Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: GoH/++BAfOHyyMZD5y3K1rv9JhOxjCn3O6SqoLo+PAw=
Subject key identifier: F1:79:AD:70:F0:BA:D0:C9:90:2C:96:F8:67:6E:05:DC:A8:9F:DD:C3
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 01958F981B7F7D425447E278B414DDBBC27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 0F37
Signing time: Thu 13 Mar 2025 13:01:05 +0000
Manifest this update: Thu 13 Mar 2025 13:01:05 +0000
Manifest next update: Fri 14 Mar 2025 13:01:05 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: k80Z8//ZAoROKPe9vPm50U65D0cPksJII+egc2tLzcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:1b:7f:7d:42:54:47:e2:78:b4:14:dd:bb:c2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Mar 13 13:01:05 2025 GMT
Not After : Mar 14 13:01:05 2025 GMT
Subject: CN=f179ad70f0bad0c9902c96f8676e05dca89fddc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:1a:a7:d4:b2:ab:e4:55:21:81:ce:60:f4:
1b:6b:55:65:f0:38:19:94:ae:2e:e5:28:d8:4c:1a:
b7:e0:f7:e3:3c:5f:b0:e4:aa:f8:76:7a:62:59:ec:
f5:6a:a0:4f:69:46:15:56:f1:ad:92:4e:6a:cb:88:
9b:6b:df:cb:59:bc:92:0f:d3:70:04:5e:a9:72:a3:
69:3f:04:eb:4d:bc:9c:28:a0:79:68:9d:61:cc:3c:
4a:fc:c4:55:d6:94:ed:9d:12:96:05:90:68:59:39:
e5:9b:04:33:57:69:5e:12:c6:8c:cc:be:8f:05:ae:
9c:ba:9d:d3:b4:40:9f:6f:54:9b:97:02:2e:dc:89:
a7:8d:86:39:87:8e:f8:d1:a6:8b:7d:7d:89:bd:65:
de:c6:39:34:57:e5:1e:4e:d5:c3:1b:16:f5:fe:30:
ee:2b:b2:bf:fa:e2:8b:18:b0:5f:60:8f:0a:62:4a:
c4:01:f3:1c:20:2b:52:37:63:19:ea:34:e7:da:30:
40:0e:34:5d:7c:98:75:96:72:82:bf:4a:f6:59:c4:
5a:ac:a5:5f:37:68:18:9b:af:32:97:d8:0b:e5:e9:
e9:2d:47:cb:d9:72:f8:a0:92:1d:49:4e:aa:01:5f:
75:df:61:1d:f0:bb:a8:03:79:08:f3:4c:a0:2b:8d:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:79:AD:70:F0:BA:D0:C9:90:2C:96:F8:67:6E:05:DC:A8:9F:DD:C3
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:20:f0:7a:a2:39:43:7a:22:02:2e:76:d7:52:a3:c4:07:8e:
d9:1c:07:9a:19:4f:66:ce:6f:f7:0a:6d:9f:e2:6c:cc:6c:83:
6b:08:ae:85:00:b9:2e:12:f9:2a:7b:d7:e5:a1:36:ba:83:96:
51:cb:7f:72:16:77:37:37:54:48:fd:84:19:3b:96:6c:4c:52:
b3:45:6d:14:e3:0e:bf:fb:0b:0a:ef:6b:ec:44:e7:0e:f9:a7:
ae:0f:ce:8c:5f:f8:40:7f:ac:b8:76:93:7e:34:8d:99:f9:95:
a9:6d:6c:39:98:76:ee:f5:e8:06:52:4a:b4:57:a1:e3:d4:8c:
c8:ee:e9:b6:92:f9:08:0d:5a:46:cb:5a:c2:ab:61:f2:6d:8f:
56:ee:08:6e:63:b1:d8:c6:09:41:36:f4:89:31:d7:87:53:0f:
0e:c0:63:d4:58:3c:4f:6f:b2:2b:78:35:d2:fb:e1:b5:3e:bc:
75:c2:83:d7:49:cf:31:b0:88:13:c6:b0:db:24:a1:78:c1:96:
ab:31:92:c3:c1:34:bb:45:66:cc:d5:aa:e3:37:18:23:18:1d:
f4:4b:c7:98:8d:c3:9b:d5:5a:46:8d:ae:17:fd:4d:df:97:7e:
08:85:db:67:f4:80:63:a5:44:59:43:31:f5:a7:71:e7:79:ff:
d7:b6:5f:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPmBt/fUJUR+J4tBTdu8J+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj
NjYzMDQwHhcNMjUwMzEzMTMwMTA1WhcNMjUwMzE0MTMwMTA1WjAzMTEwLwYDVQQD
EyhmMTc5YWQ3MGYwYmFkMGM5OTAyYzk2Zjg2NzZlMDVkY2E4OWZkZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIMap9Syq+RVIYHOYPQba1Vl8DgZ
lK4u5SjYTBq34PfjPF+w5Kr4dnpiWez1aqBPaUYVVvGtkk5qy4iba9/LWbySD9Nw
BF6pcqNpPwTrTbycKKB5aJ1hzDxK/MRV1pTtnRKWBZBoWTnlmwQzV2leEsaMzL6P
Ba6cup3TtECfb1SblwIu3ImnjYY5h4740aaLfX2JvWXexjk0V+UeTtXDGxb1/jDu
K7K/+uKLGLBfYI8KYkrEAfMcICtSN2MZ6jTn2jBADjRdfJh1lnKCv0r2WcRarKVf
N2gYm68yl9gL5enpLUfL2XL4oJIdSU6qAV9132Ed8LuoA3kI80ygK40y1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPF5rXDwutDJkCyW+GduBdyon93DMB8GA1UdIwQY
MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct
ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi
LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiDweqI5
Q3oiAi5211KjxAeO2RwHmhlPZs5v9wptn+JszGyDawiuhQC5LhL5KnvX5aE2uoOW
Uct/chZ3NzdUSP2EGTuWbExSs0VtFOMOv/sLCu9r7ETnDvmnrg/OjF/4QH+suHaT
fjSNmfmVqW1sOZh27vXoBlJKtFeh49SMyO7ptpL5CA1aRstawqth8m2PVu4IbmOx
2MYJQTb0iTHXh1MPDsBj1Fg8T2+yK3g10vvhtT68dcKD10nPMbCIE8aw2ySheMGW
qzGSw8E0u0VmzNWq4zcYIxgd9EvHmI3Dm9VaRo2uF/1N35d+CIXbZ/SAY6VEWUMx
9adx53n/17ZfyA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:40 2025 by rpki-client