Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: XHh9xXkoxO3PQJWEBDefD2WduQ1Vsg6a+YS/lOcRiPI=
Subject key identifier: D5:8F:88:06:7B:4E:FF:FB:80:0F:F7:AA:17:7C:F6:68:AE:3D:C7:FA
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 0198D660340D73E41D8C159ACD55176002C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0C24
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: KmlFjSbyEUjo6GNvJq2wkzcZUQb81mBH/SLALgwSn+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:34:0d:73:e4:1d:8c:15:9a:cd:55:17:60:02:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=d58f88067b4efffb800ff7aa177cf668ae3dc7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:ed:2c:76:9b:e4:56:b8:7f:50:2a:fa:a5:
6e:04:74:7f:dd:22:a0:41:ae:2a:3f:fc:15:70:b6:
51:74:72:39:14:27:48:b8:42:d4:5a:18:87:d0:2f:
86:16:4f:8d:ae:87:67:96:d7:fa:bf:b4:35:06:e3:
27:5d:8e:e3:81:e6:f3:1c:ac:90:7b:9f:a5:83:3f:
98:96:5f:b2:bb:61:75:90:ba:35:51:59:32:8e:a0:
79:01:53:4b:eb:f9:b8:28:b9:8c:c1:8a:bb:aa:31:
1c:27:3a:d5:ec:f7:ef:11:c1:28:ab:40:9f:f3:93:
23:b1:6f:45:b1:29:a3:a7:4f:30:43:23:9d:1c:d7:
3c:38:9a:f8:09:e3:e6:de:e6:17:e8:1b:c1:38:00:
9f:78:15:9c:56:ed:80:bd:53:ac:26:a2:54:b3:d5:
2e:39:5e:12:a3:22:26:1b:1a:50:ab:9a:06:7c:6f:
d4:a0:c5:83:07:01:e6:c5:fa:98:1f:5c:68:b4:98:
aa:70:34:4b:ba:40:98:d7:e4:37:c2:aa:65:b5:68:
e6:c9:b7:46:bd:fa:a1:73:d9:1c:f7:be:a7:1f:f4:
62:1e:c3:0d:51:f4:ac:6a:fe:6f:2d:ac:3e:ff:55:
b2:d9:d0:60:99:6d:f6:33:98:b6:07:33:01:9f:63:
a6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:88:06:7B:4E:FF:FB:80:0F:F7:AA:17:7C:F6:68:AE:3D:C7:FA
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:be:58:f4:38:1b:31:5f:dc:48:d2:ee:ff:b3:c1:aa:14:43:
75:65:4b:34:77:82:24:ba:49:eb:35:14:e2:b7:5a:e6:09:bd:
da:73:3b:5a:7a:08:96:04:50:b9:d7:e4:fd:97:e4:9e:b1:96:
77:a5:ca:fe:d6:48:e4:58:cc:ca:b1:f1:f5:5c:64:41:d7:1f:
d7:71:db:48:3f:50:6e:b0:60:72:69:23:d8:50:0b:43:3c:3e:
4a:b7:a0:22:b8:c2:7d:04:b6:c8:d0:27:a5:aa:25:fc:72:a1:
a6:bc:16:f3:21:71:7c:66:90:a2:72:fa:6d:bb:77:af:b7:64:
3c:e8:4e:e5:e2:b9:d7:87:97:52:9f:4d:8c:d4:cb:9f:9e:44:
75:7e:ee:41:be:5e:b3:63:09:1f:07:cb:0c:52:f7:a1:08:c9:
e8:46:9d:4b:a3:0f:94:fb:d0:53:9d:05:56:47:32:a0:7e:65:
6a:f2:51:74:94:81:83:f1:d2:f9:80:cf:89:b8:e9:59:f1:54:
a0:ec:a6:48:7b:98:c8:40:e4:41:9d:66:c3:92:1a:36:a5:df:
92:03:fb:0d:99:a1:72:ea:92:7b:8a:dc:4a:b9:9d:9c:72:7e:
9c:d7:d5:56:8a:d3:d7:02:22:ce:56:95:4c:b3:33:3d:83:af:
88:9f:ee:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:38 2025 by rpki-client