Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: H6HDfINo4aTG4Q425M4c1pzei9uZ9aEtO5EGN+r92MM=
Subject key identifier: DB:68:A4:C0:FC:EC:06:71:FD:C8:0C:D1:D0:18:4C:B3:D8:5A:F6:9E
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 0199FC58CC589F6A403C9F9FEE1EFCCA2240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: myFzdtoLjpizxzoP8Sagoeyn0MGDTV00M7USegovj1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cc:58:9f:6a:40:3c:9f:9f:ee:1e:fc:ca:22:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=db68a4c0fcec0671fdc80cd1d0184cb3d85af69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:95:f2:84:e5:9f:27:0e:11:5a:60:12:b5:
53:ff:89:f2:56:11:36:48:d2:9e:85:ec:cb:31:94:
80:32:a5:eb:e8:de:85:89:ab:a6:73:43:ab:c8:0b:
3c:cb:fd:6a:eb:d3:c3:67:b3:99:9b:22:eb:c9:73:
bd:0d:9f:51:9f:bb:6b:23:3e:ba:de:b9:5c:35:c5:
58:1c:0e:12:1b:8d:fc:1e:3f:cb:18:a0:d0:9e:fc:
7f:d5:3f:7b:fe:b8:4e:47:c2:b0:00:68:bc:96:73:
91:35:cd:11:0b:0f:95:7a:b1:39:a4:d9:fa:48:4d:
aa:15:9d:c2:82:a1:e9:7d:5b:57:2a:77:a1:b1:45:
26:c9:61:68:4d:8b:a2:fa:05:34:49:49:45:23:9b:
07:2f:8b:91:e3:70:72:db:4e:f1:d5:68:b8:11:d8:
60:6c:a4:5b:2c:ae:8b:73:af:5e:72:37:c4:64:a2:
8a:24:53:41:93:52:2d:8e:77:2a:9b:75:68:c9:32:
b4:ca:3d:a6:f3:5f:1b:ab:dc:3c:ed:64:c5:c8:fb:
e8:19:1b:f9:f4:eb:06:ca:fc:36:29:f0:5c:44:5d:
21:fb:85:cb:b7:cf:65:c1:3d:66:c2:96:84:71:c6:
02:7b:6c:9e:d8:eb:26:24:b6:a2:3e:f8:69:55:9f:
33:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:A4:C0:FC:EC:06:71:FD:C8:0C:D1:D0:18:4C:B3:D8:5A:F6:9E
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:2a:04:f7:33:3e:6e:42:0c:96:36:a4:3d:30:79:01:73:e5:
ae:14:91:a5:f8:5f:68:9a:5a:37:73:51:81:6c:e0:07:2f:2e:
44:59:cf:f6:e9:80:79:30:ca:18:9e:72:58:ad:3d:c5:86:75:
91:bf:3d:09:da:e9:fb:c9:dd:35:c8:14:b2:96:5f:ab:ba:29:
8d:f8:b4:41:86:d2:c4:a4:71:c6:9a:2d:89:18:df:88:ff:9a:
8b:8d:61:2f:d1:1c:c4:88:90:8b:4c:33:d3:48:a7:a0:10:34:
d0:2b:d8:86:0a:a3:c1:62:16:46:d7:78:b6:5f:9b:aa:d8:ec:
af:ac:7a:80:38:ee:37:19:00:f0:55:d3:df:7c:ae:73:fa:72:
80:d6:38:a8:4c:83:53:4b:75:ce:ec:0e:e5:19:96:fc:f5:ba:
9b:fe:90:ed:36:d0:9e:e7:d5:26:6a:57:dc:98:8e:74:ab:43:
6c:c0:a8:29:00:cd:e0:86:41:5d:9c:56:bd:d0:d9:96:be:b3:
6d:49:60:d3:b0:ff:e3:19:f2:c1:1e:66:da:29:d5:ac:2f:45:
29:71:75:8a:25:ea:d1:00:51:a6:06:14:89:a6:40:fb:40:32:
e0:31:38:ff:1f:ea:fb:c1:14:2b:f8:00:13:51:66:7b:46:b7:
3e:cc:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:29 2025 by rpki-client