Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier: tx5HGzWjUGfIUd/GDctE22sIsEFkWPdqq6qq+jpBAH4=
Subject key identifier: B0:B3:4F:DC:3C:79:88:07:92:E2:85:2A:E4:E6:82:A4:92:DF:DD:A9
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial: 0197488D1C45764A02BB6A6AF67FF43804EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number: 0F77
Signing time: Sat 07 Jun 2025 04:01:36 +0000
Manifest this update: Sat 07 Jun 2025 04:01:36 +0000
Manifest next update: Sun 08 Jun 2025 04:01:36 +0000
Files and hashes: 1: 5fcpJVl5DXDFgBV-5G0BOvh2tGg.roa (hash: urXegQalP46Ga7kO5s8Ojf4B2voXZNk4EbUTvjtFENw=)
2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: cVjNlsyjb+v5hfsWGu0l8leUh/6Zerl70vqUuetlUuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:1c:45:76:4a:02:bb:6a:6a:f6:7f:f4:38:04:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Validity
Not Before: Jun 7 04:01:36 2025 GMT
Not After : Jun 8 04:01:36 2025 GMT
Subject: CN=b0b34fdc3c79880792e2852ae4e682a492dfdda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:bb:76:9a:5e:72:b9:d3:cd:ac:99:95:81:
e4:fb:fe:04:29:82:4c:f8:d1:ac:bf:2b:0f:62:8b:
08:3c:5f:0f:59:4d:6d:8c:14:de:04:f1:9e:69:c0:
18:3a:e7:1a:10:1b:0b:ef:45:b8:43:44:30:e6:4a:
ef:05:b1:63:b1:ed:6d:93:0f:66:7a:36:2c:16:90:
d8:ba:d4:be:bf:af:33:ad:e0:56:ae:ab:2d:df:b9:
fa:0b:68:14:03:d6:f7:07:40:5b:69:c8:1f:99:f3:
6e:21:13:74:da:dc:63:93:d5:b6:01:22:32:75:03:
d3:49:f8:e9:98:04:c6:f5:a1:89:77:64:0f:8a:af:
78:28:86:65:46:7a:7c:a3:7a:bf:37:7b:e1:bf:14:
fe:70:e0:87:80:4b:15:a7:73:3d:a1:04:04:6c:e3:
c5:dd:b0:51:66:8c:be:a0:92:4b:29:c1:f0:c2:0c:
ee:74:47:22:a6:2c:ad:00:27:ba:0f:16:53:af:b0:
ad:2a:ee:ba:3e:b1:dd:f2:dd:99:bc:80:ac:88:35:
58:bc:5b:ac:14:97:e5:ba:dc:f2:55:85:eb:c7:a1:
d2:1a:94:a4:15:b5:64:0a:6b:8b:14:a7:73:0a:3b:
bb:f7:2b:0a:c9:b5:06:e0:16:4c:83:9c:dc:80:c3:
9d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B3:4F:DC:3C:79:88:07:92:E2:85:2A:E4:E6:82:A4:92:DF:DD:A9
X509v3 Authority Key Identifier:
keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:fa:5f:8a:a6:3a:52:f0:ec:02:2c:ba:fa:19:4b:f5:42:bc:
07:c2:48:a0:7c:c9:59:77:68:07:6d:67:c6:67:c3:b2:06:1d:
cb:0e:25:8c:66:d5:36:fd:17:55:c6:d5:30:89:52:28:65:b0:
78:ac:fb:ba:fc:d8:b0:6d:c8:3d:82:5f:00:16:bf:9b:3f:47:
66:e9:36:e6:fb:34:53:35:af:51:00:64:67:91:a1:d7:eb:16:
0e:43:27:f9:ad:bb:3e:09:29:ae:a0:0f:77:98:35:09:5e:ae:
53:d7:f5:78:6d:a6:53:90:67:d1:76:f5:89:ed:a9:d5:7c:64:
20:f4:b6:0d:f5:84:78:df:3d:98:78:d8:c9:05:36:1b:36:bf:
eb:a3:ad:12:2f:72:65:95:bf:54:bf:6a:5c:4f:02:44:cb:8e:
5b:7d:e8:b0:1d:5e:3d:a7:3a:8a:62:03:b3:37:59:14:71:60:
2a:e2:a0:9c:cc:1c:43:bf:3e:55:71:a0:34:2d:34:2f:4a:3d:
eb:25:4f:e8:b0:bc:6f:d0:38:12:46:30:f3:03:8e:f8:07:67:
e4:f0:e0:82:c9:4f:55:3a:9b:15:c2:b8:56:64:be:de:e6:14:
7c:56:c0:f0:4e:1a:c2:d3:d8:66:5e:58:b2:84:3f:8a:6d:95:
f6:18:b1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjRxFdkoCu2pq9n/0OATvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3M2Q2NDBkOTBiZjNkNjdmMjQ5ODEzOGNjMzcxZjY1NDY0
N2RkYWQwHhcNMjUwNjA3MDQwMTM2WhcNMjUwNjA4MDQwMTM2WjAzMTEwLwYDVQQD
EyhiMGIzNGZkYzNjNzk4ODA3OTJlMjg1MmFlNGU2ODJhNDkyZGZkZGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v+7dppecrnTzayZlYHk+/4EKYJM
+NGsvysPYosIPF8PWU1tjBTeBPGeacAYOucaEBsL70W4Q0Qw5krvBbFjse1tkw9m
ejYsFpDYutS+v68zreBWrqst37n6C2gUA9b3B0BbacgfmfNuIRN02txjk9W2ASIy
dQPTSfjpmATG9aGJd2QPiq94KIZlRnp8o3q/N3vhvxT+cOCHgEsVp3M9oQQEbOPF
3bBRZoy+oJJLKcHwwgzudEcipiytACe6DxZTr7CtKu66PrHd8t2ZvICsiDVYvFus
FJflutzyVYXrx6HSGpSkFbVkCmuLFKdzCju79ysKybUG4BZMg5zcgMOdJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCzT9w8eYgHkuKFKuTmgqSS392pMB8GA1UdIwQY
MBaAFKc9ZA2Qvz1n8kmBOMw3H2VGR92tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHoxa0RaQ19QV2Z5U1lFNHpEY2ZaVVpIM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83Mjg5MmEtM2JjMC00ZjU3LWJjNWIt
NzUwMzk3NTBiZDY4LzEvcHoxa0RaQ19QV2Z5U1lFNHpEY2ZaVVpIM2EwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83Mjg5MmEtM2JjMC00ZjU3LWJjNWItNzUwMzk3NTBiZDY4
LzEvcHoxa0RaQ19QV2Z5U1lFNHpEY2ZaVVpIM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfpfiqY6
UvDsAiy6+hlL9UK8B8JIoHzJWXdoB21nxmfDsgYdyw4ljGbVNv0XVcbVMIlSKGWw
eKz7uvzYsG3IPYJfABa/mz9HZuk25vs0UzWvUQBkZ5Gh1+sWDkMn+a27PgkprqAP
d5g1CV6uU9f1eG2mU5Bn0Xb1ie2p1XxkIPS2DfWEeN89mHjYyQU2Gza/66OtEi9y
ZZW/VL9qXE8CRMuOW33osB1ePac6imIDszdZFHFgKuKgnMwcQ78+VXGgNC00L0o9
6yVP6LC8b9A4EkYw8wOO+Adn5PDggslPVTqbFcK4VmS+3uYUfFbA8E4awtPYZl5Y
soQ/im2V9hixig==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:03 2025 by rpki-client