Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json)
Hash identifier: wXOuBCAjAUJPeECve0IGxvNVHeWPUBZkk21hrLlr+us=
Subject key identifier: 48:30:BD:D4:21:6B:7B:3B:E1:A8:FD:BA:3E:5F:49:6D:A1:4E:EA:11
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 0197B6A0E6104E5B8440F99916853A4AFA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
Manifest number: 04CA
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: 4boeBlk7o1BaTuZdEOVxwc-y71c.roa (hash: RGuBRtk99FPER/w90B0w3hwMlxFq4HdA7ruV2FfydxY=)
2: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: CGhncI/Tvom0h2ONjmrUMxC7Oni6BeCIhHxdrRUVXac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e6:10:4e:5b:84:40:f9:99:16:85:3a:4a:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=4830bdd4216b7b3be1a8fdba3e5f496da14eea11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:f9:66:57:fa:6b:a4:63:de:54:46:17:13:
bf:24:14:da:f3:20:32:cf:15:bf:e1:62:c2:c6:76:
85:dd:76:1e:2c:72:b3:0b:43:67:84:8f:fe:2a:8e:
93:27:d6:4d:5f:5b:a3:7a:82:e3:d7:ae:01:c1:46:
40:80:04:6a:fe:54:74:b4:e7:15:24:be:87:b6:d9:
3c:5c:ea:fb:a5:22:76:18:79:e5:28:82:60:06:8c:
d2:63:a7:71:35:ee:59:08:8b:dc:b4:37:ab:82:c7:
e7:9f:bf:3f:26:12:4b:e2:69:c0:42:79:4a:35:59:
a2:50:63:51:da:6e:eb:68:c6:ee:94:ca:87:e4:47:
6d:59:84:eb:0d:44:a0:77:5c:b5:37:f6:7a:e8:b5:
ce:4f:39:2c:3c:3f:91:00:48:bc:e5:a3:54:01:c9:
34:58:44:4c:0b:47:7e:64:5f:fe:76:76:d1:d8:4a:
32:5a:9f:1e:f9:b4:0d:bc:bc:c6:97:4d:56:b7:a8:
aa:ed:eb:f8:f1:a0:89:33:7e:ce:49:b5:f6:cc:c6:
bb:68:dd:3d:00:59:6c:fa:ac:73:63:dd:33:74:dc:
b3:03:32:74:b1:48:18:7a:d9:80:01:4a:a8:4e:ae:
18:37:e4:44:a7:78:98:2e:61:13:12:b7:a8:74:ff:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:BD:D4:21:6B:7B:3B:E1:A8:FD:BA:3E:5F:49:6D:A1:4E:EA:11
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4f:3f:ae:01:b8:18:5d:fc:7b:09:f3:25:97:1e:d6:68:ff:
0b:68:53:6b:7e:c4:87:8a:5f:e6:9e:36:58:4f:3d:01:61:ce:
fe:4f:45:00:7b:0e:ee:2c:2a:e8:d2:11:ec:54:72:d8:65:5e:
a6:0c:f7:2c:e5:1b:2e:96:d0:80:b2:6d:00:bc:dd:2a:1c:8d:
12:d8:aa:ad:43:7e:2e:13:d9:f8:d2:21:31:65:2c:f9:65:88:
21:b9:fc:84:18:6a:b6:98:92:45:43:8f:0a:51:e5:56:55:c5:
17:f0:44:41:3a:c3:bf:3c:b0:c3:46:4d:ec:a9:7c:c8:3f:01:
46:5f:63:06:78:dd:81:f0:20:00:e5:c2:4c:13:7e:c7:e5:c6:
48:64:97:57:d0:96:63:e7:ea:3a:74:2a:65:0e:9e:96:ca:9c:
2b:97:ae:59:73:5c:21:1d:cc:2c:4b:80:3d:ba:41:db:42:6e:
54:ac:12:e8:ee:9e:30:5f:7d:f3:83:2f:15:4d:b5:75:b5:17:
3c:08:bc:ca:b8:95:46:43:6e:68:f2:ef:87:59:98:84:cd:44:
e3:fb:7f:dc:ca:5e:d7:d6:61:c3:6e:99:37:43:b4:03:df:dd:
26:40:ad:5a:83:42:98:40:82:3b:9e:96:26:f2:0a:28:dd:6c:
e7:da:71:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:34 2025 by rpki-client