Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: qD94GMjsM+v36urm1ZE0sZlyEWurQznwAtfvp31PlWY=
Subject key identifier: DC:87:B2:F7:6E:E2:19:4A:B9:50:B5:A6:EA:53:D7:EB:D6:BA:0D:A3
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 0196CA606AC68ABB350C5103D03975A06350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 0FDA
Signing time: Tue 13 May 2025 16:00:38 +0000
Manifest this update: Tue 13 May 2025 16:00:38 +0000
Manifest next update: Wed 14 May 2025 16:00:38 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: GVP0GbQbtME999A1jZJybl4xv3r6CF2bjp6hhDbMozI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:6a:c6:8a:bb:35:0c:51:03:d0:39:75:a0:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: May 13 16:00:38 2025 GMT
Not After : May 14 16:00:38 2025 GMT
Subject: CN=dc87b2f76ee2194ab950b5a6ea53d7ebd6ba0da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:10:d9:41:d0:a9:58:79:c8:8d:fa:31:0d:
3f:f5:59:5f:56:38:94:ba:11:b5:25:2f:e3:8f:a8:
56:f5:bd:dd:29:7f:95:4d:27:ed:f5:e7:a4:8e:56:
ae:72:09:63:08:52:2c:f2:95:76:73:31:9e:46:e1:
d3:f3:d4:28:b3:14:ca:28:bc:ad:f4:39:38:4e:53:
f0:fb:7c:46:78:06:c4:00:7a:59:44:09:65:20:02:
4a:31:c5:fd:f2:fb:81:09:30:8c:dd:65:a5:75:97:
16:ca:78:30:99:86:25:96:43:c5:f8:29:2a:7d:5d:
11:eb:03:b2:ea:49:8f:8b:69:4a:d9:0c:45:9a:82:
eb:2f:e0:bf:b8:48:0d:bc:12:0f:89:63:88:64:eb:
2b:35:aa:3f:7d:42:c7:17:0e:88:38:7a:62:64:f5:
9f:d8:69:a7:02:27:26:8c:b2:04:ab:34:fe:b1:4b:
39:d6:3d:be:f5:c2:4f:00:68:ff:fb:02:25:cd:fe:
fa:8d:eb:e7:73:4e:29:11:a9:a8:ac:ae:01:36:ac:
a3:22:d9:1f:0b:47:de:7e:82:c1:f2:e3:05:bb:a5:
79:27:95:a8:12:69:31:a9:e0:73:65:4d:8b:7b:70:
e9:28:b0:05:3d:38:1a:98:79:e8:93:e7:73:d9:3a:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:87:B2:F7:6E:E2:19:4A:B9:50:B5:A6:EA:53:D7:EB:D6:BA:0D:A3
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:55:11:0b:e8:70:80:d3:be:15:24:ea:19:34:31:b4:24:
98:9d:67:0a:63:cf:7d:6a:08:fd:ad:e8:33:1a:b7:68:c5:6d:
79:92:b8:79:c2:03:7c:82:5a:d7:1d:28:0d:43:c5:0e:75:ac:
59:ca:73:c8:92:83:69:75:74:cb:8d:29:64:d4:a9:d9:07:4d:
31:be:10:8c:80:97:7b:28:d5:f1:17:02:cc:c9:29:d7:d1:de:
fa:b2:27:6c:9d:34:c2:7c:37:79:69:e4:e2:7e:45:04:38:78:
57:4f:e8:ce:dd:6d:8b:ca:56:aa:b5:d8:39:ed:14:f5:3f:3f:
3c:ae:31:21:df:8b:7e:a7:6c:19:98:67:e7:50:1f:2d:5b:c2:
b9:9b:09:02:ad:04:29:9e:ad:60:22:63:07:ed:84:23:03:dc:
2a:85:a6:d0:c8:51:18:3e:a7:db:6d:1b:5f:3b:fc:57:be:bf:
95:8e:38:3b:4e:a9:02:76:fb:3d:6e:78:91:20:8e:19:fb:39:
4c:2e:da:9e:4f:f4:f9:3f:db:41:8e:18:8e:d2:0a:a3:93:93:
e5:cd:b7:b0:ee:49:91:db:9b:3a:49:9f:28:73:52:17:d2:aa:
1f:54:e5:ac:cc:0b:93:bf:ec:4c:ad:e4:d0:15:10:9e:e3:89:
3f:93:97:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbKYGrGirs1DFED0Dl1oGNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj
NjYzMDQwHhcNMjUwNTEzMTYwMDM4WhcNMjUwNTE0MTYwMDM4WjAzMTEwLwYDVQQD
EyhkYzg3YjJmNzZlZTIxOTRhYjk1MGI1YTZlYTUzZDdlYmQ2YmEwZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VQQ2UHQqVh5yI36MQ0/9VlfVjiU
uhG1JS/jj6hW9b3dKX+VTSft9eekjlaucgljCFIs8pV2czGeRuHT89QosxTKKLyt
9Dk4TlPw+3xGeAbEAHpZRAllIAJKMcX98vuBCTCM3WWldZcWyngwmYYllkPF+Ckq
fV0R6wOy6kmPi2lK2QxFmoLrL+C/uEgNvBIPiWOIZOsrNao/fULHFw6IOHpiZPWf
2GmnAicmjLIEqzT+sUs51j2+9cJPAGj/+wIlzf76jevnc04pEamorK4BNqyjItkf
C0fefoLB8uMFu6V5J5WoEmkxqeBzZU2Le3DpKLAFPTgamHnok+dz2Tqy0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyHsvdu4hlKuVC1pupT1+vWug2jMB8GA1UdIwQY
MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct
ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi
LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/5VEQvo
cIDTvhUk6hk0MbQkmJ1nCmPPfWoI/a3oMxq3aMVteZK4ecIDfIJa1x0oDUPFDnWs
WcpzyJKDaXV0y40pZNSp2QdNMb4QjICXeyjV8RcCzMkp19He+rInbJ00wnw3eWnk
4n5FBDh4V0/ozt1ti8pWqrXYOe0U9T8/PK4xId+LfqdsGZhn51AfLVvCuZsJAq0E
KZ6tYCJjB+2EIwPcKoWm0MhRGD6n220bXzv8V76/lY44O06pAnb7PW54kSCOGfs5
TC7ank/0+T/bQY4YjtIKo5OT5c23sO5JkdubOkmfKHNSF9KqH1TlrMwLk7/sTK3k
0BUQnuOJP5OXsA==
-----END CERTIFICATE-----
Generated at Wed May 14 01:09:05 2025 by rpki-client