Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: C+jV1gjkW2nKfJjE2sqhsuF/yqIxRJuHi1xkUlH42/A=
Subject key identifier: 53:C8:4B:2D:AC:F8:A4:83:02:AE:F1:AA:46:FC:AB:CB:2C:FD:54:94
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 0198D5BBBAA6DCA3821A9D57D15A7F3657A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 10E9
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: MeRPstIen1OT4Fymw3HQ0Syh+zv3lc90UkFDXtiQ9RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:a6:dc:a3:82:1a:9d:57:d1:5a:7f:36:57:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=53c84b2dacf8a48302aef1aa46fcabcb2cfd5494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:da:bb:f0:0e:6a:46:f6:75:b2:2e:17:65:
18:66:92:7c:1b:b8:3b:93:0f:44:4f:b0:10:9c:fb:
ee:fb:2f:e8:5a:bc:b3:50:4a:c0:da:d2:2c:55:8c:
67:0e:7e:af:93:d7:37:bf:13:af:07:bd:72:85:a8:
91:d2:dc:bd:34:d0:11:5b:6d:3b:9a:50:57:8a:db:
f9:ec:55:e8:63:30:99:d5:f7:91:4f:2f:93:79:90:
eb:a4:4f:cc:c9:09:7b:3c:09:9c:12:e0:20:97:77:
62:c0:a7:2b:9b:ef:e2:0f:3c:32:17:b4:12:0f:12:
47:92:95:14:82:db:be:e2:72:bc:d0:c1:4e:ea:a2:
1d:bd:c7:3e:a3:79:23:98:ce:9e:4e:ff:24:6e:50:
53:9d:bd:ba:a8:eb:f3:83:90:a0:04:fa:8e:47:dd:
51:c5:32:af:37:63:8c:6c:22:90:68:44:0e:8e:e0:
89:1d:78:d0:71:5e:75:fa:32:86:cc:a3:02:01:e3:
a7:f1:6d:68:75:bc:88:08:44:43:9f:f9:13:46:a1:
de:70:ad:56:0f:a4:2f:ee:bd:af:38:21:f3:0c:c9:
7a:ef:1a:c0:50:b3:c7:2d:d4:35:73:b2:25:65:d8:
a8:74:65:c8:dc:07:c2:0a:b1:cc:8f:45:42:b1:b2:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:4B:2D:AC:F8:A4:83:02:AE:F1:AA:46:FC:AB:CB:2C:FD:54:94
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:72:c2:09:9a:e4:6b:b7:a7:b7:a2:90:60:08:2e:0d:cc:8e:
78:63:77:26:70:9d:6d:24:e6:3c:d4:d6:d9:25:63:ca:b2:e8:
9f:df:10:8c:5c:48:cf:20:4a:27:df:d5:03:c3:09:81:e5:92:
e9:bd:07:32:56:43:8c:5b:71:68:2f:8e:df:4d:98:ad:d0:d2:
a5:65:35:8b:66:03:3a:91:e6:0a:49:c7:b7:03:fa:1d:4c:7a:
07:7c:1d:a5:aa:cd:a9:bc:6e:e6:88:38:80:88:3e:ef:83:f7:
70:0b:d6:5f:6a:d8:ea:de:52:06:83:67:17:d3:b4:2e:22:a9:
e9:4d:5e:bf:44:cd:33:d1:03:2c:6c:72:64:24:30:f4:8a:01:
6c:4d:c8:57:8a:f4:7f:e7:e7:b8:01:05:67:18:f1:f8:79:03:
6c:53:79:8a:17:5f:11:a1:17:55:35:c7:7c:f0:30:e3:c1:bf:
64:79:f1:a5:d5:8f:9f:46:6d:3c:83:f0:7a:fd:66:ec:0b:a4:
a6:0e:6f:93:52:d1:1f:63:55:61:17:48:c4:52:c1:ee:3e:80:
08:e0:40:ef:90:86:0a:5f:47:5d:a7:e6:0f:8a:23:ac:c3:37:
e1:97:e0:79:40:47:3b:ca:42:b4:b6:3b:06:8a:4f:33:69:09:
04:27:f8:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu7qm3KOCGp1X0Vp/NlehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj
NjYzMDQwHhcNMjUwODIzMDcwMTQ2WhcNMjUwODI0MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg1M2M4NGIyZGFjZjhhNDgzMDJhZWYxYWE0NmZjYWJjYjJjZmQ1NDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7au/AOakb2dbIuF2UYZpJ8G7g7
kw9ET7AQnPvu+y/oWryzUErA2tIsVYxnDn6vk9c3vxOvB71yhaiR0ty9NNARW207
mlBXitv57FXoYzCZ1feRTy+TeZDrpE/MyQl7PAmcEuAgl3diwKcrm+/iDzwyF7QS
DxJHkpUUgtu+4nK80MFO6qIdvcc+o3kjmM6eTv8kblBTnb26qOvzg5CgBPqOR91R
xTKvN2OMbCKQaEQOjuCJHXjQcV51+jKGzKMCAeOn8W1odbyICERDn/kTRqHecK1W
D6Qv7r2vOCHzDMl67xrAULPHLdQ1c7IlZdiodGXI3AfCCrHMj0VCsbLJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPISy2s+KSDAq7xqkb8q8ss/VSUMB8GA1UdIwQY
MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct
ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi
LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIHLCCZrk
a7ent6KQYAguDcyOeGN3JnCdbSTmPNTW2SVjyrLon98QjFxIzyBKJ9/VA8MJgeWS
6b0HMlZDjFtxaC+O302YrdDSpWU1i2YDOpHmCknHtwP6HUx6B3wdparNqbxu5og4
gIg+74P3cAvWX2rY6t5SBoNnF9O0LiKp6U1ev0TNM9EDLGxyZCQw9IoBbE3IV4r0
f+fnuAEFZxjx+HkDbFN5ihdfEaEXVTXHfPAw48G/ZHnxpdWPn0ZtPIPwev1m7Auk
pg5vk1LRH2NVYRdIxFLB7j6ACOBA75CGCl9HXafmD4ojrMM34ZfgeUBHO8pCtLY7
BopPM2kJBCf4UQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:30 2025 by rpki-client