Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: AzL8ZWE+3qalFkqsWJRWK56Iia5NRKBRdL0PF0l2O1w=
Subject key identifier: 05:5F:26:65:0A:B8:41:DC:62:A4:6B:4A:3F:DE:CB:42:DD:0A:3A:84
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 0196C2A6E6689B7803FF844F327B6E22BBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 04:00:39 +0000
Manifest this update: Mon 12 May 2025 04:00:39 +0000
Manifest next update: Tue 13 May 2025 04:00:39 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: MGBDf1y/FQA3M7d/VTx/K2T5AKDNEKmndTUcOWFGKbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e6:68:9b:78:03:ff:84:4f:32:7b:6e:22:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: May 12 04:00:39 2025 GMT
Not After : May 13 04:00:39 2025 GMT
Subject: CN=055f26650ab841dc62a46b4a3fdecb42dd0a3a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0d:53:b9:ee:05:43:53:29:4c:1b:fd:32:ba:
ff:b6:c9:20:28:31:bb:b6:d2:33:ac:7b:82:b0:b7:
d3:bf:e0:49:64:05:8f:a0:f1:9f:d3:b4:ff:2f:47:
11:8b:34:54:d1:42:d5:86:ef:5e:67:1f:b0:b6:3c:
55:ba:1a:57:3e:78:4d:c5:0c:05:7d:f8:84:d7:a9:
46:83:af:3f:7b:d9:3a:f4:36:c7:c7:16:b2:84:a4:
a6:f3:0a:02:1b:e8:aa:8c:20:3b:16:fd:23:e3:22:
83:d4:ac:fc:e4:c1:10:74:33:55:81:02:7e:69:5f:
08:b7:20:b4:31:ec:5f:2d:29:20:6a:3a:a9:f1:58:
7d:73:1c:ef:96:c5:98:b5:26:1e:38:f6:e3:27:7a:
fe:09:3d:74:ac:ce:a0:19:c1:17:18:34:fc:dc:6f:
c6:b3:19:10:eb:b1:26:09:9d:6d:4a:4f:44:b4:38:
fe:1e:a8:3d:57:53:6a:9d:71:48:37:3f:f5:12:62:
2a:c4:3c:3a:47:b6:46:4c:67:1e:6e:1d:52:55:f0:
47:31:4a:d3:75:71:8f:60:06:df:8d:a7:35:5c:97:
da:25:e8:aa:90:73:59:0d:f1:cd:fe:33:d1:3f:6c:
1b:0c:44:5f:b9:a1:a8:07:59:e1:2c:cc:a2:16:58:
25:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:26:65:0A:B8:41:DC:62:A4:6B:4A:3F:DE:CB:42:DD:0A:3A:84
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6a:23:5d:0b:07:f4:b0:29:f8:c8:ac:e0:69:77:d7:b8:7b:
de:ac:84:c2:39:e1:c3:3d:6f:d1:70:0b:53:6c:6c:73:93:89:
70:c5:91:e3:0e:13:1a:94:b5:c9:97:fb:ee:19:5f:77:59:de:
09:d7:0e:0a:99:8d:cb:50:91:c3:c2:69:fb:77:06:af:7f:3f:
c9:27:1e:4c:15:89:5b:11:f3:d0:89:bd:5c:e5:e6:e2:7a:eb:
3e:e5:75:47:e6:d5:00:43:e9:b8:7d:a5:db:11:86:fc:bc:15:
cc:46:70:7d:74:a6:8a:2e:00:25:19:fb:d1:75:f3:33:20:f5:
16:43:71:59:ca:b7:06:af:9d:9d:34:be:ab:21:4a:7c:0a:df:
58:64:f7:d9:5b:65:13:0e:1f:19:37:7a:c1:83:93:93:8a:4d:
42:23:bb:1e:d4:28:38:6a:3c:48:dc:87:c8:79:af:2f:e2:bf:
7f:69:fa:3d:52:98:0b:8e:87:7e:ca:4a:b0:fc:16:a2:5f:96:
dc:b3:c4:24:bd:90:2d:b1:1b:b5:ae:07:3c:d3:35:90:70:16:
d4:ee:cc:f7:f7:47:ec:a9:47:bd:24:d2:b4:aa:61:b4:df:9b:
18:5f:ca:f1:35:8c:36:6c:5c:8f:9f:77:11:41:17:59:85:ad:
76:7d:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:21 2025 by rpki-client