Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: mlr6bGdGx5PctAcz99sZ4uAv8NJIQbi4mH1xzSxD7t0=
Subject key identifier: C9:BF:AF:08:70:6C:8F:30:FF:6B:C1:4C:93:33:57:B6:4E:F9:27:3D
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 019A2176AD10D27FC8F62F3C00439A32A962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 11CA
Signing time: Sun 26 Oct 2025 17:00:16 +0000
Manifest this update: Sun 26 Oct 2025 17:00:16 +0000
Manifest next update: Mon 27 Oct 2025 17:00:16 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: H9RSMbd/+86cIeGSHNDGbWAA2h/6lF6lx17Vn5GIrfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:ad:10:d2:7f:c8:f6:2f:3c:00:43:9a:32:a9:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Oct 26 17:00:16 2025 GMT
Not After : Oct 27 17:00:16 2025 GMT
Subject: CN=c9bfaf08706c8f30ff6bc14c933357b64ef9273d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:3e:83:e4:66:d7:15:76:53:bb:d5:bf:63:
14:1b:99:b1:17:93:71:2a:87:45:88:a4:fc:e5:c8:
ea:24:61:49:8e:bc:b0:50:d7:8f:3e:97:48:62:70:
9c:0d:43:ab:86:62:3f:80:5e:68:ac:53:38:86:7e:
05:2f:c7:99:13:4a:42:be:3b:3c:ef:f9:38:7a:24:
ae:2a:b7:2a:1a:81:bf:b6:6e:50:c5:9c:69:4e:3e:
82:e6:66:2f:5a:84:26:72:bc:93:1f:5a:30:c6:b1:
e8:14:7b:2a:25:d5:97:f9:42:84:9e:5c:54:e2:f3:
e3:aa:ab:d3:88:e3:86:6e:0a:0a:87:a9:aa:00:c6:
1b:6a:72:b2:9b:c7:7f:78:28:bd:1d:9b:74:75:7e:
8c:65:88:f9:08:d7:29:20:65:0b:02:96:8f:b5:99:
16:73:69:bb:16:45:ff:7b:08:5e:25:7e:44:e5:de:
ee:cd:31:f0:72:ef:89:88:fb:5e:ff:f2:4e:19:de:
cc:90:b5:b6:13:d1:62:b5:e4:ef:5a:e6:4e:a3:1f:
9b:1a:d1:51:15:07:e9:92:10:96:56:1b:34:59:7c:
84:cc:30:51:69:29:6e:7f:a1:a9:c9:10:4e:23:01:
cb:bb:39:f4:2e:52:be:11:b8:9b:e7:8f:57:64:d7:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:BF:AF:08:70:6C:8F:30:FF:6B:C1:4C:93:33:57:B6:4E:F9:27:3D
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f1:b1:10:54:9f:1d:82:ad:a9:c9:46:c5:b8:d5:68:34:5c:
77:2f:7e:b5:0e:2e:ca:44:05:51:11:10:14:e0:ed:ca:20:7a:
53:1a:6d:c4:7a:4e:06:27:03:fa:68:74:b4:aa:46:fc:67:36:
c6:5f:90:3b:b0:72:67:1e:8e:ad:95:c4:5b:66:f4:b9:26:e5:
a2:ba:36:25:67:de:f3:c9:c5:77:ff:37:cd:54:39:56:17:96:
e0:28:f9:aa:18:c1:28:42:ce:7d:e7:e7:b0:08:06:0c:38:3d:
2a:60:03:43:5e:12:a1:de:a1:74:a2:8f:1d:79:d2:7a:28:e8:
ca:2a:3f:b8:08:32:08:c8:1e:68:cf:04:ec:79:5c:0b:90:8d:
af:ed:eb:75:dc:6c:3c:07:aa:b7:a7:4c:89:b0:d8:e3:c0:1d:
e2:f1:6a:8d:07:1c:9b:1a:87:b8:80:de:64:63:bd:83:5a:db:
26:1d:09:9c:20:7a:f0:2b:69:55:ff:08:83:50:fe:a2:0c:91:
b1:53:28:43:ab:cf:b2:74:06:af:05:96:89:76:36:b8:4a:63:
a1:ae:36:e4:2c:d3:e6:7f:08:26:13:2e:d2:8a:f0:bf:85:de:
15:20:f1:94:93:0c:3f:62:cb:34:fa:c4:5d:0c:9c:26:aa:59:
f4:02:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:34 2025 by rpki-client