Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
File: PZ--FcPNteA0NeJM9i8W-2xiOWw.mft (raw, json)
Hash identifier: paLlhQly9W2rN0XvIlxm50c+dCaAc/CfAyaxusOEF9A=
Subject key identifier: 96:CE:E3:33:CB:9B:53:E4:80:09:6A:70:E1:13:B6:CE:6B:08:50:1D
Authority key identifier: 3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
Certificate issuer: /CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Certificate serial: 019747E7B736294233DD945876F8BD8EC51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 01:00:57 +0000
Manifest this update: Sat 07 Jun 2025 01:00:57 +0000
Manifest next update: Sun 08 Jun 2025 01:00:57 +0000
Files and hashes: 1: Du4r0IcScgI4YpWJ-9I9INdoB6g.roa (hash: 5uHGYRf/yqBocoz7nK2AWJUng6JU07jGh7qJ3ZcIHek=)
2: PZ--FcPNteA0NeJM9i8W-2xiOWw.crl (hash: LzE09ufw6RzTWcuNxmj9BDiMY8EwTKUgEnDEiZDJKG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:b7:36:29:42:33:dd:94:58:76:f8:bd:8e:c5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9fbe15c3cdb5e03435e24cf62f16fb6c62396c
Validity
Not Before: Jun 7 01:00:57 2025 GMT
Not After : Jun 8 01:00:57 2025 GMT
Subject: CN=96cee333cb9b53e480096a70e113b6ce6b08501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:a2:22:2a:2a:0b:cd:cf:6d:6a:e4:1a:87:
26:14:eb:6c:88:47:4a:ea:68:56:59:71:05:83:de:
77:0b:22:0d:f4:3a:e7:ff:a4:04:5e:9d:ec:6e:15:
3d:02:ed:49:82:7a:88:69:d8:f2:59:c4:f2:8a:c7:
34:cb:94:b5:7a:2d:07:a1:3e:65:c4:88:98:1c:6e:
6e:33:34:0e:3c:b6:ac:a7:d6:57:bb:cb:fd:c1:b6:
9c:a2:e7:00:e7:97:ed:11:4f:63:a2:cb:cd:01:da:
15:65:d3:61:e1:84:77:38:f2:de:29:47:6a:e8:93:
46:b8:44:7b:15:a3:92:f7:1d:3e:31:b5:b3:4d:49:
1c:f6:e2:82:a2:45:26:97:97:2f:91:ba:31:39:d3:
6f:82:28:cb:9b:a4:16:e1:25:bc:68:77:26:f6:45:
93:2d:85:0b:8b:db:0a:ea:cd:0d:ce:87:74:1c:a9:
63:c8:0c:36:bf:fe:3c:4d:e9:ab:54:3e:5c:ae:78:
f7:2a:28:4d:b4:92:c1:74:0d:61:9e:3f:cf:37:5c:
2a:03:f4:9f:b0:68:b6:c3:e5:0f:8f:66:62:3a:52:
8c:78:4a:fe:2a:81:c7:21:19:32:f7:90:88:af:1a:
e8:40:6b:ab:00:fa:fb:c2:9f:57:80:18:dd:a9:26:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:CE:E3:33:CB:9B:53:E4:80:09:6A:70:E1:13:B6:CE:6B:08:50:1D
X509v3 Authority Key Identifier:
keyid:3D:9F:BE:15:C3:CD:B5:E0:34:35:E2:4C:F6:2F:16:FB:6C:62:39:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZ--FcPNteA0NeJM9i8W-2xiOWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e83bb9-a5c2-4774-9ebb-ae327dbe45c9/1/PZ--FcPNteA0NeJM9i8W-2xiOWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4f:52:c3:36:c1:57:da:2b:2a:af:cc:0a:06:19:e8:f4:f7:
91:ae:f8:21:d9:c6:7d:5e:44:4d:5b:b9:d7:b1:75:b4:36:ea:
8e:45:8e:6f:d9:3e:e7:45:cb:bb:d0:56:2b:e3:51:2c:8a:9b:
4a:76:c9:7c:a3:82:bf:ed:40:cc:45:f2:78:f5:08:3d:d1:82:
ed:d7:7a:5e:af:70:00:20:49:09:46:7a:df:8f:d3:be:c5:30:
2e:ae:38:92:e6:af:5b:7c:c7:e8:f3:ea:a2:4d:53:9a:38:0a:
7a:23:fc:e8:0e:b3:26:79:95:96:50:97:8e:83:2b:89:9b:2b:
46:09:40:f4:27:64:33:64:03:4c:e5:dc:16:7e:d4:87:36:74:
73:54:ca:f1:82:a5:2a:5c:08:60:2e:48:6b:32:8b:1d:b6:ac:
56:b6:23:b1:f6:d2:24:20:c8:88:ab:d6:61:0a:17:02:c7:4a:
7d:e3:7c:0c:f0:90:67:81:62:08:4e:52:2d:ca:fa:52:6e:47:
a6:f4:0a:10:51:86:ee:45:7c:24:55:e6:b5:df:08:3e:cb:bf:
21:9e:f3:a6:8b:9b:74:5d:f6:72:16:d8:93:6a:e7:6e:a0:41:
b6:ce:da:7a:fb:30:4c:3f:70:93:8f:76:92:79:d8:5f:8f:4c:
8c:70:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:44:27 2025 by rpki-client