Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: NAcsWQH99wbkUtfKO8uCVtheLAWE/qow7xoNtRYYhxM=
Subject key identifier: 30:15:37:53:C5:C7:7F:61:BF:37:E8:6C:FD:38:65:33:3D:B0:76:36
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 01974D44F112F6F745ED24C2DB01EDC531A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 1053
Signing time: Sun 08 Jun 2025 02:00:53 +0000
Manifest this update: Sun 08 Jun 2025 02:00:53 +0000
Manifest next update: Mon 09 Jun 2025 02:00:53 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: +3W++6rscEhWQL2RjOGW8OYhY94kmQhbyKNFyv+aYZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f1:12:f6:f7:45:ed:24:c2:db:01:ed:c5:31:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Jun 8 02:00:53 2025 GMT
Not After : Jun 9 02:00:53 2025 GMT
Subject: CN=30153753c5c77f61bf37e86cfd3865333db07636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:0e:fa:54:46:84:fb:e7:12:71:b6:26:a6:
f6:1c:ea:83:93:6d:b3:8f:6e:45:34:dd:e5:dc:0a:
0f:95:c5:81:ce:47:c9:84:1a:18:b5:00:f3:99:59:
3a:01:7f:66:3d:f7:0c:c3:b8:f8:e9:8d:8f:2d:0f:
49:e4:b2:49:e4:94:0d:42:dd:0b:79:19:90:56:c4:
2b:fc:44:7e:a7:d7:42:0e:ea:9c:56:f4:04:cf:0d:
fd:a9:10:b0:16:27:dd:1d:43:fe:79:1e:30:98:53:
3c:39:d7:c8:46:8f:d6:ef:1e:49:9c:31:a6:49:e1:
4c:65:b9:8a:90:9f:66:2f:ca:7c:92:e3:5c:f7:d3:
f7:cb:13:43:9c:60:7d:cb:52:f5:b0:75:18:bc:76:
ca:43:a0:2b:91:4e:c4:8b:21:97:a9:f4:a1:ea:27:
3b:e9:4b:71:10:da:5c:97:62:ba:11:1e:b0:5b:5f:
d3:b4:34:f5:2d:ad:5c:b7:06:28:87:a0:9e:86:b0:
be:bb:4f:fa:ed:17:f0:25:a1:d2:26:f0:cc:16:78:
09:fe:cb:3b:83:59:e3:c9:e0:66:97:8a:47:83:c1:
49:95:c7:4a:3b:1e:c0:10:95:00:1d:f8:6b:07:2c:
42:27:f2:9c:0e:62:24:d9:6b:8b:3c:bf:54:94:8a:
77:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:37:53:C5:C7:7F:61:BF:37:E8:6C:FD:38:65:33:3D:B0:76:36
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:86:22:81:63:fa:5e:9a:17:67:76:ac:82:e8:1d:5d:4b:4c:
94:9c:dd:20:ab:f6:79:f3:a0:5c:3a:bd:f4:a2:94:25:33:b6:
95:13:61:cd:ca:b0:bf:a7:bc:97:0c:1c:a2:c9:8a:ff:5f:b0:
1c:92:e3:66:f3:70:05:01:b2:78:51:72:05:e7:5a:4e:c1:06:
30:c8:88:91:c0:77:9a:97:3f:fc:4f:41:14:07:c9:7f:93:f3:
dc:27:23:f8:65:4f:85:1c:65:f3:4b:ca:c6:2f:e7:35:61:33:
09:80:41:b0:d5:c2:ca:62:64:df:87:fe:93:63:68:de:43:48:
e4:6b:47:30:37:de:c7:5e:31:36:30:41:ed:19:52:fc:73:b0:
ad:cc:86:dc:d5:5a:44:39:e7:c1:b4:b6:c4:83:aa:0a:1d:be:
11:5d:30:79:56:ae:9b:ff:26:ee:e6:f6:48:cd:7a:c3:d1:68:
42:ca:76:97:6c:35:fa:4f:87:69:04:f6:15:17:bb:e2:4b:22:
13:a9:e7:07:de:a4:a1:66:b1:95:9f:8b:20:66:d4:6e:ec:91:
78:de:73:b1:61:4e:fd:b1:89:22:a2:8e:37:5c:67:d5:cc:75:
f4:00:a3:29:fa:8e:12:c0:36:76:15:a4:6b:c3:ef:a1:df:fd:
67:e1:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:56:16 2025 by rpki-client