Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
File: PzTUjYQaUqQifUn6PvhbpavyIkg.mft (raw, json)
Hash identifier: X4ebxjqN+XMjP4N7hqiB1XnOZHjbTtZMieJFsdg4TWE=
Subject key identifier: 61:93:EC:C3:9A:97:95:3B:B0:3C:5B:CA:0E:61:CD:61:EF:D0:86:04
Authority key identifier: 3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
Certificate issuer: /CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Certificate serial: 0199FC21C58976C9A1870886AFB017A5B11F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
Manifest number: 05F8
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: 3AeTUsXDpEDl-IBh12u95RTXsxA.roa (hash: xYJhYHzSW71ucg3KnoWi7bZYFU9f0FjUJ5BTtmWX8vQ=)
2: PzTUjYQaUqQifUn6PvhbpavyIkg.crl (hash: n4D4pg2oTMtX198X69kLDoUtgTz9ENc8sspQuhU7Ydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:89:76:c9:a1:87:08:86:af:b0:17:a5:b1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f34d48d841a52a4227d49fa3ef85ba5abf22248
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=6193ecc39a97953bb03c5bca0e61cd61efd08604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:ed:20:eb:6e:52:86:68:59:39:3f:c1:62:
42:95:c7:60:b3:33:6c:55:21:e7:64:2d:7f:2d:c3:
e5:4f:9f:51:dc:1e:c1:02:75:b7:d4:58:36:07:24:
83:65:bc:cb:b3:8e:4e:c5:36:bb:17:41:75:f8:c0:
96:b4:a9:9d:30:a0:a4:68:d4:44:4d:b5:da:73:e0:
e0:0e:59:eb:93:ec:a3:4c:ff:9d:65:9b:2c:c5:af:
ae:3f:0c:4d:36:6e:5b:21:96:a1:ff:e3:16:0f:52:
d6:90:34:aa:70:76:5b:e4:79:cb:9a:f3:22:b9:58:
e3:f1:da:39:3f:84:ee:b2:ee:0d:d8:40:f0:0f:a4:
ad:07:f2:b6:b5:29:ce:ed:93:5d:6f:14:59:e2:ed:
b1:1c:1c:ef:e4:4b:2a:f7:0f:f3:67:dd:ce:e7:0c:
f7:08:76:92:e0:28:ac:4c:2f:14:63:fd:05:70:43:
ea:1e:ea:61:16:59:f6:30:0f:d7:09:fc:92:c7:7a:
4d:c2:0f:65:f4:52:57:4f:8f:1e:69:28:af:78:46:
6e:3c:f6:4e:02:4e:aa:33:f6:9d:f1:22:0b:a9:1c:
fc:23:0f:3b:d4:38:16:a4:2f:25:ca:ad:55:82:e4:
07:71:28:4f:c2:f6:47:17:f4:fe:ac:87:23:96:ea:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:EC:C3:9A:97:95:3B:B0:3C:5B:CA:0E:61:CD:61:EF:D0:86:04
X509v3 Authority Key Identifier:
keyid:3F:34:D4:8D:84:1A:52:A4:22:7D:49:FA:3E:F8:5B:A5:AB:F2:22:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzTUjYQaUqQifUn6PvhbpavyIkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/eb7037-deed-4a23-b3a4-0458c15cfd0b/1/PzTUjYQaUqQifUn6PvhbpavyIkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:64:03:fe:6c:f6:7e:40:f1:42:dd:47:96:26:da:13:b7:01:
cf:9f:f6:0b:b6:bc:42:ab:70:9a:e7:43:4f:81:1b:62:a1:98:
58:51:00:cc:34:47:de:4f:4f:6a:ea:96:e7:f7:9e:70:7e:52:
8d:b7:62:3e:72:30:9a:32:35:2a:be:00:7f:a4:64:00:55:5a:
22:23:7e:8e:6d:dd:5e:2b:14:6a:bc:2c:a3:28:7d:6a:f3:a6:
58:0a:73:ab:67:d9:8e:62:c2:44:d0:72:83:e3:17:bf:67:45:
bb:6b:97:74:21:d9:5c:24:f8:4b:11:d8:7b:c4:75:36:48:2f:
0e:27:94:78:0e:39:ca:52:a1:9f:c2:09:87:f3:f0:10:45:86:
8f:1f:f2:02:e2:23:1f:10:ac:d7:83:93:dd:f3:50:74:14:44:
82:17:cd:0e:e2:c3:bf:1a:7b:ad:18:5f:a6:87:26:64:7d:b1:
fe:5c:f4:d8:a6:41:f9:75:98:85:33:ef:02:c5:f3:51:03:96:
10:06:b4:d9:b9:40:ba:97:22:e3:e1:61:ee:46:36:c3:8f:87:
90:d1:d8:90:ad:a2:27:aa:1d:4e:d2:f8:fe:6d:20:5d:9c:12:
04:f7:5b:82:7f:03:44:28:1c:b5:cb:8c:ce:46:7c:ca:de:e4:
88:ba:38:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:56 2025 by rpki-client