Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: nJgiu/VVZwe08WxzOEt3HQFPtGExwbOa8INn9Rz7+z0=
Subject key identifier: D1:01:EA:01:6B:A3:D8:AD:44:6C:FC:73:EB:69:BA:B8:39:6C:19:1E
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 019923314CE3644491D2DD28D189A67DCB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: 7d5mhKE/WmQMqG9hDDcx17QlShWlejK23iWfUQETF80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4c:e3:64:44:91:d2:dd:28:d1:89:a6:7d:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=d101ea016ba3d8ad446cfc73eb69bab8396c191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:e6:74:80:51:db:cf:38:5a:f9:47:1d:ed:
ea:6e:a7:23:56:8a:a4:ef:07:ce:c3:1e:58:50:96:
ee:13:e5:66:e6:5d:a6:a8:c4:4d:9c:fb:26:55:00:
54:b3:0e:4d:4c:ec:dc:ac:9c:d8:a9:1a:88:8a:a2:
b8:5b:4c:13:f2:5f:cc:c8:56:e4:71:4f:79:cd:ca:
75:a1:5a:13:dd:90:18:d5:4e:62:a8:fd:ae:78:56:
d3:0b:fd:a9:f8:1d:56:33:4b:6f:84:cf:9c:f3:21:
87:5e:a1:ea:e7:b2:0b:aa:60:2e:1d:b6:28:9e:30:
dc:50:b6:74:ec:24:e7:6b:99:28:78:32:dd:7d:fa:
8a:7e:05:d0:d4:1a:2d:b3:3f:c5:78:10:54:bc:2a:
d9:f7:01:e3:36:c4:b1:ee:68:b7:4a:5f:ed:33:7b:
1a:78:56:f6:19:ee:40:4d:01:dc:cd:58:b4:dd:3e:
e4:79:ac:a4:fb:4e:55:4d:e3:e4:bd:b9:8d:ad:d8:
66:77:e2:ea:9e:6d:42:e4:bf:d7:e4:6a:1f:00:4a:
80:19:2c:94:66:72:df:f4:01:54:a7:04:d1:2c:f0:
92:ce:08:fe:09:76:f9:73:63:34:05:cc:c7:76:a2:
8b:70:3d:b4:4e:a6:4b:a3:ca:32:00:18:a2:11:e5:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:01:EA:01:6B:A3:D8:AD:44:6C:FC:73:EB:69:BA:B8:39:6C:19:1E
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ab:f5:5b:25:fc:b0:8f:f3:ed:3c:27:8e:3c:23:7d:89:2d:
0f:15:40:68:60:6f:82:3d:9f:1f:4a:1d:84:93:03:f5:0c:8d:
a4:ad:b1:a1:d8:d3:9c:62:ac:b1:d0:ca:e7:34:2f:f2:75:b1:
18:6c:cd:b5:f1:15:16:c7:97:14:65:db:df:70:45:8f:28:20:
0f:c6:2e:af:86:c1:ec:86:44:a3:da:42:36:6c:ee:bd:71:61:
55:39:6b:52:30:88:ff:25:95:f0:82:39:de:ef:a0:2d:8d:a0:
a5:9c:70:1b:02:54:2b:9f:91:f6:43:0d:e3:c7:02:6f:69:a4:
43:7b:c4:a3:b8:34:02:79:8f:0a:14:4f:0e:b4:a3:04:6a:af:
39:bf:72:9d:aa:a1:2e:7d:e7:95:20:34:5a:83:e9:eb:d2:09:
a9:0d:bc:00:2c:bc:ee:31:b4:c6:37:07:89:46:9d:c5:d6:a7:
58:aa:e9:81:b7:e9:35:63:de:63:cd:77:c3:0d:11:d3:e5:05:
0b:fd:a2:4a:a5:d8:81:53:7e:78:4f:44:77:6e:aa:63:8d:37:
30:be:3b:93:96:ee:cb:22:ab:58:b5:5c:20:76:03:2c:84:39:
b1:14:ac:28:7d:68:3f:e6:64:8f:97:03:a1:17:52:de:e8:c8:
3f:54:17:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client