Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: FVKKbhOzKsWgZ2G9rhNvSG7IfRiqjTIrFBaOSeatx9Y=
Subject key identifier: F4:E9:4D:4A:E3:96:D6:7F:EC:45:F0:69:3C:4E:5A:8B:11:26:0C:B1
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 01974AB17062EB1064CE39752DD7101DA5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 04AA
Signing time: Sat 07 Jun 2025 14:00:31 +0000
Manifest this update: Sat 07 Jun 2025 14:00:31 +0000
Manifest next update: Sun 08 Jun 2025 14:00:31 +0000
Files and hashes: 1: 4j1kn9ZRNRslxMytu5eL1iX2ygw.roa (hash: RrIgP4kxCXaPwvdRe3NPsmeTo+G3ybJskr4dzXhR3EY=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: fANC1sTxR38a4OwNXPr8+tHTOvWDGHzkflhJop6gRm4=)
3: wWkcOa8cqDGRhn8j-1x_z-ePvg0.roa (hash: gQMjNWFHknHqWjiClHplw+oae04KXbyQbF9fSFE9xPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:70:62:eb:10:64:ce:39:75:2d:d7:10:1d:a5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jun 7 14:00:31 2025 GMT
Not After : Jun 8 14:00:31 2025 GMT
Subject: CN=f4e94d4ae396d67fec45f0693c4e5a8b11260cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4a:8c:0f:49:b7:fa:d9:6a:e2:d8:23:44:3c:
0d:1e:95:f1:6c:dc:5d:10:50:b9:28:8a:bc:81:5a:
88:de:0d:07:30:c3:df:74:56:19:da:eb:5b:a8:c7:
f9:a3:35:6b:75:18:7f:77:2c:f9:f7:fd:75:c4:8d:
65:1b:99:57:1a:6f:96:4d:44:57:56:a9:59:45:0f:
f6:1b:30:34:40:46:ca:54:42:b9:5e:31:ab:56:ef:
38:f4:0c:f2:13:b7:41:1c:b1:e1:aa:73:fd:50:dc:
2b:cb:bc:1e:4d:38:0c:2f:59:fe:42:62:e3:44:57:
d8:65:3d:88:c6:e8:b1:3a:86:d2:18:02:03:13:70:
0f:2f:42:72:44:03:4b:c7:a7:82:6c:5f:34:87:ef:
89:d4:c4:c0:00:ec:de:08:62:46:3d:b0:6c:cd:40:
91:4d:8c:13:f3:2d:24:eb:a1:90:6c:9a:a3:58:5e:
52:7e:cf:93:57:2f:2f:28:f9:b2:58:eb:4d:85:41:
42:d7:10:0b:b9:bb:46:ad:5e:a7:19:d6:92:b3:ea:
70:9e:63:64:7c:49:65:e5:f9:6e:44:9d:6c:c6:e6:
89:15:4b:e9:d5:27:1e:94:44:8f:68:ce:36:7c:b9:
79:69:16:f3:38:b3:da:64:ac:1e:ac:e1:37:b1:e8:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:4D:4A:E3:96:D6:7F:EC:45:F0:69:3C:4E:5A:8B:11:26:0C:B1
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:57:c6:a9:86:52:49:fa:ca:e0:35:cc:fd:27:cf:00:f4:6f:
ac:7c:0b:4f:47:6a:c7:87:ee:51:47:c3:f3:c1:97:e0:e1:4b:
ff:4f:af:de:7f:33:e9:0b:ad:c7:0d:28:38:95:f9:a9:0a:3c:
ca:7e:38:56:71:a1:07:b3:0d:8e:c9:50:80:3e:81:43:40:f9:
60:63:94:d5:f7:bf:9d:33:92:2e:72:6d:cd:05:86:e9:71:31:
3b:29:29:19:90:49:17:c6:bf:f9:c2:56:9f:24:ce:ed:88:0b:
63:0e:06:b1:89:5f:5f:c0:18:9f:ee:08:25:b1:e7:18:93:b1:
f4:66:b7:9f:b5:6f:a1:76:73:39:b1:77:68:73:20:24:05:39:
c8:9e:04:be:12:91:dd:30:6f:53:5d:87:75:a8:8d:b6:ea:72:
88:56:2a:72:bb:b6:92:46:8e:d8:9b:b7:26:70:51:da:86:f1:
d8:44:62:84:4a:69:ce:7e:7f:fb:58:81:ac:89:9b:cb:87:f5:
57:25:4f:cc:c9:e6:13:e2:cf:c2:aa:2d:8a:48:a6:86:61:75:
7f:78:3a:97:b1:fd:d7:28:b3:4d:08:a7:d5:86:23:cf:4d:83:
8b:e0:13:60:5e:05:7e:0e:06:0f:f5:f2:ff:33:62:46:36:cd:
e7:e2:b8:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsXBi6xBkzjl1LdcQHaXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjUwNjA3MTQwMDMxWhcNMjUwNjA4MTQwMDMxWjAzMTEwLwYDVQQD
EyhmNGU5NGQ0YWUzOTZkNjdmZWM0NWYwNjkzYzRlNWE4YjExMjYwY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kqMD0m3+tlq4tgjRDwNHpXxbNxd
EFC5KIq8gVqI3g0HMMPfdFYZ2utbqMf5ozVrdRh/dyz59/11xI1lG5lXGm+WTURX
VqlZRQ/2GzA0QEbKVEK5XjGrVu849AzyE7dBHLHhqnP9UNwry7weTTgML1n+QmLj
RFfYZT2IxuixOobSGAIDE3APL0JyRANLx6eCbF80h++J1MTAAOzeCGJGPbBszUCR
TYwT8y0k66GQbJqjWF5Sfs+TVy8vKPmyWOtNhUFC1xALubtGrV6nGdaSs+pwnmNk
fEll5fluRJ1sxuaJFUvp1ScelESPaM42fLl5aRbzOLPaZKwerOE3seiBNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTpTUrjltZ/7EXwaTxOWosRJgyxMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVfGqYZS
SfrK4DXM/SfPAPRvrHwLT0dqx4fuUUfD88GX4OFL/0+v3n8z6Qutxw0oOJX5qQo8
yn44VnGhB7MNjslQgD6BQ0D5YGOU1fe/nTOSLnJtzQWG6XExOykpGZBJF8a/+cJW
nyTO7YgLYw4GsYlfX8AYn+4IJbHnGJOx9Ga3n7VvoXZzObF3aHMgJAU5yJ4EvhKR
3TBvU12HdaiNtupyiFYqcru2kkaO2Ju3JnBR2obx2ERihEppzn5/+1iBrImby4f1
VyVPzMnmE+LPwqotikimhmF1f3g6l7H91yizTQin1YYjz02Di+ATYF4Ffg4GD/Xy
/zNiRjbN5+K4Fg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 17:36:55 2025 by rpki-client