Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: ko77GMAIZhXIjreTzovQoG/osFpCUYYSUPwXxw03MkM=
Subject key identifier: 20:F8:59:9E:B9:13:B7:55:C4:9A:C4:55:B1:5C:A2:DA:C6:E4:5E:81
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 0199FF22814B8BDE7B4495BA567A1EAD8746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 01:01:15 +0000
Manifest this update: Mon 20 Oct 2025 01:01:15 +0000
Manifest next update: Tue 21 Oct 2025 01:01:15 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: MWh8jBqqvzwd4YFvrvgTNowC8OLXGvOjzmQh//GUwWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:81:4b:8b:de:7b:44:95:ba:56:7a:1e:ad:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Oct 20 01:01:15 2025 GMT
Not After : Oct 21 01:01:15 2025 GMT
Subject: CN=20f8599eb913b755c49ac455b15ca2dac6e45e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:7b:c9:eb:66:96:44:3d:41:dd:d6:d4:9d:
b3:85:13:74:14:6b:ae:99:e2:f4:fd:b7:0a:6c:c1:
4e:bd:d9:35:1c:17:9d:97:5a:a7:e7:20:cd:03:ec:
b3:86:fb:6c:74:88:36:76:86:c8:c9:28:d6:a1:ac:
33:e4:fd:6f:78:37:ba:c2:0f:3f:09:45:5c:ce:e2:
31:7a:a0:68:e6:24:ab:0f:91:53:6e:db:09:19:a2:
5b:f0:18:a7:51:d9:d1:c1:29:fd:d4:72:35:42:43:
18:02:6d:b9:72:e5:a5:c7:e0:5a:e4:1d:d7:ab:f6:
10:eb:32:07:01:37:7e:3a:04:42:ac:a5:b2:47:5a:
9c:3c:a9:8c:16:25:29:38:60:4c:bd:c6:54:0a:c5:
63:ee:d8:0d:79:bc:61:98:2c:d1:5b:df:b2:55:ef:
e2:d1:88:9f:3e:67:09:0b:e8:02:c7:13:b8:d3:66:
71:66:95:13:42:ee:a3:84:c6:45:70:08:17:62:e5:
97:b6:36:2a:49:00:6e:50:c6:94:7b:ce:05:82:ce:
18:50:2c:a5:ef:06:84:e7:30:41:fb:46:a6:6e:e0:
b9:55:bc:82:df:74:d0:0d:7b:c7:77:86:f0:a8:93:
80:7f:1f:fe:fb:76:69:43:04:f0:66:35:a2:9e:ab:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F8:59:9E:B9:13:B7:55:C4:9A:C4:55:B1:5C:A2:DA:C6:E4:5E:81
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:31:17:18:9a:23:01:6b:da:9d:98:d2:d2:ee:9e:36:5c:34:
db:ad:e5:6d:1d:c5:b2:5a:c7:e0:02:99:50:3d:ef:e9:7e:1e:
34:aa:eb:ec:6e:db:5c:f0:df:2e:81:c9:fa:1d:bc:fd:60:d9:
11:ea:d5:3e:c2:48:0f:42:e2:8e:ea:56:9a:e8:41:fd:27:2f:
67:59:b4:e4:3b:3c:e9:e0:41:83:53:64:90:11:8a:61:6f:0f:
87:a2:3d:cb:ca:d6:1c:d3:60:c1:5c:22:a2:11:b4:4f:c9:cb:
2d:dc:55:b6:f0:76:fd:23:fd:c0:00:72:33:c1:bb:6e:22:b6:
9c:38:51:a4:a0:bc:bf:6e:f9:e9:c2:48:f8:c2:f6:49:ff:a9:
40:84:49:2f:e5:aa:42:1d:97:67:df:61:00:6e:2b:1e:99:ba:
fc:a1:01:c2:86:20:c6:3d:33:11:d0:18:ae:00:d3:b8:03:5f:
a7:74:7d:30:34:f0:dd:3c:96:2d:d7:7d:1d:38:50:4d:05:73:
11:28:ab:9c:b5:4f:2b:86:87:0e:fd:20:17:59:aa:d7:a2:45:
3c:a0:41:dc:c8:80:04:2c:46:11:a6:fa:93:3c:11:da:bc:67:
64:ee:21:fa:9a:05:d4:07:0c:46:1f:27:97:a5:f1:a2:da:1b:
3e:e0:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:36 2025 by rpki-client