Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: AYIrON3uWJ/WtlfDl+axOfIjZ6jY16oZ8HXwfmawwgI=
Subject key identifier: 5B:51:8C:7B:54:AD:32:68:0A:1F:C3:15:26:6E:01:5D:7C:B0:64:E6
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 01975F1408120D256B0284F58277B094E39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1027
Signing time: Wed 11 Jun 2025 13:00:37 +0000
Manifest this update: Wed 11 Jun 2025 13:00:37 +0000
Manifest next update: Thu 12 Jun 2025 13:00:37 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: SrKOpzf4QC54I4H5/dQXwXEHFZnKJjLkcYWPNyySBgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:08:12:0d:25:6b:02:84:f5:82:77:b0:94:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Jun 11 13:00:37 2025 GMT
Not After : Jun 12 13:00:37 2025 GMT
Subject: CN=5b518c7b54ad32680a1fc315266e015d7cb064e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:c7:0b:23:57:86:46:3c:4f:12:24:72:58:
c6:fa:92:60:a9:9c:5f:ff:90:c3:5c:3d:f5:6e:1f:
b2:e7:4a:ce:21:0f:01:a4:51:d6:b9:f1:6e:4a:d5:
2a:11:be:be:0b:92:2f:20:5c:d8:54:df:c5:c3:ef:
ae:97:55:de:ba:97:80:eb:96:95:ed:95:64:aa:27:
ae:63:73:a4:7e:1e:33:c2:62:3a:80:d2:c6:1e:51:
ab:a4:29:3a:4d:4b:cb:55:58:4a:c0:a5:24:3d:a8:
c3:66:6a:5e:bf:a4:e1:d8:46:40:a3:00:ea:7b:19:
38:94:14:1c:4a:d8:20:0a:32:16:1a:34:c0:71:bb:
3a:51:1f:e4:b4:33:2d:0b:6b:a5:05:56:f3:db:25:
3c:89:b5:cd:a3:3a:36:8d:9e:8a:cf:35:22:c9:32:
b7:cf:d3:e4:7c:f1:8b:4f:43:03:9b:be:3e:b2:1d:
d0:28:ec:cf:34:17:03:81:31:fa:d9:cb:68:3d:5b:
71:4b:ce:9e:64:f5:c4:76:23:ea:e6:3e:d6:c3:90:
55:96:26:cd:a7:4e:af:fd:01:30:73:9c:2c:0c:1e:
b2:d4:46:84:6f:0c:86:d7:05:c9:fb:a0:bf:e8:44:
3a:51:10:9c:7c:36:ff:5d:e3:d7:dc:35:0d:2e:1f:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:8C:7B:54:AD:32:68:0A:1F:C3:15:26:6E:01:5D:7C:B0:64:E6
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:46:40:8f:42:9a:1b:1e:b9:8a:23:b4:f1:87:c0:7d:c0:1e:
3d:54:84:0f:0c:b3:64:d4:74:e5:2d:60:95:68:2d:f2:59:81:
48:20:8e:b5:32:41:84:6c:b8:00:ad:cc:d9:76:bc:d1:8c:56:
2a:12:49:b4:a6:22:f8:b0:55:cd:13:75:c9:07:b5:85:ff:c0:
19:06:32:5f:bb:5b:57:07:eb:f3:43:e6:db:5e:85:c5:fa:df:
f3:68:e5:1b:d5:35:50:e9:2e:fc:97:aa:62:03:f3:51:a8:30:
3f:1a:0c:81:5a:24:49:19:c9:6a:9a:17:5b:0a:0d:d3:93:51:
8c:2f:aa:31:48:39:f5:4f:6c:56:de:36:fe:1d:8c:58:60:64:
6b:ad:d3:b4:c3:c0:90:d6:e2:71:45:06:c7:a9:38:20:ca:a1:
dd:f0:bd:19:7a:a6:23:93:9f:eb:91:52:e1:83:75:25:bb:f9:
13:78:bd:27:bf:50:06:1b:cf:dd:77:38:f9:f5:b7:68:32:c9:
b8:e4:50:37:80:cb:81:b0:25:c5:b7:c1:4f:3e:15:5c:17:f9:
c9:fd:6c:ce:2b:4b:4b:7d:0c:f3:32:de:9a:86:7e:04:a8:a0:
17:dd:9d:17:0b:4d:2e:04:26:6a:d7:10:f6:fd:81:2d:d7:28:
b0:83:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:04:12 2025 by rpki-client