Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: 8z/w3KXpeRjQ7JWy7u2YQ3Kc+CsdzPvbsVaXrxv5krw=
Subject key identifier: A3:3B:44:16:99:B2:8F:27:50:84:3E:D6:4E:0D:10:6E:24:7D:88:55
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 01975B3797C1974620A5D015E81246CCE67B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1025
Signing time: Tue 10 Jun 2025 19:00:59 +0000
Manifest this update: Tue 10 Jun 2025 19:00:59 +0000
Manifest next update: Wed 11 Jun 2025 19:00:59 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: SSYpFofZ/2ZNFtsMtBwxSKPRK1WgTYUE7H+6VIpXKag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:97:c1:97:46:20:a5:d0:15:e8:12:46:cc:e6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Jun 10 19:00:59 2025 GMT
Not After : Jun 11 19:00:59 2025 GMT
Subject: CN=a33b441699b28f2750843ed64e0d106e247d8855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:7d:dd:a7:70:a0:d6:b3:12:39:4d:65:1d:
52:e3:0c:01:a2:65:32:28:39:e1:43:a4:2c:2e:5d:
4f:9e:14:14:c8:a6:96:3d:8c:45:39:21:36:e6:b8:
41:33:2d:f6:1a:a2:a6:c4:74:b8:3f:47:8c:f7:f6:
ad:fe:0f:70:4d:51:db:05:4d:2c:9a:4d:13:fd:51:
c8:b7:8a:7d:1b:33:91:8e:65:d1:2e:e4:b9:b7:d3:
95:c2:3d:74:4f:69:98:21:80:20:a7:7b:56:5a:8d:
57:52:72:8e:1a:50:b9:45:6d:19:a7:da:9e:20:80:
4b:04:10:dd:0c:d8:cc:6b:72:8a:6e:67:60:2f:1e:
df:56:fe:1b:0e:d7:97:d9:67:90:91:3c:8e:94:53:
2c:25:47:1b:8b:61:28:0c:40:db:90:e8:1d:e8:11:
7f:8f:ea:7a:cc:e1:35:e0:be:3f:bc:29:21:af:e6:
63:31:f8:29:a3:e1:92:e7:cd:a6:b8:3a:6d:f7:75:
d2:42:ab:c0:2d:36:66:78:99:2e:0d:7e:6a:6c:d5:
7a:9e:25:db:9c:cc:c5:ab:d1:eb:f1:36:88:3b:35:
63:1b:65:9f:b3:22:28:01:6a:d2:8d:92:1b:c4:5c:
b3:ed:e2:89:2d:4c:c3:3b:bb:22:8d:07:d7:2c:9f:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3B:44:16:99:B2:8F:27:50:84:3E:D6:4E:0D:10:6E:24:7D:88:55
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:41:31:1b:3a:59:94:71:0d:47:db:9e:50:2a:3c:86:0b:62:
9e:2c:a8:84:be:c8:cd:f1:3f:52:08:86:c3:2b:a6:d1:e4:94:
13:b4:7f:41:ca:e1:f4:1f:89:4f:ad:8c:0b:5d:02:b6:0f:b6:
51:3f:3c:ec:37:70:73:9a:a3:6a:9a:9f:7b:02:9e:f0:b4:59:
76:42:c1:91:27:a3:15:e1:58:66:ae:a1:f4:34:aa:41:b2:d6:
3b:2b:4d:f8:cf:53:d3:1c:66:cf:d9:93:43:0b:d8:ed:e1:cb:
a5:ff:1a:ab:04:69:d7:dc:e3:d9:24:25:20:2e:32:57:b8:6d:
e7:dc:4f:9f:6f:37:e0:fc:6a:0b:dd:60:8b:f4:bf:c8:ea:0f:
9e:17:3a:7c:b2:97:44:a9:71:89:37:7b:50:0c:8a:27:c6:4f:
06:27:2b:c4:47:b4:59:65:16:b5:3a:ad:18:04:4c:5f:49:9f:
fa:c3:7d:7f:27:e5:d6:c2:37:a5:8f:cc:d1:d4:ce:6c:e0:2c:
c8:26:ea:45:b8:9c:d6:04:ea:98:49:f3:eb:54:cc:ff:17:f6:
40:26:62:28:b0:29:2b:fd:f5:b4:2b:d8:67:99:e9:e7:d1:a5:
2a:5d:37:dc:cd:90:bf:52:ee:e4:eb:bd:ea:b6:97:4c:0f:de:
c9:73:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:19:22 2025 by rpki-client