Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
File: pzh53iWUz91MnkIlVWKBsgjZRhQ.mft (raw, json)
Hash identifier: 1bkvZ4PY+ehDEOGqvoIkxkDaOhQVR3YMEx17lcPS66Q=
Subject key identifier: 41:02:11:0A:35:55:D5:6C:1F:E9:F1:9E:CD:9D:D0:F6:92:06:00:B6
Authority key identifier: A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
Certificate issuer: /CN=a73879de2594cfdd4c9e4225556281b208d94614
Certificate serial: 019845BF4101AC795E0497471DEA188B8803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
Manifest number: 08BB
Signing time: Sat 26 Jul 2025 08:00:18 +0000
Manifest this update: Sat 26 Jul 2025 08:00:18 +0000
Manifest next update: Sun 27 Jul 2025 08:00:18 +0000
Files and hashes: 1: jCdTYmvYMmAVCpwgaEf86kYug58.roa (hash: ztqwVKV63uIGzbrcGebHuh3wlQjH5xZyStSjcOzpGqU=)
2: pzh53iWUz91MnkIlVWKBsgjZRhQ.crl (hash: UsRV5bhy1FOo11Q08p3VF9SbAdlAhbZXJZ5UJvlVIgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:41:01:ac:79:5e:04:97:47:1d:ea:18:8b:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73879de2594cfdd4c9e4225556281b208d94614
Validity
Not Before: Jul 26 08:00:18 2025 GMT
Not After : Jul 27 08:00:18 2025 GMT
Subject: CN=4102110a3555d56c1fe9f19ecd9dd0f6920600b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:74:aa:53:e9:4c:9d:e6:ab:cd:f9:70:d4:
49:f9:bc:b3:7e:48:69:02:46:4c:cd:b9:b3:31:5c:
3c:ed:03:ec:19:52:a2:30:e6:28:51:1f:60:6a:8a:
f4:a6:f0:e4:4a:8c:7f:75:20:e4:00:c0:0c:1c:7a:
1f:19:90:d3:ba:12:0a:b6:74:f7:25:68:84:90:18:
70:fb:57:4b:50:ea:9c:71:0c:f6:40:ca:0a:86:26:
1e:88:6e:c5:92:b4:4b:b9:3a:16:97:51:12:da:4a:
8e:b2:53:71:c2:dd:6b:07:77:69:67:b8:ab:84:52:
d1:a7:e2:b7:9c:f0:c8:6b:41:37:82:78:4e:93:34:
9c:08:14:7f:68:a7:54:d3:d3:ae:a9:de:b0:9d:a1:
4f:57:b6:86:d2:fa:cb:16:15:2f:b8:9d:02:ca:28:
47:1f:c1:7e:a2:3b:fc:73:60:cd:7f:24:e2:61:f2:
1d:7d:5b:fb:0e:e9:16:74:87:9c:3a:95:95:7e:75:
e1:30:49:f6:f8:7e:8e:99:c5:77:67:f8:89:f9:83:
2e:9f:de:e6:7c:c9:e2:a9:4c:26:c3:f2:5f:32:8b:
d0:eb:3c:41:84:36:ac:cf:ef:7f:a4:52:78:0f:bf:
20:f9:eb:43:2f:17:b2:80:2c:f2:3c:e5:9f:f7:e9:
07:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:02:11:0A:35:55:D5:6C:1F:E9:F1:9E:CD:9D:D0:F6:92:06:00:B6
X509v3 Authority Key Identifier:
keyid:A7:38:79:DE:25:94:CF:DD:4C:9E:42:25:55:62:81:B2:08:D9:46:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzh53iWUz91MnkIlVWKBsgjZRhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/dbf185-b087-4b44-8f81-9f7d97c63152/1/pzh53iWUz91MnkIlVWKBsgjZRhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:26:f0:63:98:ee:5b:50:88:75:ce:db:d0:a1:ff:62:fb:a9:
19:41:1b:7f:7c:f2:73:6e:bf:52:f8:2c:9a:be:ce:e4:0e:28:
f7:61:8e:ee:ec:59:00:2a:36:54:e6:a8:bd:e3:eb:08:0f:40:
9e:90:d7:8d:8e:c3:bc:f0:ef:c2:12:b9:94:2b:08:ac:22:3b:
2a:0e:53:27:48:d6:dd:07:25:06:82:49:47:4c:68:4c:a4:f9:
cd:33:b2:f3:46:c7:8e:0e:24:5a:2d:e3:ef:40:21:95:cb:5f:
a1:2c:19:b4:3f:71:ed:66:fa:13:19:ce:b1:53:c0:34:5e:58:
54:06:b4:ba:0c:13:cf:e3:b0:ad:75:3d:30:2d:c4:b3:b1:0a:
a5:3b:e5:3b:cb:98:b8:d0:fe:09:20:06:a6:ab:10:76:71:cd:
bf:08:3e:b6:9d:05:e4:fe:5b:63:12:31:d1:7e:c7:e5:03:d7:
98:77:a8:98:61:5f:76:d1:ec:6a:a8:6b:6f:d1:f6:72:c0:6e:
66:68:b1:19:d9:5a:59:42:9e:8b:4a:be:a8:c2:91:60:05:45:
60:41:54:7d:0b:c8:82:80:1d:57:38:f6:f5:28:6e:f0:34:d5:
45:96:fa:91:3f:e8:89:b8:0c:62:b1:8a:bb:34:a2:d0:81:b2:
6f:9c:64:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:00 2025 by rpki-client