Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: La3z9XrbyUFCz7vFfl9/lh6x6Bq81dZ4JChT4BHivxw=
Subject key identifier: DA:14:15:A1:12:79:D3:AB:E8:67:32:8F:64:40:A7:E9:E7:A9:EF:23
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 019848F73C0C23ED9D079AA917ED2E2F1368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 152B
Signing time: Sat 26 Jul 2025 23:00:18 +0000
Manifest this update: Sat 26 Jul 2025 23:00:18 +0000
Manifest next update: Sun 27 Jul 2025 23:00:18 +0000
Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: /oe1Ov6cpuyJw//scSI0z4bz2OUYZD7ZpqlOaPWYLPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:3c:0c:23:ed:9d:07:9a:a9:17:ed:2e:2f:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Jul 26 23:00:18 2025 GMT
Not After : Jul 27 23:00:18 2025 GMT
Subject: CN=da1415a11279d3abe867328f6440a7e9e7a9ef23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1d:62:98:12:ff:0e:0e:dc:3e:47:cd:d0:dd:
c9:9c:3a:b6:a9:9a:eb:10:3f:5f:51:ed:ce:8b:f6:
b4:5a:2f:43:b6:0c:9d:6c:6c:f4:dc:66:a2:c4:07:
e4:1e:5d:bd:dc:9e:d5:83:ab:2e:40:4b:cb:83:92:
d1:c8:7a:f3:61:ad:a3:cd:14:37:1b:1e:49:37:5b:
39:90:6f:f0:8d:b1:56:ec:5e:25:1c:53:0f:63:d8:
75:b2:2e:3d:5c:2c:5b:85:97:b6:13:36:0e:d8:b2:
b6:47:39:7e:68:03:40:2b:9c:38:4a:ae:c8:ee:e3:
69:74:7b:f4:74:12:1c:26:64:4f:d0:0a:5d:65:e2:
8c:a6:2e:60:cf:c8:8e:f9:93:25:a3:ca:05:10:59:
1a:4a:51:bc:83:00:4c:39:4d:52:4d:4f:3e:9e:4d:
37:3e:ce:dd:6c:f6:70:af:0c:90:ea:13:af:7c:ee:
15:c2:0b:e0:c1:ba:85:c7:02:89:01:30:5c:d4:7d:
7d:fa:5b:39:e0:9f:c7:13:de:6a:5e:85:45:3c:fc:
ed:c2:5a:1e:24:14:74:1a:9c:4e:85:95:6d:52:44:
87:41:55:fc:b8:00:28:38:6c:d4:bb:c4:64:03:ad:
19:43:39:ae:02:7a:84:9e:96:61:2b:90:b2:cd:1b:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:14:15:A1:12:79:D3:AB:E8:67:32:8F:64:40:A7:E9:E7:A9:EF:23
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6f:d4:ff:4b:fc:4b:93:74:e2:64:82:a5:84:4c:c0:ba:d5:
b4:d4:41:ba:1b:82:ff:3b:f4:69:17:a0:5b:4d:67:23:b6:bd:
00:bb:ef:12:ad:d6:46:b7:94:e5:9c:be:41:e6:e6:88:f7:9a:
2f:a5:67:a4:56:2a:be:f6:4e:30:09:63:ad:b7:c3:4b:c2:78:
52:c4:17:c9:b0:6d:dd:fc:d0:d2:69:c4:8a:36:db:12:0d:c5:
1a:6d:8a:7d:0a:e1:fe:0b:39:df:35:d7:51:4f:60:67:21:80:
04:06:e2:fd:c1:28:5f:1d:a2:a6:9b:bb:a4:80:fb:c5:ee:ca:
cd:b0:3e:22:b0:66:58:1c:4d:39:9d:e1:2c:88:b3:96:59:ab:
56:24:93:77:eb:e4:a6:69:c0:9b:42:6e:2e:63:55:8c:8d:c1:
11:ea:f9:6d:c3:84:41:fa:7f:5e:e1:76:77:03:fd:98:22:3f:
3c:63:66:0d:4f:64:74:fb:b4:4d:a9:c9:56:1e:14:77:eb:e4:
7b:79:08:c2:93:c8:74:f2:ef:a9:99:f8:0d:3c:62:73:9b:2d:
4a:31:d9:4a:a6:2d:67:e1:d5:05:3a:13:45:75:98:9f:8b:49:
11:44:7b:19:9c:cc:41:75:24:03:cb:50:42:1d:6e:df:c0:bb:
7b:76:e1:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9zwMI+2dB5qpF+0uLxNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NGNkZmEwMTYwMjM5MTcwMzM3YmE2MDkzNGJhMDZlNDVi
OGNkMTEwHhcNMjUwNzI2MjMwMDE4WhcNMjUwNzI3MjMwMDE4WjAzMTEwLwYDVQQD
EyhkYTE0MTVhMTEyNzlkM2FiZTg2NzMyOGY2NDQwYTdlOWU3YTllZjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx1imBL/Dg7cPkfN0N3JnDq2qZrr
ED9fUe3Oi/a0Wi9DtgydbGz03GaixAfkHl293J7Vg6suQEvLg5LRyHrzYa2jzRQ3
Gx5JN1s5kG/wjbFW7F4lHFMPY9h1si49XCxbhZe2EzYO2LK2Rzl+aANAK5w4Sq7I
7uNpdHv0dBIcJmRP0ApdZeKMpi5gz8iO+ZMlo8oFEFkaSlG8gwBMOU1STU8+nk03
Ps7dbPZwrwyQ6hOvfO4VwgvgwbqFxwKJATBc1H19+ls54J/HE95qXoVFPPztwloe
JBR0GpxOhZVtUkSHQVX8uAAoOGzUu8RkA60ZQzmuAnqEnpZhK5CyzRt1OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoUFaESedOr6Gcyj2RAp+nnqe8jMB8GA1UdIwQY
MBaAFKZM36AWAjkXAze6YJNLoG5FuM0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMt
OGJkM2M2YzcwNGRjLzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC83NTQzOWQtZmIwNi00YjYzLTg0YTMtOGJkM2M2YzcwNGRj
LzEvcGt6Zm9CWUNPUmNETjdwZ2swdWdia1c0elJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW/U/0v8
S5N04mSCpYRMwLrVtNRBuhuC/zv0aRegW01nI7a9ALvvEq3WRreU5Zy+QebmiPea
L6VnpFYqvvZOMAljrbfDS8J4UsQXybBt3fzQ0mnEijbbEg3FGm2KfQrh/gs53zXX
UU9gZyGABAbi/cEoXx2ippu7pID7xe7KzbA+IrBmWBxNOZ3hLIizllmrViSTd+vk
pmnAm0JuLmNVjI3BEer5bcOEQfp/XuF2dwP9mCI/PGNmDU9kdPu0TanJVh4Ud+vk
e3kIwpPIdPLvqZn4DTxic5stSjHZSqYtZ+HVBToTRXWYn4tJEUR7GZzMQXUkA8tQ
Qh1u38C7e3bhEQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:26:40 2025 by rpki-client