Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: NrBc1+g/QWfRhdSChdZOcFDc7lFVrVVng5aGbm0N7FM=
Subject key identifier: 8F:62:EF:B2:56:65:E2:53:3E:BE:FB:AB:9A:9D:A8:28:8F:BE:5C:AB
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 01976C98A1CF849634F18AAC85203EEF577C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 102E
Signing time: Sat 14 Jun 2025 04:00:31 +0000
Manifest this update: Sat 14 Jun 2025 04:00:31 +0000
Manifest next update: Sun 15 Jun 2025 04:00:31 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: m/U/WD8NV6XZh1xh43iUMXpLrqSYJ5QmlV+MOQKHtUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a1:cf:84:96:34:f1:8a:ac:85:20:3e:ef:57:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Jun 14 04:00:31 2025 GMT
Not After : Jun 15 04:00:31 2025 GMT
Subject: CN=8f62efb25665e2533ebefbab9a9da8288fbe5cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:fe:7d:df:da:b0:21:50:2f:47:db:c6:63:
e0:1e:a6:02:a4:40:cb:d5:6f:90:50:be:08:8d:9d:
41:e0:62:4b:ca:4a:45:21:49:6d:a5:02:15:f0:67:
22:39:72:b1:b1:7f:27:2e:5e:18:ce:cb:cd:e9:6e:
43:6e:ac:f6:87:5a:34:4c:40:5b:3f:e7:4e:0d:17:
ff:a3:f9:a9:fa:0c:e3:76:e9:6b:22:f8:7e:da:08:
10:f5:e8:fb:73:9b:65:16:0c:82:a9:e8:9b:90:bc:
46:94:ab:f7:32:6e:36:2b:e4:06:0b:5a:a6:7e:eb:
86:00:48:48:6b:fe:70:e3:33:2a:f4:c5:7a:f7:92:
5f:5c:c7:31:13:ae:77:41:48:91:a0:d0:88:6d:a6:
16:80:2a:3b:72:28:51:e7:f5:8b:64:00:b0:02:4b:
e9:85:e8:83:2a:2d:df:c4:73:76:67:c0:28:c8:93:
c9:c8:9a:15:76:d7:98:67:dc:df:fc:b3:97:ab:8a:
2d:c0:55:0d:b2:34:f7:14:eb:f9:89:05:00:90:9d:
fd:79:df:99:6b:83:9d:78:f0:d3:fd:24:2c:9e:37:
88:1e:cd:9d:43:7b:57:eb:02:a7:7f:53:78:a6:2b:
c9:15:bb:35:32:bc:dd:79:c2:3d:dc:43:c2:c5:f0:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:EF:B2:56:65:E2:53:3E:BE:FB:AB:9A:9D:A8:28:8F:BE:5C:AB
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:27:16:ab:62:ff:f1:35:f5:66:e4:58:d5:36:cf:f9:50:00:
38:7e:dd:0d:c9:2d:5d:04:58:37:9d:09:2d:cb:05:77:e6:8c:
a7:cd:f3:4c:3a:48:40:b0:17:40:4e:3e:a4:16:24:02:fe:31:
76:e6:1d:ad:c3:1c:ed:f9:11:6d:47:d9:f3:e1:0e:83:ff:78:
11:74:7b:24:55:c4:94:35:60:73:53:59:72:f8:68:33:c6:be:
d9:68:ef:b6:a7:74:d7:9f:f7:44:d8:3b:c1:7a:d5:47:6d:f6:
f4:50:b9:71:49:a1:d2:12:d5:27:05:70:0b:9e:4c:71:53:c7:
11:ba:c0:23:ea:0b:24:62:20:24:da:45:78:a8:dc:ee:b0:08:
44:68:d9:b2:df:41:d3:6f:43:b6:39:73:4e:8c:29:48:01:a2:
17:2d:8b:20:3f:55:fb:1c:64:76:94:f0:c7:62:35:bc:75:6d:
c2:71:41:b0:e7:c7:e3:15:fc:9d:e2:f2:fc:5d:95:36:b2:60:
00:fa:38:89:99:c4:a4:5a:ea:ad:f0:db:02:b7:61:f1:08:64:
ab:57:1d:4a:3e:f4:fb:34:27:e5:94:d4:ba:29:b6:1e:d0:47:
65:19:33:4f:13:c9:a0:56:f7:5f:35:4a:52:df:2b:a1:08:19:
e5:31:a0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:34 2025 by rpki-client