Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: sxv17e7zNZjl8Lfbm86/ceOfB42dIWCEG4gcVQeIbTE=
Subject key identifier: 78:C9:E6:AD:82:DA:2A:B8:EE:A2:3E:B4:96:B4:B5:03:C0:84:A9:2C
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 0199FCC6B1C7CB4ACCEB8A7A39A19C39F832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 11B7
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: d2vW9XSq/NI2+NLVl2MqrcclilAcqRiq5S671SmDmMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b1:c7:cb:4a:cc:eb:8a:7a:39:a1:9c:39:f8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=78c9e6ad82da2ab8eea23eb496b4b503c084a92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:36:7a:7a:06:e1:1c:a7:3d:75:12:66:a3:
1e:dc:f8:15:34:71:76:8b:26:6e:a3:b9:1d:6b:64:
2a:79:3b:81:86:e2:cc:ba:31:a2:39:d2:d5:ba:6a:
db:58:6e:4f:a0:4b:20:bb:ff:48:1c:40:f7:a5:9f:
08:ff:ed:45:0e:9e:3f:39:11:32:52:a9:40:fe:7e:
cb:0c:03:b1:ff:32:db:48:85:00:73:eb:96:de:0c:
fc:f8:e3:b1:f0:d3:26:b2:1a:cd:7b:41:26:47:ce:
6f:05:27:c9:b5:8c:4b:56:ea:bf:9a:79:26:3c:09:
a9:a3:2b:8b:38:ce:05:a1:fc:18:40:33:ab:69:06:
aa:df:84:68:1e:3d:71:a9:97:db:7a:56:e7:04:62:
9d:fc:97:39:af:bf:01:ed:df:54:e4:49:98:5e:a8:
7b:c4:fe:af:76:27:5d:14:93:af:68:91:83:a2:3f:
e4:84:ae:cc:7b:52:f3:54:94:76:a7:f5:3a:6d:b2:
7f:7f:ce:3b:b4:95:7e:7f:7d:f4:2a:b4:d5:9a:70:
b3:76:44:e7:47:4f:b7:20:b0:63:32:0a:53:b5:e1:
b2:a1:f0:16:d7:06:a5:2d:ee:61:87:96:f8:bd:4c:
1d:b1:8b:80:34:28:61:c0:04:f8:c5:4f:34:6f:64:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:E6:AD:82:DA:2A:B8:EE:A2:3E:B4:96:B4:B5:03:C0:84:A9:2C
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:fa:6c:0d:ba:22:6c:46:0a:04:54:10:ac:65:a2:ff:cb:8b:
a4:54:c3:46:46:f3:a9:b6:4f:03:55:41:84:13:c1:46:95:d8:
48:46:6f:bd:b4:8f:a7:29:aa:3b:be:56:97:4c:29:bf:ae:e7:
84:a4:10:f5:98:54:b5:d1:71:9d:33:16:51:a7:db:6c:ce:72:
a8:43:37:52:0a:b1:8a:50:a9:1d:0e:43:fc:d6:f9:70:ab:35:
dd:ad:fc:43:37:3b:ba:36:7e:68:a1:49:12:0a:1b:cb:c5:b4:
fe:74:fb:a3:b0:14:c1:6e:24:e7:05:1d:b1:01:27:5e:df:ce:
bb:47:e8:a4:a7:27:87:b7:e2:a6:e8:f6:da:3a:28:7f:8b:10:
bb:cc:35:33:87:fe:dc:a8:65:79:a4:e5:ae:20:51:79:43:89:
c4:15:cf:08:5e:a7:8a:68:b7:be:1b:19:e9:79:06:95:a4:f8:
89:2d:76:de:c4:e9:1d:b0:fc:f2:67:71:3c:4a:22:5b:b9:a8:
94:8b:38:a0:db:37:7d:ed:90:90:84:51:eb:e8:37:8a:f9:c5:
8d:f0:80:58:31:12:ec:2f:93:cf:58:4b:45:17:2c:93:e3:a9:
63:ff:36:7f:cf:b4:40:25:dd:3d:28:70:38:6b:f8:6e:55:b6:
d9:db:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:10 2025 by rpki-client