Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: 6aUDCa9a0//WRnltN4p/mCpAAXv3h1mVQL8s8oryhL0=
Subject key identifier: 33:81:B8:F0:53:82:80:9D:3D:F1:77:C0:21:54:16:0E:E4:1D:4B:DD
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 0198D54E73D83A672793A0E5375F39133931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:25 +0000
Manifest this update: Sat 23 Aug 2025 05:02:25 +0000
Manifest next update: Sun 24 Aug 2025 05:02:25 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: 0si7UdLPHVUdKbGIxo8pf9W2LMFfj4kR00YPSio9vb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:73:d8:3a:67:27:93:a0:e5:37:5f:39:13:39:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Aug 23 05:02:25 2025 GMT
Not After : Aug 24 05:02:25 2025 GMT
Subject: CN=3381b8f05382809d3df177c02154160ee41d4bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:34:1d:7d:13:cf:84:0b:6f:05:fe:75:d9:
df:97:31:3a:ae:4a:a1:7d:72:15:07:39:5a:3d:db:
4d:99:bb:42:cf:94:59:65:38:d2:5e:e8:e0:0b:db:
ca:e5:89:99:d2:50:96:f7:50:27:e1:cb:98:ba:8e:
b8:cb:68:c9:d1:60:9f:3c:24:ba:a4:7a:72:55:5c:
00:9c:8d:68:e8:77:fa:a0:dd:1a:06:fa:aa:ee:69:
0b:c5:df:ba:a6:00:b1:98:e3:9e:e8:b1:dd:ed:fc:
16:52:ac:0d:22:7f:44:37:f6:91:f3:b2:af:35:ba:
c9:e4:27:42:41:78:00:70:31:64:1b:90:36:85:86:
a6:36:b3:88:cc:77:bd:e1:cf:41:ee:d1:ad:bf:3c:
a8:96:a6:75:55:47:e9:57:b0:97:bb:db:0c:db:9e:
d2:38:22:bd:ac:75:2f:59:c8:7b:d8:19:32:d4:4b:
df:0e:94:85:c3:e1:1b:10:9b:a7:a3:6e:25:1b:d5:
de:16:64:13:84:83:7f:45:4f:22:85:77:4f:52:9a:
e8:ed:0f:6b:87:a1:eb:66:3e:5a:bb:1f:4f:2c:2b:
a5:51:b6:0d:c7:a2:74:81:30:d0:be:a9:81:84:48:
e7:ec:a4:02:5e:9b:ae:7c:4a:1e:23:bd:63:54:97:
29:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:B8:F0:53:82:80:9D:3D:F1:77:C0:21:54:16:0E:E4:1D:4B:DD
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:03:04:53:be:dd:0a:af:cb:80:08:7a:2f:fe:c2:4e:e4:c2:
f4:23:26:d7:6d:80:03:81:43:ea:c7:73:96:6b:32:35:22:6b:
51:d0:29:9e:d2:84:94:d8:cf:ee:fc:64:89:d8:b7:53:f3:9d:
58:de:2a:b0:ed:f5:5d:38:b4:28:fb:92:85:49:9d:17:05:6a:
c3:52:bf:7e:61:60:fc:2b:63:2b:0a:ce:c0:84:10:92:3a:3e:
64:a8:03:65:4f:65:0b:1c:30:d5:75:c5:cd:85:8d:3b:ae:e6:
c3:c2:75:20:36:95:3d:87:9e:ff:37:61:68:36:0b:7e:57:fa:
a4:d6:0a:3b:75:a9:a7:06:b0:b2:d8:2a:66:ae:21:35:1b:5d:
79:bf:ee:78:90:9b:85:41:5e:2f:36:94:66:04:c8:d4:f5:c4:
d5:49:3d:22:32:ca:ec:ec:8f:6d:89:06:9b:d3:59:7a:48:e4:
40:27:cc:15:b1:95:6e:84:83:3a:d3:b2:93:f5:89:c7:74:30:
90:77:c8:f8:eb:13:e4:3f:b0:76:5b:a0:90:af:ef:b6:ea:98:
f5:17:8f:b8:a1:d7:30:3b:9c:b7:7b:4a:1b:35:b8:60:38:9c:
6b:54:5b:eb:af:48:52:a7:58:72:a7:47:22:78:40:ef:31:c5:
2d:f4:07:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:16:41 2025 by rpki-client