Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: 7XtxhBdV+GSGwYh5sw7D26pDpuhh4rm30f/pCodVHio=
Subject key identifier: E0:8D:A6:2D:AB:11:84:F4:C1:C5:12:E4:C4:A8:D1:8B:07:C5:B3:26
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 0197C8023729D151F99A299D9F699AC9298C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0B98
Signing time: Tue 01 Jul 2025 22:01:17 +0000
Manifest this update: Tue 01 Jul 2025 22:01:17 +0000
Manifest next update: Wed 02 Jul 2025 22:01:17 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: +/V4J/8cf/pwlwJiUu+d5hzxU0xyxKOxYcOFHrXd6GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:02:37:29:d1:51:f9:9a:29:9d:9f:69:9a:c9:29:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Jul 1 22:01:17 2025 GMT
Not After : Jul 2 22:01:17 2025 GMT
Subject: CN=e08da62dab1184f4c1c512e4c4a8d18b07c5b326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:29:56:ec:58:3c:e3:dc:b3:ea:8c:05:01:
60:d5:15:1f:6f:9f:48:88:1c:5a:3e:ee:7e:64:3a:
51:d5:0d:37:b3:cf:ae:47:5e:ec:f6:42:ab:6d:49:
73:94:0f:c2:b1:91:44:02:16:44:6f:0f:c1:cd:35:
61:48:23:5a:9e:b8:6d:8f:bc:66:cd:4d:7d:04:b3:
7a:7f:44:0e:62:ee:24:4c:99:e5:4d:ab:88:37:16:
41:72:f6:88:5e:b9:6b:0a:63:a5:d9:f1:10:5c:44:
f0:8f:11:60:58:ab:e4:d0:c4:92:bc:99:11:a1:81:
6f:d3:ae:69:a5:5e:81:a1:b7:3b:bb:e2:ea:5a:a0:
fa:d7:ac:1f:d2:1b:23:87:d9:9b:0e:ab:e2:e6:21:
e4:ce:82:28:91:b8:9e:2a:22:81:f2:f7:0f:2a:5e:
af:05:35:dc:0b:a7:2d:85:77:fe:2f:35:a2:40:3a:
70:ea:d5:49:4c:61:08:11:7c:30:1a:d8:73:bc:af:
22:a4:30:fd:33:2f:1f:57:89:d0:3c:9d:44:e8:5b:
5e:54:41:a0:17:77:cc:55:70:58:05:71:c2:11:eb:
92:a8:1e:41:98:55:2b:a5:e8:38:c8:72:1d:06:7f:
19:88:82:2f:d9:0e:e1:98:b1:4f:7e:4d:aa:1b:9c:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8D:A6:2D:AB:11:84:F4:C1:C5:12:E4:C4:A8:D1:8B:07:C5:B3:26
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8a:d6:f1:e9:11:6d:b0:98:d1:6c:88:67:9c:f5:54:54:22:
da:d0:3c:77:24:90:bb:f7:77:e3:88:d2:6f:67:2c:f4:e6:1c:
d5:e7:e4:16:ea:37:02:fb:43:f4:4b:01:44:0d:b2:36:3f:02:
3d:08:5f:74:15:d9:c3:0b:8f:00:93:78:d8:88:b3:d5:5d:1f:
62:05:31:ff:f9:db:ac:86:04:6e:3b:cf:bf:d1:b2:94:56:8d:
aa:ec:0e:3f:1a:85:d8:54:cc:39:e9:60:52:47:f3:7a:72:f9:
27:65:4c:dd:8d:2a:a1:91:87:74:89:89:63:f9:62:a1:ad:51:
3b:5f:db:d3:cf:72:34:f9:f4:09:0c:38:e1:81:ec:a1:94:d1:
a4:6a:89:8f:29:56:34:bc:db:32:70:21:36:24:8a:92:b9:5d:
bb:1c:f0:94:a8:5f:b3:21:fb:5b:f0:ce:41:fc:e9:96:c9:ee:
aa:74:8c:5a:14:b1:eb:90:c1:e9:0c:d2:52:0e:07:09:e3:bc:
e0:a4:4f:bc:b3:f8:bf:e3:56:78:e9:f7:64:ea:e3:4e:e5:f0:
59:c2:8a:cd:92:24:e5:d2:c3:79:85:ec:50:db:1f:15:73:33:
01:b6:bb:03:e5:b2:7b:c8:76:a4:87:e5:f9:da:16:dc:0b:1f:
67:30:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:33:58 2025 by rpki-client