Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: H3LhzKaqElu4YbcRdZEIyRN5u13QF2xIFCVBktNZE+U=
Subject key identifier: 78:16:AE:12:F0:4C:15:D8:52:18:32:6B:CB:B3:EF:7E:D8:6E:FA:50
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 019846641F70FDE09E8385378E9B3D063E95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 11:00:23 +0000
Manifest this update: Sat 26 Jul 2025 11:00:23 +0000
Manifest next update: Sun 27 Jul 2025 11:00:23 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: vCZ+dVcHyDkq9fRnPXpJHP0HS0pLG+ycYMes52jAG+M=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:1f:70:fd:e0:9e:83:85:37:8e:9b:3d:06:3e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jul 26 11:00:23 2025 GMT
Not After : Jul 27 11:00:23 2025 GMT
Subject: CN=7816ae12f04c15d85218326bcbb3ef7ed86efa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:a9:3d:63:94:3c:27:ad:35:47:ef:b5:ce:
03:8a:94:b6:3e:41:e6:8c:6c:ab:76:5e:99:52:02:
5c:47:0f:97:85:b8:f7:62:2d:ae:e4:be:0c:aa:83:
4e:6e:81:71:cf:4c:05:94:f9:dd:9c:4c:06:96:54:
99:0b:bd:57:0d:bd:6d:42:0c:e8:9f:e1:84:74:80:
9d:72:43:c4:da:3d:02:71:56:15:7b:a8:0a:03:38:
0b:b4:13:46:56:1e:1e:64:21:6e:9b:91:16:be:b2:
45:9d:32:11:35:59:7c:52:6e:2f:7c:b0:85:b8:32:
ac:1e:fb:53:76:50:ef:bb:ff:e1:53:f5:75:4c:4d:
6b:a5:a0:90:39:07:6d:7b:42:18:b1:0e:67:6e:62:
ca:e6:08:a9:20:05:3a:69:b5:ae:3d:8b:13:df:65:
54:64:51:63:2c:28:a4:ba:6b:64:3d:a5:f0:b7:91:
e2:c5:50:fc:fb:a9:78:e5:25:80:66:54:30:d7:11:
81:a4:90:c3:3a:c7:9c:05:f0:7d:fc:ac:9c:fb:f3:
c6:81:bd:f9:b6:27:ef:d7:73:8b:42:e8:63:9d:86:
0e:44:b3:29:c9:e3:80:28:44:77:af:bc:2a:b2:a8:
8d:f1:0b:dd:6b:74:51:ff:97:f2:a7:fc:09:68:f8:
3c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:16:AE:12:F0:4C:15:D8:52:18:32:6B:CB:B3:EF:7E:D8:6E:FA:50
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:89:be:dd:d4:93:6c:88:5f:df:e1:d6:37:2d:ce:8d:43:97:
19:ec:19:1f:7b:9f:05:40:91:0c:0a:8c:c9:e7:c7:82:c5:7e:
41:81:16:cc:a8:90:cf:c9:b0:f0:67:94:fe:ff:4c:17:71:16:
2c:0b:f3:25:78:e8:4c:11:9e:e4:0d:62:85:f7:87:4d:2c:d0:
74:03:2c:80:c5:2c:df:4a:ec:97:ac:1d:d7:48:b6:2e:52:be:
83:40:36:67:64:e5:55:10:1c:d6:fa:ab:7e:37:aa:82:a2:78:
93:04:78:3d:79:41:ed:8c:63:53:29:e8:21:24:3a:a6:43:fb:
a5:75:f9:b0:ec:2f:8e:61:01:15:8b:a0:ee:d8:e2:69:a6:4c:
ff:af:ab:b1:c8:6f:6c:eb:ab:da:78:75:9d:e9:1b:22:4c:ac:
71:7f:db:04:19:fe:eb:8e:67:59:e6:04:9a:83:5a:20:dd:6e:
33:6c:19:33:46:7c:00:19:29:8e:1a:4c:f7:4d:fd:39:71:51:
4a:3f:ca:92:84:c8:90:36:85:31:fe:b4:1f:a0:a8:89:dd:98:
b1:64:ee:6a:af:65:84:2c:7c:31:ef:d5:36:c2:0d:2a:95:9f:
2d:0d:11:6d:5e:26:39:5b:6b:89:ec:e8:3f:d5:e4:86:4d:c8:
89:9d:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:55:13 2025 by rpki-client