Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
File: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft (raw, json)
Hash identifier: uz5TMitWXLv/ABkMHJgG68SGJD37T0/fH3nSgNFJ2Z4=
Subject key identifier: E4:5F:45:15:7E:7B:88:64:0A:A8:64:9B:59:ED:AC:C1:B8:63:26:0B
Authority key identifier: A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
Certificate issuer: /CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Certificate serial: 0199FBEB6D015F4BFD93CE7CF35B1C33D988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
Manifest number: 0CBC
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: CyEvz68_PuSD2VXrrDfN85-80B0.roa (hash: iumx0jfFgEFRTvhq+tByJZI5kHgTeLx3n+N6ZSqFUeI=)
2: pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl (hash: eUBsOOnH2G4d216YoLwwWnhnsrXJy7HNLan4n/Flosg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6d:01:5f:4b:fd:93:ce:7c:f3:5b:1c:33:d9:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a733bd111fd8cb76f4883bbbcbfda59db66ed2de
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=e45f45157e7b88640aa8649b59edacc1b863260b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ae:db:b1:a5:eb:88:25:8b:db:bd:d9:5e:89:
5c:77:56:08:55:c3:60:65:25:76:0d:9d:fc:df:0d:
f5:be:1f:3f:1b:ae:6b:db:95:24:4b:74:21:18:a1:
52:05:41:8b:7d:e1:d3:fd:25:8e:bf:ac:3d:96:5c:
0c:b5:0d:aa:7b:7a:30:fe:cc:17:86:42:8e:2c:d7:
3f:2d:73:d4:b7:b8:3f:29:10:50:48:0d:8d:2c:54:
1d:ef:ab:67:63:2c:2c:84:1a:e7:1a:36:94:68:e0:
4a:ce:00:df:4e:fe:a5:5d:21:bb:69:b0:b5:9d:05:
e8:fe:dd:6b:72:10:b2:ae:f9:11:b2:14:f1:2d:5a:
31:e7:7f:d3:fd:bc:65:de:12:1c:34:25:93:45:6d:
2c:8e:2c:c5:24:f4:b1:2e:59:f7:9c:d8:2e:90:6d:
42:fe:3d:1c:35:e9:6f:e8:c9:f2:cb:f8:99:d2:7e:
56:00:86:0c:ed:4f:d1:2b:fe:1c:44:77:3c:d9:2e:
a5:b2:85:d1:c5:ad:dc:a9:e5:95:f8:a0:e2:33:0d:
15:88:37:3c:ab:c9:61:fb:0a:50:7b:0d:84:41:3f:
aa:d3:15:eb:2f:20:75:7e:47:20:39:7a:24:e4:b5:
00:cd:90:a5:f4:b5:48:ad:ba:2c:2e:91:8f:9e:4b:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5F:45:15:7E:7B:88:64:0A:A8:64:9B:59:ED:AC:C1:B8:63:26:0B
X509v3 Authority Key Identifier:
keyid:A7:33:BD:11:1F:D8:CB:76:F4:88:3B:BB:CB:FD:A5:9D:B6:6E:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/073b19-0839-43ac-8b5b-08ced92c9770/1/pzO9ER_Yy3b0iDu7y_2lnbZu0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f7:75:9e:f6:4e:21:96:c2:30:d4:21:9a:92:a2:f5:b8:cf:
fb:0f:8a:63:3c:2a:85:97:52:cd:04:77:be:46:cd:79:04:70:
ae:1f:9c:fa:29:bc:84:0f:cf:09:40:ab:35:6a:cb:66:8a:44:
2b:a1:d8:59:7f:8c:59:9b:07:ac:15:5b:5d:ce:72:5e:9a:3f:
9e:8d:b9:84:56:0e:95:cf:65:41:e1:08:74:d6:06:e0:fc:57:
3c:ff:82:9f:52:4d:aa:59:d1:ba:d3:f6:d4:2a:28:df:50:9a:
63:ec:19:80:98:6f:d0:e6:2e:6f:34:17:22:b8:c9:0e:82:b6:
02:4e:fd:d0:9b:a4:02:07:f9:a9:e5:e2:73:14:b1:b5:40:4c:
3f:7c:db:0c:7c:66:84:4c:e2:22:de:3c:2b:c9:ed:55:88:be:
17:2e:22:be:21:13:fc:82:03:48:d1:5b:74:ef:98:6a:35:32:
40:22:ad:67:b4:0d:56:2d:1f:67:11:75:5d:43:32:3a:8f:3c:
87:d1:74:6d:14:18:5d:31:c3:0e:9d:83:28:61:6b:5d:86:44:
97:b7:54:26:af:e6:3f:d2:84:82:eb:3f:81:f2:5f:7f:23:fd:
12:e8:c9:31:2c:01:89:43:3e:b2:09:51:1c:13:01:b5:ea:fe:
a8:6a:3e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:15 2025 by rpki-client