Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: rI4MA4+FOIOZSElK2gtThuUZsci5HTFHp8S1OPhhcH8=
Subject key identifier: 1E:F2:8E:86:FB:0B:E1:AB:24:83:DE:4A:DE:00:7E:5E:56:CC:B1:1A
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019A7113371A29F0C0F03C8586D85A9C2534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 11BE
Signing time: Tue 11 Nov 2025 04:01:15 +0000
Manifest this update: Tue 11 Nov 2025 04:01:15 +0000
Manifest next update: Wed 12 Nov 2025 04:01:15 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: 1zqKZPVo6kKSk5z9ij2C3aM/tZY9gkdX4IoZtn3/C7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:37:1a:29:f0:c0:f0:3c:85:86:d8:5a:9c:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Nov 11 04:01:15 2025 GMT
Not After : Nov 12 04:01:15 2025 GMT
Subject: CN=1ef28e86fb0be1ab2483de4ade007e5e56ccb11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:f4:9d:60:4a:00:76:c7:27:d9:9d:67:d2:
bd:40:2e:29:74:b9:f7:73:75:27:61:9d:ea:a7:35:
29:a2:50:d6:fe:b0:1b:6e:d6:3a:b1:a6:9d:b3:59:
f6:5d:f9:01:5a:39:b3:a1:85:95:03:40:91:54:42:
2e:10:bb:3b:f8:9d:79:ee:c1:26:2b:78:95:2f:80:
38:82:db:43:a2:ad:0e:ac:e9:21:a0:dc:d3:8a:e1:
b0:80:df:98:09:20:6f:87:41:48:17:63:c5:fe:69:
e6:49:42:ac:47:2d:95:31:51:37:6e:d2:92:2b:0e:
a6:82:aa:fd:32:96:47:4a:29:e5:66:19:ec:c5:b4:
d0:30:24:67:2c:52:cb:66:09:07:97:29:d1:1a:d8:
f6:78:9e:25:15:27:44:2a:9e:1f:e5:86:9a:29:c0:
b9:fd:b5:57:db:92:9d:1d:39:ce:1a:cc:4a:93:06:
9e:1f:af:cf:6b:22:a8:e7:64:7d:14:ad:cf:e5:71:
a7:8a:99:b4:5e:d5:c7:0e:28:30:8b:25:b4:2b:99:
63:03:49:d2:68:2b:b2:4b:86:b9:b9:53:da:84:ab:
4c:b4:e8:09:32:af:b9:0d:05:b2:f2:3d:75:03:3e:
2c:3d:25:a9:0d:d2:f8:35:dd:13:a0:3a:5d:4e:32:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F2:8E:86:FB:0B:E1:AB:24:83:DE:4A:DE:00:7E:5E:56:CC:B1:1A
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:37:22:78:c8:db:6b:a8:a6:b9:d5:27:e1:74:c9:e9:80:f4:
d0:5c:aa:37:c5:23:ed:4b:c5:84:72:25:0f:99:74:82:5b:09:
1b:5e:02:9b:0a:3d:83:b9:d7:c4:f0:7c:06:25:d6:4f:ca:cf:
0a:80:72:fc:28:02:be:4b:02:6e:2f:18:4f:75:fe:3e:f8:e2:
77:53:eb:6f:3c:46:1c:2e:31:13:ae:b5:12:13:77:6d:6c:f2:
33:65:f0:47:78:30:0d:e3:2f:a5:b0:74:9d:0e:79:8e:b5:13:
f0:e3:3d:fe:32:b0:2c:e2:86:97:a1:60:8c:62:a0:8e:54:f4:
a4:84:b2:65:c6:7b:ae:90:2e:68:ba:c7:ea:fe:84:f1:e9:c4:
ba:ff:77:dc:d7:ba:35:62:96:85:64:c0:3e:6c:83:79:9b:6f:
0c:21:9c:7e:04:d6:da:8a:02:e9:e3:c9:c9:08:5b:85:78:b8:
83:26:c6:ce:48:83:69:23:8a:95:47:61:67:5a:87:2b:4e:fa:
ca:6c:d7:13:6c:25:71:fe:32:2c:b5:40:39:ac:39:48:e2:b8:
1a:e4:a8:c9:2d:e6:83:10:c9:9b:e3:b0:bb:17:22:8f:1a:e8:
99:e6:9f:4d:e8:7e:f4:cc:00:e1:75:9c:0c:30:f3:6f:91:a8:
e3:53:7b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:35 2025 by rpki-client