Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File: PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier: iWsZcc15Uv3uiHbjQaqpygbvZBuKxGkmIwRL46YWiT8=
Subject key identifier: 2D:F5:3E:3A:1B:66:EE:D1:DF:53:29:52:D7:A5:41:9A:47:40:2D:AA
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer: /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial: 019848894A3D7A23C8BE92EEFC3DC35B631C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number: 0B1D
Signing time: Sat 26 Jul 2025 21:00:13 +0000
Manifest this update: Sat 26 Jul 2025 21:00:13 +0000
Manifest next update: Sun 27 Jul 2025 21:00:13 +0000
Files and hashes: 1: 4HFAWmQXrJvJPwvQ-nacdREAjwA.roa (hash: smesMzM3abS3/IiONa1NHYIBIDWL+noqBcVPlJGz8P8=)
2: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: QYDuiQiNHfZlPzQdGz3mVut0Q2261g3s884F/pyB8PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:4a:3d:7a:23:c8:be:92:ee:fc:3d:c3:5b:63:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Validity
Not Before: Jul 26 21:00:13 2025 GMT
Not After : Jul 27 21:00:13 2025 GMT
Subject: CN=2df53e3a1b66eed1df532952d7a5419a47402daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:fb:dc:c0:7b:08:40:80:20:55:ae:32:aa:
e3:6c:23:0b:0f:82:4b:e8:b4:46:3b:93:eb:9e:20:
0e:8c:b6:26:9a:fe:3c:a9:c2:89:22:4d:67:5c:7d:
46:35:f9:aa:64:13:e6:70:44:ca:e1:20:f3:9d:2d:
b7:a7:3a:3d:5a:e3:63:c6:cf:8a:5e:e6:90:13:7a:
84:cf:c0:5f:3d:d0:16:31:71:95:b0:99:5a:93:e8:
d6:b0:25:66:a9:1d:23:60:6a:4a:5a:41:5f:b9:e3:
1f:a8:a5:e1:c4:59:02:f9:d8:40:91:e8:2d:1a:99:
60:49:2e:68:f3:05:05:65:5d:d8:e9:99:1a:96:65:
c2:71:73:50:22:07:d6:28:77:a1:5e:93:ed:c9:52:
e8:75:84:79:8a:f5:88:e7:49:8f:f5:f5:45:a5:5c:
67:f1:98:ee:b1:08:43:3d:0f:df:86:97:7f:e1:e9:
b7:8d:22:58:5f:09:38:44:44:d0:6d:d0:fe:21:d3:
7c:7b:53:84:de:83:8f:ab:84:ed:07:6b:ee:d0:49:
01:e3:7f:b1:b1:13:46:b5:95:ba:d9:bf:c3:5d:6d:
98:a6:87:94:e4:99:dc:41:0f:75:84:c6:da:f1:be:
e8:70:39:33:cd:95:ae:85:a8:8a:d9:81:6e:03:96:
9f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:3E:3A:1B:66:EE:D1:DF:53:29:52:D7:A5:41:9A:47:40:2D:AA
X509v3 Authority Key Identifier:
keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f9:9b:b8:c0:d1:b6:d2:91:b6:41:e2:a3:51:3f:a5:91:08:
d6:ad:26:89:98:f1:38:2f:2c:0b:77:4b:a9:0a:f5:73:d8:a2:
18:84:33:f2:e4:85:c3:f1:9b:8f:bf:b4:f2:aa:06:f7:8f:9e:
b2:4a:04:24:03:e7:c1:02:55:71:d8:cb:26:18:82:1d:c0:4a:
91:ae:b7:61:f7:ca:9d:c6:0d:1d:0e:7b:9b:1c:1d:9f:3c:54:
c0:14:a3:5d:3d:43:cd:4f:6d:b2:dc:00:cc:e8:c4:ad:97:86:
e2:cb:9d:d4:2c:8c:70:f5:20:b3:75:51:bd:ce:44:c9:14:fb:
6a:f0:6b:d2:54:c3:2c:f0:c5:11:40:27:2f:99:39:e7:fa:5b:
b8:d4:20:37:e4:64:02:62:d7:f4:13:32:f1:a9:c9:6b:58:78:
74:50:8c:59:33:91:a8:7d:7e:6b:fb:84:47:3a:5c:d6:b0:a6:
d3:5e:f4:83:6f:b8:d4:c0:ac:40:2f:e1:a4:dc:cd:75:99:f3:
fc:88:36:ac:b3:ad:81:d1:6e:da:d2:a7:ff:e9:53:48:76:de:
8e:b7:de:55:6b:a4:ee:81:b2:ac:d9:da:d8:07:40:75:c5:6e:
f5:62:54:82:e0:3b:94:d8:2c:61:9c:3c:1b:39:8e:6a:0a:62:
dc:9e:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:37:06 2025 by rpki-client