Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: UdcwY0XKGGiXBybq1dLD5H3DWi4epdhV8VCEDLJVYKE=
Subject key identifier: 45:D7:F5:F8:F9:39:52:05:0B:48:E3:E4:35:F2:4C:5E:B9:BF:09:C5
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019922FA404315CBB2C9BFB015DAA0CDFBCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1111
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: Nhd1BxBHe/BjoNWLFLseDH33668A7XCLE0j3D08M01o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:40:43:15:cb:b2:c9:bf:b0:15:da:a0:cd:fb:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=45d7f5f8f93952050b48e3e435f24c5eb9bf09c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:9b:43:18:57:9a:d5:3f:52:42:3e:8c:f4:
8c:90:2d:11:21:7e:29:fe:c5:93:2c:ca:d1:b9:18:
e2:67:e3:3f:0e:6d:f4:d6:61:a1:a0:21:3a:53:53:
d9:92:7b:0c:47:fd:d9:28:f5:9f:64:f6:e7:9e:ab:
1d:9e:28:3f:34:1c:d0:1a:83:54:05:39:4f:58:48:
fd:5b:ca:e2:98:78:12:a4:f2:12:7f:19:7f:0b:40:
b7:54:61:b6:8a:8e:23:47:b8:58:c6:5d:db:91:fc:
bc:f3:a8:c1:b9:70:91:66:fa:48:90:fb:e8:01:96:
3f:d7:90:fb:69:d2:db:13:86:cb:31:0c:84:8a:4f:
ec:38:03:83:62:f0:ab:79:e8:7d:d4:bb:d3:3f:84:
20:93:0d:04:eb:63:ef:2c:2d:4a:f7:83:33:b3:1c:
81:c2:3d:2c:2c:04:fc:2a:90:af:45:75:31:58:45:
e6:e7:4b:ed:10:8f:f0:40:fe:58:f7:56:f3:85:9a:
fc:92:c0:9f:ba:05:4a:dc:9f:4f:79:18:8c:6d:8a:
70:2c:90:ae:ec:31:b6:ae:71:d0:97:d2:51:4a:e2:
74:e1:ee:c3:fd:b8:42:98:b4:4f:88:2a:ba:44:fb:
dd:72:52:3a:25:fd:60:7c:b1:02:88:01:73:20:2e:
dc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:F5:F8:F9:39:52:05:0B:48:E3:E4:35:F2:4C:5E:B9:BF:09:C5
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5c:1d:54:99:8f:ff:31:0d:26:b7:53:a2:60:6b:08:88:20:
84:7a:7b:02:81:d5:45:37:88:a7:bd:c5:64:f3:c4:6b:b8:97:
aa:8d:51:92:3d:3e:9a:56:47:75:76:74:d0:94:39:d5:53:c1:
b9:22:df:08:50:6b:18:7d:a9:55:23:ec:3c:40:04:7b:f5:12:
f8:ad:c7:e4:e1:71:42:de:12:f2:fd:43:4a:2f:3f:78:f6:2d:
f7:20:b3:d6:c4:e4:1a:c9:36:b0:fe:4e:0f:90:26:38:d1:a3:
2b:76:4d:91:26:60:77:14:89:99:0d:e7:9e:60:29:13:31:b6:
bb:a2:25:98:05:be:93:6f:1d:7b:36:9f:ef:03:09:47:03:83:
50:9d:d3:86:dd:55:89:6c:a7:81:b4:bd:a1:0c:7f:e5:1f:52:
75:3d:02:46:f4:6f:e5:62:07:16:0a:a6:0c:cb:0d:05:d1:45:
29:2d:d6:4c:1c:0b:14:7b:c3:52:c4:30:e3:2c:3f:33:3f:9f:
03:e2:f9:2c:82:78:04:36:08:a1:aa:e9:82:8c:f0:00:d3:f0:
e2:d5:b1:5f:f0:c2:79:3c:48:18:69:f0:21:67:f9:7f:c2:b6:
a1:68:45:87:a1:cd:c8:42:16:08:02:2d:1b:bd:54:6a:53:8e:
a9:e7:37:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:22 2025 by rpki-client