Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json)
Hash identifier: OahjumKsR8JmNOsDDfSi9RGjarVxKcztTLdMDn4B5tU=
Subject key identifier: 1B:3A:26:E9:C5:BC:B7:B5:57:8D:91:2E:35:88:D3:99:5A:04:5E:4C
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 0198D65FD7BF8D88B243DFF4C8143120D75E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
Manifest number: 055F
Signing time: Sat 23 Aug 2025 10:01:02 +0000
Manifest this update: Sat 23 Aug 2025 10:01:02 +0000
Manifest next update: Sun 24 Aug 2025 10:01:02 +0000
Files and hashes: 1: 4boeBlk7o1BaTuZdEOVxwc-y71c.roa (hash: RGuBRtk99FPER/w90B0w3hwMlxFq4HdA7ruV2FfydxY=)
2: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: Mx9crXqSKItVL7zbBr/iC02Aea3/UG+g7sexJVWLQKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d7:bf:8d:88:b2:43:df:f4:c8:14:31:20:d7:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: Aug 23 10:01:02 2025 GMT
Not After : Aug 24 10:01:02 2025 GMT
Subject: CN=1b3a26e9c5bcb7b5578d912e3588d3995a045e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:13:0c:d2:7d:6a:53:9c:63:7d:b0:f3:be:69:
7c:8f:d0:34:7b:71:80:ff:8b:0f:e8:3c:0d:23:cc:
df:71:c2:99:d9:b9:cc:d0:60:25:9a:eb:0c:78:b2:
91:2a:4e:9b:6c:78:d7:c8:4f:e3:3e:06:4a:7f:29:
53:bb:98:90:86:9c:20:fd:2e:29:c0:fb:3c:9d:3f:
83:b8:f2:cd:f8:17:e2:5c:d2:e7:a0:b7:eb:0e:41:
25:a3:43:ee:90:5f:37:12:f9:b2:f3:8e:c1:ca:24:
ee:18:99:ee:b1:d3:0d:b5:7e:e4:5a:55:e2:57:00:
fd:b7:74:d9:d5:7e:43:bd:1b:72:72:31:14:16:56:
36:5f:07:be:b7:38:c3:44:6f:d3:71:90:3d:ee:20:
98:56:52:2c:60:59:4a:1d:33:ba:a8:2b:1b:20:69:
52:74:f2:d3:0c:eb:a8:f3:2d:3a:4b:d5:2c:48:a7:
36:ee:b7:ba:6f:6c:f5:e1:17:02:7d:b7:9c:d7:0e:
64:3b:0a:54:6b:e2:02:af:3c:b7:5a:bf:0e:af:9d:
6d:7b:31:ec:36:46:f5:f0:cc:24:6a:b3:fb:ee:93:
de:4d:d1:86:25:70:e8:0c:6e:cb:a7:7d:f1:70:9c:
05:a8:f6:3e:e3:bb:ae:de:c3:dd:6c:ed:27:b8:6b:
cf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:26:E9:C5:BC:B7:B5:57:8D:91:2E:35:88:D3:99:5A:04:5E:4C
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:01:40:e8:55:6f:b5:0f:23:34:1d:b0:4b:36:83:25:61:f3:
c3:35:97:40:09:f7:e4:64:a6:d0:5c:f9:af:11:48:d2:7a:46:
44:7f:58:31:9f:d1:03:f2:37:8f:14:29:0e:b2:6a:8c:95:b8:
ee:30:8e:6c:4b:f8:40:7a:a0:b9:f6:0a:b6:0f:7e:83:e2:55:
42:12:c9:de:73:ef:87:f7:9c:73:21:66:37:49:ed:71:17:ee:
d2:6d:bd:91:0f:04:fe:a7:2a:eb:10:3c:75:30:7a:30:23:2c:
9e:21:0a:69:7c:03:af:ad:7c:5e:0d:f9:9f:1c:f3:7d:37:30:
1f:ef:fe:8b:da:16:c5:f1:af:28:04:28:7e:73:2a:dc:81:1c:
0e:61:9b:45:94:59:f8:0b:59:e6:29:a5:d8:44:bf:c8:08:a6:
29:4c:5a:1f:e6:d9:dc:6a:67:f4:4e:e1:e5:15:cd:e6:8f:ef:
e1:72:41:a7:4d:2e:5c:a9:e7:35:c7:25:45:b7:4f:2f:66:bc:
23:ea:b4:8d:b2:b3:c0:bd:84:cb:ed:5b:a2:de:51:0e:a0:bd:
cc:e4:3f:7f:53:07:44:5f:2b:e4:f8:10:fe:16:da:28:c0:c5:
29:b4:1a:c6:9c:b2:0c:54:bb:cb:87:17:5d:ab:6d:51:ae:71:
84:57:19:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:23 2025 by rpki-client