Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: l958HwHLEJIlNpPjp9yz4COkXaYdgTumrc9OzCKgPjA=
Subject key identifier: C2:E7:48:6D:6A:6D:8C:33:32:D2:7F:5F:AB:F7:56:9C:23:0C:8E:A3
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 0197B5FC6F1678044EFDF01021C834E9140A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 1054
Signing time: Sat 28 Jun 2025 10:01:48 +0000
Manifest this update: Sat 28 Jun 2025 10:01:48 +0000
Manifest next update: Sun 29 Jun 2025 10:01:48 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: p6rZgFO3+I41l46DmLOifSfPoeFV0YZvebMrqMpYz3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:6f:16:78:04:4e:fd:f0:10:21:c8:34:e9:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Jun 28 10:01:48 2025 GMT
Not After : Jun 29 10:01:48 2025 GMT
Subject: CN=c2e7486d6a6d8c3332d27f5fabf7569c230c8ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:3f:3f:b6:73:94:76:36:5e:3c:6c:c9:61:
5e:18:e5:cc:6b:de:7d:c8:eb:cb:c4:b9:a2:3b:4e:
e5:63:e7:dc:9c:7c:c4:e5:d0:e3:08:21:d9:81:56:
49:52:22:07:1c:73:97:57:0e:02:dd:89:3f:3a:00:
6a:cb:d9:19:4b:95:ab:e0:e7:7b:83:3b:34:66:ed:
c5:f8:ed:a6:8b:20:f0:d2:91:ac:96:ef:39:71:8f:
84:41:b4:92:7a:9a:3e:6f:fe:ab:0d:69:d3:3f:e1:
ec:23:ae:43:31:29:45:28:a3:45:08:b3:7a:e4:c0:
43:72:4e:8d:20:de:84:f8:24:12:76:d3:de:cd:1a:
8e:49:39:04:bc:76:45:7b:34:a7:9e:07:1f:4e:06:
c7:d2:0e:81:20:74:f8:67:53:9c:24:66:73:0a:bc:
34:16:df:28:ac:c4:52:17:81:f6:2c:e8:86:14:40:
45:62:0a:2a:33:aa:21:f9:2a:81:23:dd:ee:4b:f2:
9a:f1:d3:e9:08:b6:d2:0a:b9:cd:71:83:5b:38:31:
1a:5a:fc:9b:65:c0:05:04:f3:6c:de:5f:53:d2:e0:
f7:bc:52:c1:c5:87:e8:9b:a4:77:93:3a:19:b0:d2:
6e:fb:9b:77:f0:42:0f:44:95:13:26:d4:05:a5:b1:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E7:48:6D:6A:6D:8C:33:32:D2:7F:5F:AB:F7:56:9C:23:0C:8E:A3
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e0:fe:0e:e6:73:c5:e3:71:8f:14:d2:a8:31:e2:f1:76:24:
66:af:90:8a:2d:7d:60:8e:3e:46:6f:ec:0d:28:7e:77:c5:b1:
f9:22:5b:60:86:cc:32:07:0e:4f:73:93:6c:a5:1d:19:88:6c:
cc:47:0e:4a:86:3d:6c:41:a3:16:d1:41:01:2f:62:f8:4f:0c:
e6:f1:4c:cd:44:87:62:94:eb:6f:a4:05:49:1b:1f:93:27:24:
76:fc:62:7a:53:29:0e:9b:4b:10:e9:2a:ed:f7:b0:76:85:15:
aa:cb:be:0f:60:19:f7:69:ba:0e:4f:ac:28:c1:1e:6d:38:a1:
ee:e8:d8:11:6c:6b:c3:d7:b0:36:4c:dd:46:9a:c2:08:b0:b3:
63:c0:58:c9:af:ef:2b:74:16:2f:bc:79:9a:dd:9c:81:d4:2d:
fe:21:ac:00:42:21:7c:09:b0:ff:96:e1:c1:6f:39:11:eb:68:
ed:ce:49:33:9f:8d:30:4c:f7:03:92:ed:41:4d:71:3f:a3:f6:
e1:91:d6:20:cc:01:38:7d:5e:d1:60:a5:87:df:95:a1:76:d7:
fb:66:81:ec:e8:0e:47:b9:8c:d8:50:77:35:52:d7:be:7e:f3:
5e:fc:0f:87:ca:56:88:b0:c8:7f:de:58:09:89:c3:db:05:ef:
90:de:1d:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/G8WeARO/fAQIcg06RQKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzdjOTRhOTZjNDhmY2Y4NDEyOGU4NDdhZTkwMjBkNmJj
NjYzMDQwHhcNMjUwNjI4MTAwMTQ4WhcNMjUwNjI5MTAwMTQ4WjAzMTEwLwYDVQQD
EyhjMmU3NDg2ZDZhNmQ4YzMzMzJkMjdmNWZhYmY3NTY5YzIzMGM4ZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn48/P7ZzlHY2XjxsyWFeGOXMa959
yOvLxLmiO07lY+fcnHzE5dDjCCHZgVZJUiIHHHOXVw4C3Yk/OgBqy9kZS5Wr4Od7
gzs0Zu3F+O2miyDw0pGslu85cY+EQbSSepo+b/6rDWnTP+HsI65DMSlFKKNFCLN6
5MBDck6NIN6E+CQSdtPezRqOSTkEvHZFezSnngcfTgbH0g6BIHT4Z1OcJGZzCrw0
Ft8orMRSF4H2LOiGFEBFYgoqM6oh+SqBI93uS/Ka8dPpCLbSCrnNcYNbODEaWvyb
ZcAFBPNs3l9T0uD3vFLBxYfom6R3kzoZsNJu+5t38EIPRJUTJtQFpbEAhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLnSG1qbYwzMtJ/X6v3VpwjDI6jMB8GA1UdIwQY
MBaAFD83yUqWxI/PhBKOhHrpAg1rxmMEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTct
ZWY5OTBjNThiNDhiLzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zNWE5YmMtYjE0Mi00NDVmLTgxZTctZWY5OTBjNThiNDhi
LzEvUHpmSlNwYkVqOC1FRW82RWV1a0NEV3ZHWXdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJuD+DuZz
xeNxjxTSqDHi8XYkZq+Qii19YI4+Rm/sDSh+d8Wx+SJbYIbMMgcOT3OTbKUdGYhs
zEcOSoY9bEGjFtFBAS9i+E8M5vFMzUSHYpTrb6QFSRsfkyckdvxielMpDptLEOkq
7fewdoUVqsu+D2AZ92m6Dk+sKMEebTih7ujYEWxrw9ewNkzdRprCCLCzY8BYya/v
K3QWL7x5mt2cgdQt/iGsAEIhfAmw/5bhwW85Eeto7c5JM5+NMEz3A5LtQU1xP6P2
4ZHWIMwBOH1e0WClh9+VoXbX+2aB7OgOR7mM2FB3NVLXvn7zXvwPh8pWiLDIf95Y
CYnD2wXvkN4diw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:08 2025 by rpki-client