
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: ebXUA5ZIacLhRLEvDPRC4T3JG4c260haNNelfdSA58s=
Subject key identifier: CD:15:21:D2:9C:07:06:8F:66:6C:25:14:76:DC:D3:EB:43:91:E9:0A
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 0198D5BBD80324CC076EFB6158415EE67201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:54 +0000
Manifest this update: Sat 23 Aug 2025 07:01:54 +0000
Manifest next update: Sun 24 Aug 2025 07:01:54 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: eOlA7FaSRAgWeHrGPtPDuNH6TDZEACtkRtMrOHmXo2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d8:03:24:cc:07:6e:fb:61:58:41:5e:e6:72:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Aug 23 07:01:54 2025 GMT
Not After : Aug 24 07:01:54 2025 GMT
Subject: CN=cd1521d29c07068f666c251476dcd3eb4391e90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:73:69:4f:c3:38:72:d8:97:3c:e1:3f:01:f3:
0d:a1:c1:42:7c:e8:81:16:e3:c4:b7:51:d0:bc:83:
7a:39:da:82:e9:6c:e8:cc:a7:dd:28:81:9e:7f:c8:
e5:d2:e4:42:70:61:e3:c2:e3:99:9f:14:0f:05:53:
b8:f6:a9:9a:d9:8a:2d:a9:05:c6:e8:c8:ad:62:97:
8b:b2:f0:51:57:7e:98:6a:b5:36:f8:f7:26:29:e0:
6c:fb:1f:13:00:88:c8:0b:95:c5:00:e0:ba:e0:72:
05:f4:24:fd:00:46:7c:32:64:16:06:c9:26:53:5f:
fc:5a:e7:01:1c:74:ac:66:13:b1:bd:43:42:fc:86:
8a:2c:30:b0:b3:af:8e:31:1d:c5:a5:7b:b9:f1:5c:
1a:b1:c5:b7:6f:b0:94:35:8a:80:b4:e1:c0:ed:76:
f2:e2:57:c7:b5:f9:74:0d:46:d6:7f:af:70:05:2b:
f5:c8:68:1a:a5:f2:cc:65:6a:06:00:08:68:3a:19:
de:4f:8a:83:4c:b3:94:78:65:c3:a6:10:d1:5d:97:
13:1c:2e:62:0f:d3:22:ed:58:7f:41:a9:e7:a9:c5:
9b:ff:e6:61:fc:9a:15:55:43:aa:a3:46:a2:6d:a2:
5c:10:bc:99:34:0a:cb:4f:89:78:ca:c8:e6:67:66:
0c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:15:21:D2:9C:07:06:8F:66:6C:25:14:76:DC:D3:EB:43:91:E9:0A
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:2f:a4:4d:c8:4e:a7:6a:b5:c4:20:73:56:ff:58:d4:4b:
ed:59:79:f9:ee:6b:aa:e4:c0:c5:29:37:53:8d:c1:18:10:65:
48:bf:5c:1e:ee:9c:d3:1a:97:8c:7f:4c:3c:34:7a:f3:38:95:
50:99:b0:15:8d:bb:75:c9:01:41:e0:78:60:c2:1b:0b:c5:cb:
b4:9d:58:33:75:d0:9a:56:63:e7:53:43:2c:5b:8a:92:a6:d1:
b1:9e:32:78:9e:c5:92:ea:5d:aa:7d:12:6a:39:2c:1d:91:20:
03:0c:41:12:a0:e5:a6:f9:0d:38:eb:67:15:0f:82:2f:c7:c6:
21:0a:b0:43:c0:9d:88:61:12:d0:d3:3d:f7:8f:8a:b4:77:9b:
ff:92:0d:c9:85:e6:76:fa:88:6b:30:b9:78:82:10:ed:ff:f8:
8a:15:44:fe:0f:d0:31:fe:11:41:73:49:59:44:86:d0:c9:7a:
ed:b9:77:f5:40:72:a9:43:d3:b2:c9:d3:48:de:af:b2:b3:86:
55:b8:bd:d8:47:07:d0:67:a7:0c:ed:89:62:35:27:b9:ab:8d:
67:8b:56:55:fa:11:b0:61:7c:97:73:05:ec:8a:6f:b1:37:7a:
0d:26:29:01:26:e4:d8:fd:e9:71:f4:6e:ff:ba:62:86:51:9f:
61:a8:7b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:30 2025 by rpki-client