Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: 7+zwgbNjyjO5z7XVn9wk6v2jdxoc2uXayt+nr8i5O54=
Subject key identifier: AF:1E:21:9B:1E:C6:33:90:0D:C7:03:38:0B:CD:62:1C:FF:E2:14:B3
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 0198D5F153060FE284E6ECB61539E5CE1B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:18 +0000
Manifest this update: Sat 23 Aug 2025 08:00:18 +0000
Manifest next update: Sun 24 Aug 2025 08:00:18 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: 30O1vdBK12tNhhwmM/fVcwBC2TgM6zyzS5hF+OyrgIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:53:06:0f:e2:84:e6:ec:b6:15:39:e5:ce:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Aug 23 08:00:18 2025 GMT
Not After : Aug 24 08:00:18 2025 GMT
Subject: CN=af1e219b1ec633900dc703380bcd621cffe214b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:60:53:a0:e5:4c:9f:08:de:86:03:e7:8d:
19:48:2b:c3:a8:9b:05:a0:5c:28:10:4e:20:ce:2d:
9a:c7:bf:31:2f:ec:9c:0a:6b:3f:09:d9:2a:47:ef:
2d:c4:e9:fc:57:97:4f:fa:73:0d:0c:18:d7:69:65:
3a:06:38:aa:da:7f:0d:09:94:c4:e8:c9:6b:1c:de:
21:46:14:bb:f4:ae:31:57:52:5d:86:07:44:32:9c:
be:28:38:bf:eb:90:ba:7d:2c:7b:ea:1e:6d:6a:20:
8a:df:af:ca:96:fa:b3:83:69:f8:76:c7:97:78:dc:
3c:7d:0f:09:24:b8:f7:c5:76:b2:10:e9:e4:38:5b:
72:ff:cd:c0:4f:a2:de:76:80:58:bc:d9:76:cf:f4:
e0:19:f4:f8:92:a1:9e:18:fe:77:e6:e7:bb:b9:43:
10:66:c8:c4:96:57:f8:a2:94:a5:a2:b0:00:40:b6:
80:6e:60:76:a8:0c:2c:6a:d8:cf:34:50:6f:54:f9:
9f:a6:c2:ee:ac:06:95:27:a0:53:f9:06:10:71:8f:
6b:50:52:28:3e:43:2e:77:df:55:85:ed:40:a5:99:
19:92:bd:30:01:dd:11:51:ea:49:05:f7:2f:0b:96:
7f:d8:f1:06:84:de:a3:3d:67:5c:f5:d9:1f:72:15:
21:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1E:21:9B:1E:C6:33:90:0D:C7:03:38:0B:CD:62:1C:FF:E2:14:B3
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d8:f0:b2:d1:3b:e7:49:ba:75:28:9a:6e:40:de:ba:43:df:
18:cf:32:f5:72:2e:b4:44:59:ef:77:30:69:01:fc:48:c7:c3:
61:8c:04:85:7a:73:5e:99:2c:62:e5:fb:11:3d:c1:29:86:b2:
fa:6a:36:ba:c8:08:34:13:71:90:f3:bf:d1:fb:6a:29:d9:16:
60:35:d0:38:1e:f1:54:91:5e:7e:e9:15:fe:3b:5b:33:93:93:
55:55:10:62:03:d1:e4:c5:f8:d0:7c:60:79:22:90:8c:68:ed:
5f:43:50:a4:02:1e:65:2b:2d:ac:d6:e8:14:90:39:39:da:06:
0f:c4:0f:78:6d:6d:80:d0:57:fe:68:d3:c0:f3:ce:e7:8d:8e:
25:d1:83:34:0a:db:78:9a:19:e2:de:44:fd:5c:d9:82:3a:93:
0b:9b:d1:0d:c6:a3:1d:cd:7e:ad:b2:1a:df:c0:6f:27:62:03:
23:36:82:57:e8:d7:88:b1:eb:2b:7a:31:f2:17:d4:0f:04:f4:
bf:bc:b2:b1:cf:94:d9:e6:8b:8b:71:0a:82:c4:27:74:fe:23:
4e:80:da:26:08:b8:c4:61:5a:e7:8c:ac:4a:58:cd:64:14:aa:
99:13:90:1a:3e:33:55:3f:8d:46:d5:54:6b:58:2a:74:d1:2d:
0f:0d:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:32 2025 by rpki-client