Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
File: pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft (raw, json)
Hash identifier: kp0RsKiC6c5Puyw37tRzuPfQjlYn1k3qcXCYrPdwiSc=
Subject key identifier: F6:8F:04:A5:B8:16:4D:5E:08:69:C2:63:59:CE:77:81:D8:E9:EF:76
Authority key identifier: A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
Certificate issuer: /CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Certificate serial: 01974FD824CA3EB000CA547AFC101469F757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 14:00:54 +0000
Manifest this update: Sun 08 Jun 2025 14:00:54 +0000
Manifest next update: Mon 09 Jun 2025 14:00:54 +0000
Files and hashes: 1: LfvParklu0gxciTOgFZh-BpaZYE.roa (hash: fxMbCosgtYcMMEyUONm7A6ez+akqjsDq1R4iKueGkms=)
2: pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl (hash: lFg1fSd2kYvF300ZX0MLbQqTJwg4IIUZakjk3loGtlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d8:24:ca:3e:b0:00:ca:54:7a:fc:10:14:69:f7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cce7916c7afa649532a7b829a459d6ee5e36bc
Validity
Not Before: Jun 8 14:00:54 2025 GMT
Not After : Jun 9 14:00:54 2025 GMT
Subject: CN=f68f04a5b8164d5e0869c26359ce7781d8e9ef76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:7d:b5:d7:68:0a:b2:56:5f:ae:91:1f:ed:
16:0a:b1:63:ac:3e:97:a5:1c:8d:a8:5a:30:23:cf:
a3:a1:55:56:db:50:03:6a:d2:51:14:4c:48:5e:de:
3e:a4:94:01:c3:45:d0:9f:91:d4:26:b3:d4:25:8d:
95:ae:4b:b0:0f:99:79:12:fa:75:fd:aa:ac:e8:0a:
71:cf:d2:a3:f2:4b:b5:79:9a:b5:ed:0d:e8:34:ea:
e1:24:16:d8:b7:63:7f:5c:e3:6a:70:5a:34:f3:ee:
7a:3f:39:a6:f0:f4:a1:79:eb:63:23:15:2e:b8:80:
e4:62:ad:7e:02:98:d6:17:ee:65:16:94:dd:ee:1e:
62:98:9e:3e:fc:c7:6f:cf:48:a8:79:ad:0b:8a:8f:
45:59:be:82:a9:14:c1:d8:01:bf:dc:7f:63:04:de:
ee:47:ae:24:2b:59:13:04:22:af:f6:ed:ff:45:ef:
00:95:25:dc:8f:3c:e4:6c:c0:b3:c5:ed:df:7f:70:
9a:67:c3:03:d9:7f:cc:db:5f:96:bc:bc:53:37:19:
20:85:e4:ee:f6:72:ad:55:df:9e:62:61:2f:04:15:
bf:f4:35:e7:ab:5d:5a:fe:18:72:f6:6a:5a:dd:02:
7e:80:2d:d2:bf:81:8b:f4:15:ac:65:31:1b:35:f5:
5d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:04:A5:B8:16:4D:5E:08:69:C2:63:59:CE:77:81:D8:E9:EF:76
X509v3 Authority Key Identifier:
keyid:A5:CC:E7:91:6C:7A:FA:64:95:32:A7:B8:29:A4:59:D6:EE:5E:36:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcznkWx6-mSVMqe4KaRZ1u5eNrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cf0072-10d7-4759-80f6-4296937c9d94/1/pcznkWx6-mSVMqe4KaRZ1u5eNrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:90:95:cc:15:6e:ed:90:e7:12:5e:e3:f0:a2:81:09:27:a7:
a7:ca:c1:4e:cf:da:67:83:1d:c6:e4:e2:5d:ef:58:ec:ed:db:
e1:79:40:00:0d:4e:ab:e6:20:7a:b4:2a:82:36:80:a1:a0:b1:
eb:ac:f6:a7:0b:d9:d6:c0:c0:98:cc:41:46:ac:c9:cd:dd:46:
6a:3e:20:4a:fe:5f:34:69:43:8f:48:d0:37:1a:da:a1:e3:74:
77:d2:cb:6d:cb:54:38:64:c8:c2:67:62:32:c4:5a:45:a4:56:
14:d2:3c:0c:53:f8:f7:ac:da:0b:a6:b6:f2:d5:7f:3a:dc:ce:
b3:c8:6e:59:9b:8b:42:71:03:8a:37:45:89:75:85:94:05:36:
2c:7f:c6:96:a0:2c:ba:fe:72:1a:47:77:f4:ce:77:d5:ce:89:
97:1e:f0:dd:f2:03:ef:cf:99:f5:02:a0:32:f2:c1:51:b0:ac:
a7:be:34:9d:2a:bc:80:fa:06:11:12:08:f7:cc:c7:0a:7b:20:
10:3e:5d:22:02:83:c2:7a:4b:64:33:ee:2d:37:10:f3:56:04:
d5:f6:b6:e1:bd:c7:e9:b9:e0:15:bf:46:c0:ae:2e:02:d9:42:
6c:53:7a:39:c0:65:7f:a6:fd:06:08:a7:a5:8c:2f:e4:e2:79:
b3:7a:77:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:12:35 2025 by rpki-client