33 2025 by rpki-client