Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: /WP1B1DgDMCBseZWR0nf8YOv7oMa8e+bUT4Fqj0OJRA=
Subject key identifier: 5E:A9:51:7B:7B:57:D0:E7:B0:28:6E:FE:B6:3F:0B:FC:AD:B6:CE:D2
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01974D44D603B23A05611F038BB742C89B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 02:00:46 +0000
Manifest this update: Sun 08 Jun 2025 02:00:46 +0000
Manifest next update: Mon 09 Jun 2025 02:00:46 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: 5JdVtIf1SjqtlTM8QFqXkQQp00gAVXB5Q1YcJYucNXE=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:d6:03:b2:3a:05:61:1f:03:8b:b7:42:c8:9b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Jun 8 02:00:46 2025 GMT
Not After : Jun 9 02:00:46 2025 GMT
Subject: CN=5ea9517b7b57d0e7b0286efeb63f0bfcadb6ced2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:ef:b5:15:7e:e7:ac:4f:df:0c:71:28:c2:
04:c2:d3:44:72:ae:81:f5:5e:e4:b2:6e:5d:d9:a0:
82:04:81:ab:d6:0e:2b:5d:25:9c:74:0d:c4:a5:f2:
dc:c1:ae:8a:22:72:ea:b9:08:9f:20:90:8b:09:2c:
d0:f4:52:02:5e:9c:ec:fb:70:f8:4e:89:ba:a6:f7:
bd:c5:de:6b:8f:a7:55:91:be:a1:77:5a:42:d6:f7:
84:4b:b1:3f:75:91:bc:c0:66:4a:6e:51:7a:72:b3:
4c:42:66:5f:8b:03:37:db:28:b9:db:c2:7c:a9:dc:
f1:21:83:6c:8e:31:86:e9:1d:13:11:2c:47:ea:4f:
99:36:1c:29:14:f3:ad:54:0c:86:af:26:0b:95:7c:
b1:e6:18:bb:58:58:e5:16:c0:ea:94:44:da:26:f1:
f9:7f:23:37:10:66:97:c3:19:25:84:4b:b0:ce:48:
58:b6:68:e3:b2:f1:bf:07:5a:b3:89:1b:4d:34:f7:
40:56:fe:42:f5:9f:d9:41:1a:34:7d:b0:28:56:13:
64:91:ae:80:a3:cb:c6:7f:1f:21:ea:b4:ea:0c:1d:
ab:7d:f8:40:d5:16:2d:37:fe:9a:9d:0d:c6:b6:3f:
4b:9a:e7:d8:28:e7:bd:62:3c:a8:6c:3a:57:6f:90:
1d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A9:51:7B:7B:57:D0:E7:B0:28:6E:FE:B6:3F:0B:FC:AD:B6:CE:D2
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:43:29:ff:c0:e7:f8:5d:95:bb:24:75:a6:a2:4a:ae:6c:e1:
af:ae:55:1d:7f:55:c8:98:31:cf:5f:a4:54:36:47:52:19:d8:
5b:1b:da:38:fb:11:c3:dd:5a:63:b2:f4:23:4a:6d:b5:cc:b4:
14:60:56:c3:3b:01:3c:3c:74:09:f8:44:e2:ae:cd:83:ec:b3:
b3:59:bd:2a:6b:5e:ba:83:19:9d:d0:68:ed:7d:a5:3d:f5:90:
25:1f:86:97:d8:19:9a:b7:a6:51:4e:70:ae:1a:a7:bb:06:e6:
92:51:d7:7a:5d:ec:ac:81:0b:ea:02:0d:02:f7:c4:73:20:41:
80:18:e2:e3:88:58:00:fb:00:a8:b7:e7:19:36:3c:6a:19:87:
e8:f4:74:ff:aa:d4:10:57:f4:d1:e6:46:a4:44:77:7e:29:31:
de:cc:fa:21:3f:6b:73:71:2a:1f:f8:b4:4c:45:cc:f1:8b:fd:
e9:70:c3:7f:15:56:96:48:1e:74:c0:1e:ee:5a:ea:17:d8:c7:
12:80:49:2c:a6:26:3d:e1:14:66:8c:b2:f2:1b:62:35:0c:cb:
df:b4:3e:83:9d:1b:fc:d5:53:db:5b:d5:30:ef:b5:8a:19:4a:
75:1e:55:f4:7b:90:c8:a9:fc:43:56:ba:28:ee:97:31:c3:4d:
69:2c:00:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:11:26 2025 by rpki-client