Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
File: PZijti1aux3K9oriP1Me6CJA8gM.mft (raw, json)
Hash identifier: TR/vEJIH6wT9GBRDBM3HChrozc1n+NakfcKmCN/A2ns=
Subject key identifier: A5:18:1E:75:B4:C0:27:4E:68:3B:0A:51:86:89:FA:A0:6E:92:79:4B
Authority key identifier: 3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
Certificate issuer: /CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Certificate serial: 01984966BD827CDB18A63E0C85650EC8F317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
Manifest number: 0EF0
Signing time: Sun 27 Jul 2025 01:02:06 +0000
Manifest this update: Sun 27 Jul 2025 01:02:06 +0000
Manifest next update: Mon 28 Jul 2025 01:02:06 +0000
Files and hashes: 1: K5-cWJf7kTmzFiV3mE-MumP7Txo.roa (hash: d5nxq53iT7Tr8Pdp2k4UnWi9qs3VVT6d+if6Hmi6IVQ=)
2: PZijti1aux3K9oriP1Me6CJA8gM.crl (hash: rxuGJZf1S1/HxuuR0t1J9Z6YCGn5SzQdLv+EA5uzNfA=)
3: _TX8C92dziQpbg1kfvVVdJSGVvw.roa (hash: M6n2mPn45LSDUrpQyadpeXypeAt/8VqRu1J7jMmEfG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:bd:82:7c:db:18:a6:3e:0c:85:65:0e:c8:f3:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d98a3b62d5abb1dcaf68ae23f531ee82240f203
Validity
Not Before: Jul 27 01:02:06 2025 GMT
Not After : Jul 28 01:02:06 2025 GMT
Subject: CN=a5181e75b4c0274e683b0a518689faa06e92794b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:91:d9:ae:a8:4b:ce:b3:e4:56:27:a1:e7:
3a:de:b7:d3:25:ca:d3:32:79:70:57:1a:b8:f3:9b:
e9:f7:1e:1e:52:03:6d:69:f7:0f:79:f5:db:2f:d2:
94:20:c4:96:05:53:f6:6b:f5:05:53:d8:b0:3c:e4:
d0:26:6f:8b:cd:bf:28:10:16:e5:2c:76:53:6e:9e:
81:d9:d3:05:1a:3a:ed:74:38:ad:f6:54:60:78:ae:
56:a2:6b:d1:d8:cf:cd:70:c7:b1:73:59:bd:1e:94:
a5:82:1d:c6:3b:d5:b4:f9:2b:0a:b7:fd:c7:2d:96:
f4:a2:7a:3e:3c:9f:d9:85:75:a6:b3:7b:50:0c:a7:
2b:69:ec:a1:f2:22:03:e9:2c:64:ba:6f:a0:52:cb:
92:6f:96:9f:89:de:c9:e8:0b:ce:bb:47:53:43:2f:
86:c9:b9:1f:32:f7:1a:a5:f8:c6:56:2f:6d:8e:49:
96:b0:83:6c:0f:d6:a7:3f:ad:59:30:c1:cb:70:66:
83:aa:f2:b5:3a:4d:e8:7f:be:1e:75:09:62:15:99:
10:c4:93:87:e3:cc:12:49:8b:53:05:f4:32:0b:bd:
33:3b:77:0b:6f:c2:38:8a:ad:19:75:89:e1:43:90:
f6:73:a9:c5:7d:bf:a7:8d:19:c1:a9:e2:b7:75:9e:
57:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:18:1E:75:B4:C0:27:4E:68:3B:0A:51:86:89:FA:A0:6E:92:79:4B
X509v3 Authority Key Identifier:
keyid:3D:98:A3:B6:2D:5A:BB:1D:CA:F6:8A:E2:3F:53:1E:E8:22:40:F2:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZijti1aux3K9oriP1Me6CJA8gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ac5fdf-5b66-4850-963a-f9b73b3e3eee/1/PZijti1aux3K9oriP1Me6CJA8gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:6d:ae:d1:1a:1f:f4:30:11:3c:78:05:d5:c2:8b:91:a0:
eb:a9:c8:2f:ee:3a:50:76:8f:83:d7:c7:a3:56:85:61:43:09:
95:ee:bd:79:60:70:ed:9b:87:f2:99:1c:42:fd:9a:40:2b:55:
06:a3:2e:12:a3:9d:ee:90:67:e0:fd:e6:13:88:01:2a:78:2d:
91:30:31:d2:7b:70:a9:e7:d2:25:4c:45:0b:6a:c2:f8:cb:4d:
40:0d:39:7a:71:d5:05:00:32:47:30:a5:fc:cc:01:37:96:17:
10:40:00:79:5b:38:bb:4d:4d:69:4d:a2:54:a3:52:d4:e1:51:
a2:16:7d:a4:79:c2:50:81:ac:f1:fc:08:09:78:88:9e:47:e8:
7c:71:ef:c0:74:42:b1:b8:ea:a5:7e:b9:ff:3b:76:35:7a:5e:
3f:f2:7e:e0:2e:12:0d:37:e1:7b:4e:d2:42:06:9c:0b:48:07:
d5:7d:0c:9f:a1:b5:d9:b9:13:6a:4a:27:ab:bc:12:12:96:ec:
3b:8c:71:0e:3e:84:2a:f7:98:6f:f4:bd:74:58:89:29:47:08:
11:53:06:34:e9:a4:32:5d:32:60:a8:f5:79:04:a3:4e:57:31:
f4:1e:a8:c0:fd:22:2d:ae:31:07:5d:e7:e2:da:35:9d:4e:82:
4a:68:fc:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:43:06 2025 by rpki-client