Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: KToHG3oX9W2kar/D1if9fYxQha3mFfxP6qWeAuRDzlY=
Subject key identifier: 72:9B:20:DF:F7:E7:A6:FC:13:AD:5E:4C:34:FE:C6:E0:3F:E4:34:36
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019848C02B3D86C36FD3A9383B340ADBE084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:10 +0000
Manifest this update: Sat 26 Jul 2025 22:00:10 +0000
Manifest next update: Sun 27 Jul 2025 22:00:10 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: 8zeBeDdiTb/XMBGZUTORwJekw5UxDYAOGtnFr9kY2VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:2b:3d:86:c3:6f:d3:a9:38:3b:34:0a:db:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jul 26 22:00:10 2025 GMT
Not After : Jul 27 22:00:10 2025 GMT
Subject: CN=729b20dff7e7a6fc13ad5e4c34fec6e03fe43436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:e3:1e:66:dd:d6:69:79:a5:a9:0f:c8:02:
fb:8b:c4:28:b8:55:7d:1e:36:51:a5:97:6d:6d:f7:
24:c8:73:22:6f:4b:81:7a:3e:25:b5:da:f1:61:1d:
0f:17:80:e5:65:d0:a8:76:93:cd:97:d1:1e:79:75:
43:2d:0a:8c:7a:b8:a2:f5:e1:0c:80:b4:ed:c7:de:
2f:c0:60:88:10:23:43:2e:19:b2:82:34:4f:da:65:
ea:91:df:49:ec:dc:1c:e5:fc:7b:8d:11:ee:ff:5c:
23:04:4a:85:a4:5f:4e:e2:89:d8:5a:dd:ec:11:c2:
19:94:fa:9b:6d:1f:9a:3f:8d:a3:4b:a6:84:8b:9f:
7e:a8:d8:26:e7:99:6a:b5:d0:86:4b:29:f3:4a:35:
7b:fc:d4:75:7e:ca:c6:12:85:ce:a4:41:c4:64:c5:
08:8c:57:21:bf:7e:aa:d4:89:52:8a:c5:bc:dc:ac:
8f:d6:ce:b6:65:d0:c8:72:19:9b:97:c9:81:b8:5a:
65:0b:d8:02:62:07:f5:1c:42:0a:18:a9:83:bf:68:
ad:08:e0:8c:72:15:b1:03:e8:76:32:a9:ad:8c:f6:
7c:1f:3e:28:0a:61:79:71:3d:61:0f:21:2f:5a:6e:
3f:d4:cf:b2:82:45:48:7a:0d:f8:ef:a9:2c:29:c1:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:20:DF:F7:E7:A6:FC:13:AD:5E:4C:34:FE:C6:E0:3F:E4:34:36
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fd:fd:c3:ac:7f:9a:1b:76:ec:c3:3e:f5:3c:0f:6e:0c:e7:
c6:25:6d:e7:9f:84:d5:03:1f:bc:c0:5b:e4:76:78:66:b7:ae:
88:c0:40:ce:bc:81:34:3f:7f:79:08:d1:84:d5:08:db:5b:e8:
d0:5f:7b:a2:1f:92:21:a1:31:38:3e:42:30:0b:6d:3d:6d:a2:
f5:59:1f:69:38:24:7c:a3:db:4b:38:c8:ee:62:0f:f1:dd:b0:
4f:51:cd:f0:82:d4:ea:90:a7:6d:f0:9a:52:85:58:a8:d7:67:
f9:88:f3:c3:a8:52:67:8e:cc:75:42:02:a3:e6:dd:c1:0d:14:
2d:fe:61:64:a0:51:00:06:b8:c4:bc:54:e8:3c:08:25:87:45:
94:f7:84:90:3d:db:91:c3:27:06:3b:fe:e9:aa:1d:6a:2b:5c:
69:49:76:82:9d:58:ab:e4:f0:0e:f8:60:7f:3a:45:4d:fc:13:
54:1b:d2:15:9d:49:d5:48:02:d6:8a:fb:93:1f:b4:1f:ca:08:
dc:84:2e:9a:a7:04:fc:4e:bf:34:1b:e8:d4:78:cb:c6:96:ec:
6f:80:76:bf:81:cd:1a:c4:0d:6f:28:87:0c:25:28:96:cd:57:
10:81:2a:2c:9e:91:33:21:06:6d:4b:02:1f:3f:89:e9:ca:28:
27:4b:f0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:17:48 2025 by rpki-client