Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: IFgCAqlhqblWaAytGyNZlnO5igo5mbIHIwmO+FN5Q6A=
Subject key identifier: B1:85:8D:72:F4:A8:2C:1B:66:AF:32:55:2F:FA:83:10:56:7A:6E:DC
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 0199FB45BBD8AEB82404159ADFF6F12D7268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1181
Signing time: Sun 19 Oct 2025 07:01:15 +0000
Manifest this update: Sun 19 Oct 2025 07:01:15 +0000
Manifest next update: Mon 20 Oct 2025 07:01:15 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: +zNcgQgdF5TWPWKPs3BLlu7XeFMppbN5h4/4b254Vnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:bb:d8:ae:b8:24:04:15:9a:df:f6:f1:2d:72:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Oct 19 07:01:15 2025 GMT
Not After : Oct 20 07:01:15 2025 GMT
Subject: CN=b1858d72f4a82c1b66af32552ffa8310567a6edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:be:53:bf:55:66:66:b0:6d:ae:76:e6:73:
d7:4f:4e:1a:0b:24:39:af:75:0c:38:db:96:cf:cd:
a7:2e:41:52:b2:d3:a9:2a:3b:c4:fb:03:9e:da:e1:
8f:e2:e2:f8:ac:17:29:58:dd:f3:9f:ad:bc:35:17:
d8:b1:53:89:18:ab:ce:0e:71:c9:23:3b:e0:a8:d3:
66:02:99:33:e9:30:09:c3:e9:e3:24:6b:d1:7b:4f:
72:17:ae:27:4f:48:c8:05:ff:75:dc:59:a8:94:63:
a8:b2:61:fe:24:52:cf:f2:0c:03:f0:35:11:cd:b8:
83:09:32:b8:28:3f:44:b4:69:c6:88:8b:2b:90:fc:
da:b1:56:5e:fb:aa:78:52:d9:e9:e5:8b:d6:cc:81:
e9:a9:f8:19:f1:ab:c2:2f:10:46:8f:f0:53:74:d0:
26:ab:b6:2e:c8:d6:2a:e6:2e:98:08:6e:bd:1c:e1:
bf:7d:3a:45:b5:2b:1b:e5:a6:28:39:ba:11:d1:2f:
23:40:09:0c:45:62:ed:7f:31:2b:f5:4d:51:3c:d9:
1e:d2:9c:e2:89:48:98:99:be:d4:4e:81:5c:74:3f:
3b:37:f2:9d:d1:73:d0:87:6f:ce:1f:47:8e:f1:91:
9d:fa:72:d0:73:11:82:e5:b5:7a:73:9f:01:32:33:
ab:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:8D:72:F4:A8:2C:1B:66:AF:32:55:2F:FA:83:10:56:7A:6E:DC
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:49:ec:1c:c1:43:51:02:35:85:9a:cf:f3:91:42:40:ff:
64:9d:9e:cd:c0:5b:31:e9:43:1e:50:c5:30:8f:70:26:e6:36:
4e:c6:17:0a:31:15:8c:4b:38:97:a9:38:1e:42:99:2e:70:6d:
70:17:04:d6:b5:12:56:88:73:30:19:9d:b6:8a:d8:64:9c:77:
11:f1:a7:2b:76:9a:4d:e0:be:e5:37:6e:a3:a0:b8:70:ec:e1:
45:d7:f6:9c:d8:d1:b3:5e:a9:4c:35:eb:bf:e7:e2:ab:3d:8e:
72:68:73:61:b4:b8:1e:b6:dc:fb:7f:39:00:d7:92:9a:3e:08:
81:a3:d0:15:2f:21:4f:27:53:22:63:91:89:e8:fe:ec:7f:0b:
76:c9:7c:63:4e:1d:82:24:7c:fe:35:5c:25:61:89:fa:5c:7a:
c9:c8:6f:1c:03:72:fc:e6:56:b5:f5:13:84:76:0c:27:72:1f:
b1:93:38:d1:b9:a0:ab:a9:c4:e2:06:1f:b4:25:11:4a:f9:24:
b9:38:f0:8a:8a:71:76:8c:f6:49:42:0a:b9:5a:11:15:c5:26:
97:f5:af:cb:56:87:02:61:22:70:1f:df:78:8e:dc:db:29:5b:
89:d8:9c:b1:48:8c:ec:81:0e:2a:69:aa:aa:4a:e8:ff:b4:8b:
55:32:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client