Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: 59Dhs62oezZvkDWq+cRUXnKKFsgU2Uul1hHfOfiztmU=
Subject key identifier: 76:92:BE:59:0D:B1:96:FA:76:FB:CC:F0:19:59:DD:DD:8F:F9:3C:FB
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 0196561329DE38EB443447A1DF8B2F1A465D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 0FD3
Signing time: Mon 21 Apr 2025 02:00:18 +0000
Manifest this update: Mon 21 Apr 2025 02:00:18 +0000
Manifest next update: Tue 22 Apr 2025 02:00:18 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: zZSoQUECiSBAZ3m0RRcGZgRXR2tCY97npiaudKsjBbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:29:de:38:eb:44:34:47:a1:df:8b:2f:1a:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Apr 21 02:00:18 2025 GMT
Not After : Apr 22 02:00:18 2025 GMT
Subject: CN=7692be590db196fa76fbccf01959dddd8ff93cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bd:12:4c:99:97:2a:32:54:32:79:0f:9b:ff:
5c:73:35:16:90:4e:e4:cf:be:1d:7e:91:a1:0e:16:
07:14:4d:be:06:7b:76:cb:1d:9c:a1:6e:82:b7:ce:
42:0f:ca:f5:b5:e6:e8:ba:fb:65:2f:dd:74:14:75:
2c:fa:3c:91:4c:77:1c:3c:e2:fd:3d:f2:77:ee:82:
77:30:3e:6a:35:76:d7:07:67:7a:c7:96:3e:3c:a5:
08:89:2b:66:82:b2:b4:04:96:9c:9c:7d:8a:a3:6e:
2e:38:fe:d0:7b:e5:e3:0c:fd:8d:72:69:d5:8f:85:
d3:f4:3a:93:65:8b:b9:dd:36:9f:6b:cc:91:26:99:
73:3f:f1:3c:06:34:e3:09:3f:bb:e7:aa:d4:c8:67:
86:cb:a9:b4:b5:1a:fa:f6:88:19:b1:88:49:b7:91:
60:ff:ee:df:15:13:65:a2:31:a5:f0:45:97:8f:a5:
34:80:7f:24:7e:58:71:86:0e:a6:0a:3f:97:a1:cf:
cf:b3:c6:ee:83:4d:3c:9d:63:1f:03:ed:40:cf:a0:
59:4b:b3:3d:6d:73:62:39:e7:a6:32:32:ce:80:c7:
df:6e:42:c1:54:cc:bf:a7:b9:14:5d:7d:11:02:38:
6d:b3:d9:97:8e:98:bd:f1:12:5f:75:b2:ad:a1:91:
77:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:92:BE:59:0D:B1:96:FA:76:FB:CC:F0:19:59:DD:DD:8F:F9:3C:FB
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:74:2c:ba:44:1b:b4:0e:94:b0:d4:79:32:67:d6:66:18:19:
b6:83:7d:f5:a6:0f:1e:95:27:6d:ee:57:b2:43:28:db:67:c6:
89:10:1d:9f:c8:3d:cb:2f:a9:a8:dd:10:4e:78:c3:a8:9f:d0:
58:b3:90:4e:78:36:e7:df:d7:f6:6b:b6:3e:b0:d8:97:02:ad:
cb:28:31:5d:5f:55:72:6b:ed:d8:12:5b:83:ce:8d:9f:98:20:
f8:63:49:fc:08:ab:9d:48:2e:e3:df:63:0a:d9:6b:1e:80:d7:
e1:6e:0d:9e:4e:0f:cd:81:5c:a5:f5:25:22:34:8a:d5:14:52:
cc:c3:01:48:71:5c:92:e9:a9:e9:cc:bd:07:1c:f3:33:b1:92:
6f:a7:12:fd:9a:53:31:64:58:d9:e7:fa:e8:77:6f:3d:49:25:
c6:52:90:f3:6a:55:12:d8:50:96:46:76:07:58:be:a5:07:d6:
4e:21:c3:6f:77:03:29:e5:98:9a:cf:f9:a4:42:c4:5b:8f:66:
d9:a9:83:f1:76:0a:60:4e:7a:0c:73:66:34:9b:a9:75:31:c2:
f5:b2:ab:3c:d3:81:86:b4:ae:37:1c:bf:c9:1d:24:42:8c:4e:
3b:22:4b:3f:26:b4:0d:7b:50:4f:0a:59:e3:a2:58:14:e0:db:
41:cd:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:14 2025 by rpki-client