Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: mS1tJQemhhwUq8EciMEO5JIU8zRGQS0ZqRbMcfTFDCg=
Subject key identifier: 62:3A:36:2D:5E:38:33:6D:30:90:A7:E9:1F:4E:CA:E2:D3:F3:09:9A
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 0197B77CD9ACEEAAA71BA9A512F368C20D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 108A
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: kqgCLdhePM2hucJw1W35d6aHkuvF9UCJ0AHF7JhqhT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d9:ac:ee:aa:a7:1b:a9:a5:12:f3:68:c2:0d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=623a362d5e38336d3090a7e91f4ecae2d3f3099a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:46:92:e3:7e:cb:fa:1f:cf:b3:93:70:d6:
b5:75:39:84:ba:31:83:bd:3d:d6:3e:4b:5d:de:0d:
20:fa:76:51:46:a7:f8:98:88:12:5f:a1:ae:fb:8f:
1d:71:97:bd:8b:73:f9:11:c5:90:95:45:23:0f:3e:
a2:85:9b:e5:35:fa:b1:b1:e4:97:84:25:bb:e6:7c:
23:75:64:31:7f:3a:18:df:28:77:d8:0b:5d:bc:de:
5f:d8:96:e9:cb:d6:7f:96:a8:28:01:b2:e9:b6:23:
ac:e9:6e:c7:3d:32:b8:7a:82:5d:1a:8e:19:80:aa:
7c:e3:49:50:1f:28:96:8e:7a:e7:46:8c:97:56:0d:
f6:d5:f1:39:06:48:0e:81:7f:fa:56:f5:d0:a7:36:
dd:98:3b:79:ec:e5:aa:c4:80:00:8d:cd:08:95:2d:
32:c2:ef:1c:e6:d0:42:8f:89:a2:ea:35:e9:3d:ea:
df:90:58:22:6b:7f:b1:a7:c0:11:a6:d4:45:57:48:
4c:b3:78:11:b8:e7:0a:21:ef:fd:31:85:8b:39:19:
20:f9:56:80:14:36:93:e2:4e:68:9c:39:fe:e0:99:
d2:e9:03:66:a4:0d:83:ed:c5:e1:af:03:40:b5:32:
a4:df:00:dd:ff:d5:28:b2:3a:f7:fb:20:a5:a2:69:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:36:2D:5E:38:33:6D:30:90:A7:E9:1F:4E:CA:E2:D3:F3:09:9A
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:31:61:c6:86:e7:e7:6a:22:f4:db:11:c6:8a:66:a4:a2:e2:
e7:ee:cf:72:c6:cb:9b:9a:b6:20:2a:bb:82:34:a4:c7:be:55:
64:35:ed:8a:c6:4c:20:09:78:e3:91:c0:70:5f:44:42:d4:60:
72:90:44:ef:bc:16:59:9b:8f:36:2b:22:e3:76:6a:bb:04:9e:
1c:e0:ef:c5:f3:f7:b7:b3:bb:bd:38:79:1d:9e:1b:f2:2c:63:
74:d8:c9:fb:cc:5c:e2:7d:26:dd:49:32:8b:88:54:01:1a:b5:
fa:bf:4a:90:0d:7d:b4:bc:a1:ab:39:52:3c:0e:67:58:ad:b5:
f3:a2:11:ac:5a:a4:c1:68:10:66:77:ca:bc:b8:6b:69:9e:e4:
53:26:de:cf:1d:da:bd:5a:a7:4c:8d:a4:cf:a5:16:8f:db:d7:
17:b4:ae:17:fc:e3:e6:9b:6a:3d:48:5c:32:64:20:1b:2a:91:
63:da:bb:e4:35:d0:8c:a6:90:d0:38:1d:8d:70:fa:49:d9:ac:
2c:49:aa:4c:5d:e1:7b:d0:57:37:9f:25:3b:fc:e7:80:3c:d3:
4e:e2:31:ba:4a:ac:a0:ac:10:be:dd:69:b8:ca:5a:87:45:64:
07:04:5c:1c:92:9f:4f:db:e9:3b:bf:25:f6:c8:46:17:b9:27:
39:25:e8:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fNms7qqnG6mlEvNowg0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjMjI4YWZjNzAzYjZiZWZhNzM1ZjIyMTI4NjFmZDZmYTQ0
NDg3Y2QwHhcNMjUwNjI4MTcwMTQyWhcNMjUwNjI5MTcwMTQyWjAzMTEwLwYDVQQD
Eyg2MjNhMzYyZDVlMzgzMzZkMzA5MGE3ZTkxZjRlY2FlMmQzZjMwOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL1GkuN+y/ofz7OTcNa1dTmEujGD
vT3WPktd3g0g+nZRRqf4mIgSX6Gu+48dcZe9i3P5EcWQlUUjDz6ihZvlNfqxseSX
hCW75nwjdWQxfzoY3yh32AtdvN5f2Jbpy9Z/lqgoAbLptiOs6W7HPTK4eoJdGo4Z
gKp840lQHyiWjnrnRoyXVg321fE5BkgOgX/6VvXQpzbdmDt57OWqxIAAjc0IlS0y
wu8c5tBCj4mi6jXpPerfkFgia3+xp8ARptRFV0hMs3gRuOcKIe/9MYWLORkg+VaA
FDaT4k5onDn+4JnS6QNmpA2D7cXhrwNAtTKk3wDd/9Uosjr3+yClomlJ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI6Ni1eODNtMJCn6R9OyuLT8wmaMB8GA1UdIwQY
MBaAFDwiivxwO2vvpzXyIShh/W+kRIfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2Ut
NTQ2MGU1MDkxZDE4LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84MWEzMjUtMDliNi00NTE3LWI5M2UtNTQ2MGU1MDkxZDE4
LzEvUENLS19IQTdhLS1uTmZJaEtHSDliNlJFaDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABjFhxobn
52oi9NsRxopmpKLi5+7PcsbLm5q2ICq7gjSkx75VZDXtisZMIAl445HAcF9EQtRg
cpBE77wWWZuPNisi43ZquwSeHODvxfP3t7O7vTh5HZ4b8ixjdNjJ+8xc4n0m3Uky
i4hUARq1+r9KkA19tLyhqzlSPA5nWK2186IRrFqkwWgQZnfKvLhraZ7kUybezx3a
vVqnTI2kz6UWj9vXF7SuF/zj5ptqPUhcMmQgGyqRY9q75DXQjKaQ0DgdjXD6Sdms
LEmqTF3he9BXN58lO/zngDzTTuIxukqsoKwQvt1puMpah0VkBwRcHJKfT9vpO78l
9shGF7knOSXomQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:41 2025 by rpki-client