Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: 1Tt/JA9qT7mJorMt83fNnPCI7tMPaND6+XusRCM1KmI=
Subject key identifier: 23:AD:97:B3:2D:06:24:74:AA:0E:AC:43:D4:41:B7:08:49:A8:8A:07
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 0199228C9202D2797011391D3D4D72535453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 1146
Signing time: Sun 07 Sep 2025 05:01:01 +0000
Manifest this update: Sun 07 Sep 2025 05:01:01 +0000
Manifest next update: Mon 08 Sep 2025 05:01:01 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: 8/VsGrV0k05NnPHGPkl3f6EZq6pIqOx4PEzRXGmHSxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:92:02:d2:79:70:11:39:1d:3d:4d:72:53:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Sep 7 05:01:01 2025 GMT
Not After : Sep 8 05:01:01 2025 GMT
Subject: CN=23ad97b32d062474aa0eac43d441b70849a88a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:b6:f1:af:e5:7e:02:bc:51:d9:3c:6a:e6:
e1:19:3d:08:14:d0:9b:f2:1b:87:05:ba:49:5e:12:
ed:43:47:fc:ef:93:63:0b:da:1f:75:53:2d:82:dc:
0f:47:ae:bb:b1:c0:a5:f7:14:2c:5f:ec:82:10:50:
16:1d:a0:8e:43:38:38:1b:47:e1:e3:06:72:94:75:
e4:24:9e:d5:06:ac:fe:89:62:cd:93:11:d7:dd:7f:
3d:a4:7d:fa:3e:b1:47:44:ce:ea:66:9a:97:26:c9:
7e:33:d5:f7:11:01:89:3c:7a:6c:b1:aa:f2:c2:2c:
c8:06:dd:b9:48:06:48:b9:e1:cb:de:9e:b0:96:1d:
68:af:79:6c:77:b7:43:38:37:e7:73:dc:48:43:fe:
38:4b:0d:45:75:f8:2a:33:14:55:2e:05:a6:59:59:
bc:81:ef:d5:fc:dd:61:88:5f:06:56:1b:2d:23:93:
d2:6d:2d:7e:32:52:97:7b:e6:00:55:fa:da:60:8e:
3f:47:0c:44:ad:44:e4:c2:67:60:1c:94:bf:6e:1a:
2c:f2:99:11:b7:6e:ee:94:00:25:9c:11:54:17:d5:
02:95:b5:13:b9:54:50:28:80:96:40:9d:d4:30:7f:
6b:47:d9:12:85:33:b8:b4:81:6c:e3:a3:4e:3d:40:
1a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:97:B3:2D:06:24:74:AA:0E:AC:43:D4:41:B7:08:49:A8:8A:07
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:04:bb:f8:7a:bb:5b:5c:14:dd:b9:bb:2c:c9:7d:53:74:a6:
b9:5c:59:14:20:b3:0e:78:03:44:02:c2:9b:80:2e:88:15:c0:
bc:c5:d6:bc:62:be:fd:b0:ee:81:7e:dd:7e:55:0a:10:82:6c:
b7:ea:71:bf:20:dd:bd:b8:db:3d:b1:c8:59:77:51:ac:4a:77:
e7:94:29:2a:7e:dc:59:e9:ff:1f:ab:96:e7:9c:8f:df:db:92:
db:1b:48:64:97:3c:f5:62:91:2d:d5:be:3f:00:4d:dd:42:11:
31:44:53:20:fd:cb:37:ae:13:56:a2:10:96:2d:35:1e:f7:91:
05:b6:78:bc:9c:56:6a:eb:71:8c:ad:9f:5d:67:5f:9e:6b:b3:
e4:57:32:8a:a3:25:9a:39:85:9d:6d:d2:f7:a2:7e:dd:ec:6c:
2c:e3:ff:6b:12:7f:1a:3e:fd:0c:90:31:09:58:5b:5a:50:7c:
05:1a:03:e1:25:93:69:2e:73:0d:ca:43:ff:93:47:97:da:8f:
ff:6c:ac:ec:3e:ea:89:e7:3a:ea:ba:67:07:ec:d7:6c:27:77:
f1:5c:b0:d9:a7:d9:19:02:29:97:66:03:24:a5:de:59:7a:1a:
19:3d:44:ad:ba:4d:5d:03:d0:c5:6b:77:c8:fc:78:88:b0:58:
d6:24:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:18 2025 by rpki-client