Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
File: pkzfoBYCORcDN7pgk0ugbkW4zRE.mft (raw, json)
Hash identifier: aGHYqTSrO+m9IHjRx1fJdmDsvnQR1UPHQBeKbueOljE=
Subject key identifier: DD:79:7A:C6:35:3F:56:59:72:BC:CB:C7:09:B4:68:07:D5:AF:C6:21
Authority key identifier: A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
Certificate issuer: /CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Certificate serial: 01974BFB0A057D8338947B1033416CE8CBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
Manifest number: 14A8
Signing time: Sat 07 Jun 2025 20:00:32 +0000
Manifest this update: Sat 07 Jun 2025 20:00:32 +0000
Manifest next update: Sun 08 Jun 2025 20:00:32 +0000
Files and hashes: 1: ZSYjjoE3tBto8BluSqunJgk7oHQ.roa (hash: iHTHcMwi7ntDSxANO5civkuDptItJ8z7l7j08RXxzHg=)
2: pkzfoBYCORcDN7pgk0ugbkW4zRE.crl (hash: BTDg/3nHwB1deuyW5HdckyqhlXAT/N4Fi82gu3miMvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:0a:05:7d:83:38:94:7b:10:33:41:6c:e8:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a64cdfa0160239170337ba60934ba06e45b8cd11
Validity
Not Before: Jun 7 20:00:32 2025 GMT
Not After : Jun 8 20:00:32 2025 GMT
Subject: CN=dd797ac6353f565972bccbc709b46807d5afc621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:23:26:7d:5f:13:49:e1:3c:cb:3c:a2:03:
63:bd:11:b7:c7:71:07:eb:18:85:ec:e6:f0:a0:9a:
00:00:c3:65:fa:23:f4:b8:ae:03:29:37:d0:af:a5:
8a:6a:d3:9e:a3:8c:b9:3d:4e:4e:a4:b8:ec:b5:85:
35:10:48:d5:ac:d2:0f:e4:27:b9:f4:0a:b0:f1:0a:
13:92:46:24:97:9c:11:74:f3:9e:99:0c:ec:6f:5f:
a1:cb:6b:d2:c8:15:27:5c:01:b8:34:f0:86:9d:df:
01:83:45:e7:18:ac:9b:ab:ff:2a:4b:f1:02:d4:98:
be:bc:f3:f5:f5:9f:a8:df:2c:21:69:35:c2:71:93:
f9:62:9d:80:fc:85:6d:28:e7:4e:6e:d6:9f:d6:63:
aa:e5:53:02:5c:56:33:70:64:f1:63:a0:a7:73:fb:
f4:b7:c5:26:e2:c2:6e:f5:e5:67:2f:17:d1:5b:a4:
4a:65:09:73:98:8d:1a:ef:c7:ea:c3:a5:c1:ad:16:
4d:37:85:ce:6f:61:5f:6c:73:3a:22:e1:29:71:3b:
f9:ef:5f:3f:ce:ef:52:12:42:b4:39:c8:55:1b:c0:
ba:d6:7b:f3:a0:9e:25:6f:4c:a8:7f:9e:e4:04:60:
10:74:ff:e6:2b:ff:3c:d0:61:36:2e:84:ae:4f:80:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:79:7A:C6:35:3F:56:59:72:BC:CB:C7:09:B4:68:07:D5:AF:C6:21
X509v3 Authority Key Identifier:
keyid:A6:4C:DF:A0:16:02:39:17:03:37:BA:60:93:4B:A0:6E:45:B8:CD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkzfoBYCORcDN7pgk0ugbkW4zRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/75439d-fb06-4b63-84a3-8bd3c6c704dc/1/pkzfoBYCORcDN7pgk0ugbkW4zRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:00:07:9e:44:9e:b3:58:de:fe:b5:e5:e4:3a:d5:66:2d:10:
0a:90:19:db:e0:0d:ce:33:47:f7:e7:e9:bd:7f:d1:47:36:5c:
28:36:32:ce:89:80:d7:33:25:3c:5c:3d:c7:68:5a:d4:aa:e3:
64:d8:7f:12:ee:af:b9:ef:8f:f2:b3:ea:a1:c4:54:28:f2:bf:
f0:1e:2f:02:d3:6b:22:ce:f5:10:fe:60:3d:5a:3f:4c:df:63:
ef:09:f1:de:01:eb:fe:05:b1:27:45:c1:31:80:c6:ec:e0:75:
68:ad:2f:b5:e8:78:58:1c:29:73:f7:97:80:91:49:27:a3:d1:
98:63:4b:87:44:96:4b:9c:6d:ca:6f:75:95:82:19:a1:de:9d:
dc:31:57:c5:40:b5:67:8b:b4:73:f2:b9:76:9b:d1:fc:ae:73:
33:fb:eb:17:25:bd:69:a6:5a:2c:cf:b3:7e:29:8c:47:ec:5a:
3f:69:cd:fa:0b:f5:68:6a:68:97:72:4f:0d:ac:ed:e3:28:c9:
71:cf:5d:c4:84:c5:52:16:c8:88:21:fd:2e:ae:df:62:71:04:
ad:ea:2b:d6:82:68:73:ca:f6:26:fe:57:f0:a2:9e:f0:8d:8e:
dd:2d:21:c7:63:85:3d:02:33:69:4f:2e:e3:d2:b6:d7:91:ad:
7e:b9:2d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:11:47 2025 by rpki-client