Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: 21meei7mstAkMtuB5mhfLxtQ6D0SXt8EBhZ2SPQwEYo=
Subject key identifier: 8E:7B:44:A5:80:51:13:52:64:65:7D:2E:2F:67:4C:43:84:F5:C5:10
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 0199FD6B433F108A2DAFB8E19ACD0DDA9EBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 160D
Signing time: Sun 19 Oct 2025 17:01:29 +0000
Manifest this update: Sun 19 Oct 2025 17:01:29 +0000
Manifest next update: Mon 20 Oct 2025 17:01:29 +0000
Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: PNbl6xVGy705/SIqDh3A+d17b5b4sT93tnyoYY2kk6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:43:3f:10:8a:2d:af:b8:e1:9a:cd:0d:da:9e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Oct 19 17:01:29 2025 GMT
Not After : Oct 20 17:01:29 2025 GMT
Subject: CN=8e7b44a58051135264657d2e2f674c4384f5c510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:66:62:5c:fe:e3:b8:d2:83:51:80:cb:5d:
d8:45:db:ce:ba:27:de:95:a4:e3:db:c9:21:02:e8:
64:41:c6:02:f3:17:f5:0c:a2:1f:8e:d2:1d:47:8e:
61:5e:be:e6:43:ed:dc:8f:45:4a:2c:d4:bf:b3:51:
94:0f:2d:08:2d:14:5c:e2:a8:ff:5c:ac:76:38:d1:
15:03:71:ec:98:16:ea:53:69:43:b1:c0:35:dd:25:
1f:f9:18:15:20:2a:81:56:5b:3a:cb:d7:d1:65:96:
0f:f4:04:b2:e5:15:2a:ed:50:3b:67:60:08:91:e0:
fd:7a:6e:bc:12:98:17:21:bf:b2:f2:5e:d1:b5:3b:
f8:91:10:a9:17:be:6d:47:cf:9b:f0:b7:05:d1:96:
16:54:61:99:0f:7f:eb:28:74:9a:be:64:26:f5:b0:
88:7e:0d:30:72:c8:15:ce:a9:cb:98:9d:da:a0:bb:
26:0c:8f:40:dd:91:24:62:51:d0:74:94:60:35:56:
00:c3:96:8b:c1:ca:e3:a6:84:30:dd:58:32:11:d9:
ac:f1:91:71:eb:41:e8:ae:d7:91:11:47:3c:a2:42:
c9:e2:8d:95:47:67:5c:4e:e3:0a:40:8c:f3:e1:14:
41:99:21:34:88:10:cc:10:5a:88:48:9b:59:92:83:
b6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7B:44:A5:80:51:13:52:64:65:7D:2E:2F:67:4C:43:84:F5:C5:10
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c1:51:e3:38:5e:14:a5:e5:7a:26:fa:db:d5:6b:f7:8b:a4:
ea:33:ee:be:fa:d8:b8:61:a4:3b:99:f3:77:9f:5e:a3:b9:ab:
47:6c:c5:95:20:3d:b5:59:38:14:15:95:92:e2:ee:95:2e:9f:
f9:f4:b6:c5:e9:34:ab:c2:49:0c:bc:b3:0c:0f:ab:8a:76:17:
19:cd:4e:f0:3a:7f:9d:16:7b:93:e3:78:b4:ab:23:80:44:0f:
19:76:6f:08:f7:ef:9e:9b:71:a2:81:f9:27:1f:30:ab:ee:bc:
23:c8:8c:2d:63:22:2f:14:f4:c0:27:b8:67:ea:76:a1:b5:1f:
ca:68:ec:f8:57:5f:cc:f8:80:e2:f8:d4:a6:c0:0a:7f:25:bf:
1e:b4:1e:5e:f5:90:1e:c1:78:c2:6e:f9:7f:4d:c9:95:2f:e3:
75:72:1d:51:11:82:08:7e:17:87:24:9f:66:d4:08:ac:4e:87:
ad:8e:ed:81:a3:58:bd:49:b1:f4:63:eb:7e:d8:d7:3d:7d:0b:
e0:63:ae:c6:01:1f:7e:fe:c1:fc:d7:03:e7:cd:e8:66:76:9b:
bf:8f:36:d6:89:07:a8:83:c7:b3:98:04:89:ef:18:84:29:d4:
67:57:c9:ac:e5:e6:57:df:15:3e:9f:0c:ef:4f:90:4b:0f:51:
a4:53:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:17:47 2025 by rpki-client