Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: pfCok0PuibWzN2yDDzd7dNSZe8B0CMYHVkgarq10pPc=
Subject key identifier: CD:66:9F:B3:72:9D:AC:7A:68:23:D8:7A:CC:4D:E7:F9:29:FA:E6:ED
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 019845F683A69859F188A1D4376826D0ED77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 09:00:40 +0000
Manifest this update: Sat 26 Jul 2025 09:00:40 +0000
Manifest next update: Sun 27 Jul 2025 09:00:40 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: fzMyBR4VPo86XxGokj2FyNasknzQG/i3vtxqQzVDJvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:83:a6:98:59:f1:88:a1:d4:37:68:26:d0:ed:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: Jul 26 09:00:40 2025 GMT
Not After : Jul 27 09:00:40 2025 GMT
Subject: CN=cd669fb3729dac7a6823d87acc4de7f929fae6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:7f:b9:ed:a4:64:13:ba:27:fa:fa:49:c9:
8d:fc:fe:8b:3e:46:72:b0:07:b7:35:20:1c:23:ca:
69:9d:ed:d0:65:f9:25:bf:45:df:e3:e7:28:43:8e:
ae:88:bb:b1:e7:1a:88:0d:15:57:84:e8:cc:d9:25:
f4:7d:c1:6a:53:80:43:8a:bf:82:a6:84:3e:84:da:
2e:5b:cf:7b:7f:a2:31:7c:d4:91:de:5f:8d:b9:3c:
07:61:c8:de:f2:0b:ab:99:56:b6:22:fc:3b:af:17:
03:a3:af:e1:3a:cc:89:c7:45:dc:f2:c2:31:ba:2c:
c4:19:7f:93:ed:99:f4:e6:ad:de:a4:07:e4:28:d1:
4c:c1:56:ad:2f:d6:e8:19:ca:8b:02:74:45:2e:9e:
77:4f:30:ac:f6:f9:45:1a:b5:17:5a:c1:7f:18:07:
14:46:d3:a4:9f:3b:6e:b4:84:b6:3b:9a:b6:3c:ec:
40:1d:27:3a:c3:be:e8:4c:c9:72:2f:7d:47:ca:60:
99:43:21:8f:e5:e7:55:57:8b:ed:8e:2e:94:05:f7:
c1:66:fc:8a:50:81:84:22:41:01:b2:43:5f:31:a2:
e7:44:6f:cd:3b:a0:b3:63:bc:41:23:df:3c:ba:2a:
ce:d0:60:c2:b7:97:c7:73:2c:8f:51:b6:ae:f4:41:
16:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:66:9F:B3:72:9D:AC:7A:68:23:D8:7A:CC:4D:E7:F9:29:FA:E6:ED
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f7:85:b2:70:2f:c5:1e:97:c1:29:9f:30:21:33:dc:ba:a8:
07:29:9d:24:a0:60:c5:44:ac:aa:8b:6d:85:6d:2f:6a:13:a2:
9c:c6:67:c6:cb:b7:b1:ec:97:04:6a:dc:57:b2:b9:26:68:49:
01:1f:73:07:1d:14:03:4e:10:c8:12:17:c0:05:b8:30:05:5c:
b1:67:60:e8:22:51:c6:30:14:e3:4a:4c:f2:62:81:fa:cc:d4:
c6:c1:8a:c1:8b:24:90:bc:9c:dd:b1:da:79:5a:03:a8:21:3b:
0a:ab:4a:6f:29:6a:24:36:8a:dd:e9:6c:90:79:1a:c0:f2:70:
82:88:bc:e6:99:28:cf:87:85:c6:c0:0d:57:37:fd:0e:54:d6:
bc:1d:35:53:2b:33:67:ef:f8:1e:86:71:5f:42:f7:9d:f2:d7:
cd:a7:70:98:7d:6d:83:97:33:4b:da:20:3d:04:fc:5a:2d:91:
f8:f2:2e:35:99:f2:b3:f7:88:1a:d5:61:89:d3:58:33:f3:ac:
e6:b9:bb:06:ad:21:e6:81:83:39:56:1f:41:ab:b2:41:d1:83:
76:0f:73:01:f9:fd:cb:9d:01:34:62:0a:58:8f:45:bb:2d:c4:
02:f0:02:47:ad:b2:bc:e9:74:01:49:bc:74:6a:90:b1:43:f9:
4a:eb:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:39:59 2025 by rpki-client