Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
File: pz1kDZC_PWfySYE4zDcfZUZH3a0.mft (raw, json)
Hash identifier: dkxuIp2U/k3MOod776Pp15Tpo72Z3v/wywZH8vvV9SA=
Subject key identifier: 4E:AE:7A:1F:2D:5A:BC:6F:90:4C:2C:5B:F0:19:1E:A0:9C:E8:7F:44
Authority key identifier: A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
Certificate issuer: /CN=a73d640d90bf3d67f2498138cc371f654647ddad
Certificate serial: 0199239FBBC3D19BBC78F062EA9332899077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
Manifest number: 106D
Signing time: Sun 07 Sep 2025 10:01:34 +0000
Manifest this update: Sun 07 Sep 2025 10:01:34 +0000
Manifest next update: Mon 08 Sep 2025 10:01:34 +0000
Files and hashes: 1: 5fcpJVl5DXDFgBV-5G0BOvh2tGg.roa (hash: urXegQalP46Ga7kO5s8Ojf4B2voXZNk4EbUTvjtFENw=)
2: pz1kDZC_PWfySYE4zDcfZUZH3a0.crl (hash: lGpgbEOTaQZmwFiPsBCOJwqz5ild2GvhNeHwYLgbSDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:bb:c3:d1:9b:bc:78:f0:62:ea:93:32:89:90:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a73d640d90bf3d67f2498138cc371f654647ddad
Validity
Not Before: Sep 7 10:01:34 2025 GMT
Not After : Sep 8 10:01:34 2025 GMT
Subject: CN=4eae7a1f2d5abc6f904c2c5bf0191ea09ce87f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:6c:76:10:22:e2:84:e7:e7:17:33:2d:92:
23:28:e0:18:74:b0:8b:4f:a0:9b:04:30:92:1d:e8:
9f:e8:19:67:87:1b:fa:7c:28:ee:6b:5f:31:73:33:
6d:ca:17:9b:a0:3b:90:5c:e0:18:9d:b5:bb:37:73:
a3:03:41:5d:94:be:d4:57:a3:0b:11:fa:01:c5:ef:
f4:3d:61:86:1b:b3:56:b0:1b:4c:fa:f9:e7:e2:98:
6d:a9:33:e0:ad:51:d7:90:4c:d4:2c:1a:83:7e:58:
93:64:11:dd:4e:27:28:f5:c6:3f:ea:45:f7:31:64:
e7:84:7b:b0:a2:d5:17:a8:e5:d6:01:02:7c:37:2f:
4b:68:2c:eb:54:4d:01:ec:65:c9:e2:e7:3f:bd:03:
c6:c4:af:93:52:ec:36:c0:d4:73:39:4a:a3:cc:21:
7d:08:66:0f:fe:f5:68:1f:f9:c5:e9:0e:70:23:43:
27:93:19:7f:22:c6:9d:e2:eb:2f:f0:4d:0f:7a:58:
6e:94:2d:b7:6d:9a:cf:89:e3:a3:6e:71:6b:39:6f:
24:6f:b5:7f:6d:ce:9d:fd:cb:44:52:e5:8d:03:51:
45:a2:2d:57:1f:e7:68:31:53:2d:29:09:1c:70:f0:
ca:96:7e:6a:09:d2:64:d5:92:66:3c:a0:ba:24:e5:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AE:7A:1F:2D:5A:BC:6F:90:4C:2C:5B:F0:19:1E:A0:9C:E8:7F:44
X509v3 Authority Key Identifier:
keyid:A7:3D:64:0D:90:BF:3D:67:F2:49:81:38:CC:37:1F:65:46:47:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pz1kDZC_PWfySYE4zDcfZUZH3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/72892a-3bc0-4f57-bc5b-75039750bd68/1/pz1kDZC_PWfySYE4zDcfZUZH3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:07:b5:a6:c9:97:0c:19:56:12:ae:dd:03:68:dc:25:31:b6:
5d:dd:85:e2:e3:6b:60:80:6a:c2:45:50:1d:69:13:30:2f:d0:
3c:7c:fb:9d:20:6a:fc:1d:38:5d:3b:b9:98:91:36:c0:84:05:
31:02:cb:fc:8f:16:cf:71:04:71:b7:54:7e:78:22:76:55:73:
c9:90:ac:99:4e:e6:ef:74:f0:3c:14:64:ba:1a:a8:3f:1f:59:
12:cd:c2:15:2f:4c:61:9c:b1:43:40:52:e6:a5:ef:4a:c2:e4:
d1:44:9e:76:bb:d8:f9:30:64:b2:2d:f9:d0:9f:eb:cc:6e:e0:
71:2c:17:b5:11:8b:e0:ed:da:81:56:19:24:94:d2:d2:1b:30:
21:74:c3:82:24:2b:84:15:dc:0f:bf:46:b4:c5:15:8c:69:e6:
3a:dd:80:25:66:ee:fd:83:f3:35:fe:75:b2:c4:f9:26:5f:7e:
82:9e:12:cc:56:04:88:9c:32:20:58:b0:f9:be:82:5a:89:36:
36:eb:c5:fb:a9:c8:ee:f6:6d:cd:f7:6f:2e:eb:53:03:d6:ee:
cd:36:62:9c:21:98:95:e8:4f:87:51:e4:a3:69:a3:6d:12:d6:
d4:fb:a5:f7:37:62:e4:eb:f0:b2:0d:e7:50:c0:04:12:81:56:
bf:69:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:33 2025 by rpki-client