Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File: PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier: cEjRbb78SfRkf2vmD7MV0auPaDeS/1CdUs1SVjx8DkQ=
Subject key identifier: D6:47:73:8D:BC:D9:2A:56:B0:7D:3D:03:9C:B0:4D:F6:75:66:AB:38
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer: /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial: 01965047EBDD059D20B9EB3BE475E6A2DA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 23:00:12 +0000
Manifest this update: Sat 19 Apr 2025 23:00:12 +0000
Manifest next update: Sun 20 Apr 2025 23:00:12 +0000
Files and hashes: 1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: TFQ1Vurtj9UaVOEQUyBZmWnFPuMWwKcdodAS9v9UgE8=)
2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:eb:dd:05:9d:20:b9:eb:3b:e4:75:e6:a2:da:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Validity
Not Before: Apr 19 23:00:12 2025 GMT
Not After : Apr 20 23:00:12 2025 GMT
Subject: CN=d647738dbcd92a56b07d3d039cb04df67566ab38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:13:87:ed:40:8c:eb:7d:db:c7:d5:5a:91:8b:
8f:ec:63:de:fa:d1:c0:8e:9a:ff:37:69:d6:9b:80:
e4:6a:13:0c:0d:7b:1c:98:42:e6:98:85:13:98:ba:
b1:8c:1f:45:78:5e:98:bc:60:81:2b:55:be:94:80:
4e:aa:e6:54:99:c1:5e:db:26:b3:85:45:44:9b:18:
f8:a4:d4:b5:9c:11:b4:03:0a:04:dc:e3:b3:08:11:
90:3c:76:fc:13:12:27:1c:36:35:13:24:05:27:92:
4b:2f:6f:3d:9f:91:33:65:cf:cb:84:47:fd:8b:d7:
0e:d4:f1:a6:88:78:ed:50:85:32:cd:fe:4b:90:f5:
dc:45:1e:f5:1f:89:c8:75:db:ff:a6:60:d2:7c:60:
9a:20:33:4e:f4:c8:bb:9f:01:18:ef:3d:ac:ba:ed:
09:8d:d7:be:ac:35:98:d9:33:bf:03:85:b1:c7:a6:
93:ee:37:88:39:a3:e8:f8:1b:1d:cd:4d:9b:37:e0:
43:dd:59:94:c2:6b:05:20:b3:93:d9:04:7e:6d:d5:
fd:7b:2e:cb:1d:f3:6c:a8:c3:2e:c7:4a:75:de:ae:
91:2e:84:80:83:37:8a:a2:7d:55:b1:34:79:dd:ce:
5c:3c:b8:a8:15:e8:c8:e1:02:de:6b:15:b1:c3:67:
fc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:47:73:8D:BC:D9:2A:56:B0:7D:3D:03:9C:B0:4D:F6:75:66:AB:38
X509v3 Authority Key Identifier:
keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e2:96:c4:dc:7b:d0:2f:e3:fd:43:ca:6b:ed:a4:db:71:86:
69:2e:08:fa:e8:8b:61:65:ef:f3:6b:fd:97:e7:9d:6b:6f:65:
95:26:8d:64:63:0b:f2:26:89:47:9b:f5:1e:ff:cf:e1:9f:bb:
34:cf:43:e0:a6:14:36:87:ba:cf:1a:b0:c6:90:a3:53:8a:87:
6e:16:a8:4f:81:11:93:d4:9a:68:cd:9a:f3:e7:ba:ac:8c:3c:
55:23:26:b9:f9:02:f4:88:5e:33:e6:d0:42:35:bc:d3:31:e6:
de:4d:fc:b9:63:10:46:e6:e2:a6:b4:c1:14:68:f0:eb:0e:f0:
dc:45:04:95:ad:c2:70:fd:9c:29:b5:56:74:dd:7e:3c:32:63:
99:8d:d1:e8:a5:ac:81:6d:ed:52:b5:8b:38:7d:16:48:cb:0d:
2a:a2:5d:4f:ac:a6:4e:5c:f0:1c:0a:01:c4:ae:db:70:21:a9:
9b:d2:f3:74:03:2b:30:a9:aa:f1:57:f4:e9:2f:7f:1e:22:08:
53:cb:b3:d9:14:85:18:6f:dd:77:1e:d9:73:e8:60:ec:b4:41:
11:89:1b:75:90:95:81:4d:16:79:4f:a7:08:05:89:e2:9c:b7:
19:f6:f5:da:7d:bd:ec:69:71:f0:43:c5:fd:68:34:77:04:f1:
c2:93:ac:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQR+vdBZ0gues75HXmoto0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkOTQyNGIzYzhlNzJmNzQ2YTU5ZWIxOTk0NTVhYTM2NDZh
M2E0NTcwHhcNMjUwNDE5MjMwMDEyWhcNMjUwNDIwMjMwMDEyWjAzMTEwLwYDVQQD
EyhkNjQ3NzM4ZGJjZDkyYTU2YjA3ZDNkMDM5Y2IwNGRmNjc1NjZhYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhOH7UCM633bx9VakYuP7GPe+tHA
jpr/N2nWm4DkahMMDXscmELmmIUTmLqxjB9FeF6YvGCBK1W+lIBOquZUmcFe2yaz
hUVEmxj4pNS1nBG0AwoE3OOzCBGQPHb8ExInHDY1EyQFJ5JLL289n5EzZc/LhEf9
i9cO1PGmiHjtUIUyzf5LkPXcRR71H4nIddv/pmDSfGCaIDNO9Mi7nwEY7z2suu0J
jde+rDWY2TO/A4Wxx6aT7jeIOaPo+BsdzU2bN+BD3VmUwmsFILOT2QR+bdX9ey7L
HfNsqMMux0p13q6RLoSAgzeKon1VsTR53c5cPLioFejI4QLeaxWxw2f8OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZHc4282SpWsH09A5ywTfZ1Zqs4MB8GA1UdIwQY
MBaAFD2UJLPI5y90alnrGZRVqjZGo6RXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEt
NmE4MDMzZGNiZTFjLzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kZjI5NDctY2QwNS00NDA1LTk0OWEtNmE4MDMzZGNiZTFj
LzEvUFpRa3M4am5MM1JxV2VzWmxGV3FOa2FqcEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOKWxNx7
0C/j/UPKa+2k23GGaS4I+uiLYWXv82v9l+eda29llSaNZGML8iaJR5v1Hv/P4Z+7
NM9D4KYUNoe6zxqwxpCjU4qHbhaoT4ERk9SaaM2a8+e6rIw8VSMmufkC9IheM+bQ
QjW80zHm3k38uWMQRubiprTBFGjw6w7w3EUEla3CcP2cKbVWdN1+PDJjmY3R6KWs
gW3tUrWLOH0WSMsNKqJdT6ymTlzwHAoBxK7bcCGpm9LzdAMrMKmq8Vf06S9/HiII
U8uz2RSFGG/ddx7Zc+hg7LRBEYkbdZCVgU0WeU+nCAWJ4py3Gfb12n297Glx8EPF
/Wg0dwTxwpOs8Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:49:48 2025 by rpki-client