Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: onobHoqpVXim+wUOPD22wfuiGeYVPRIYVQnq9Lnz1MI=
Subject key identifier: AF:9A:DC:90:30:5E:6A:8D:64:4C:FD:33:F2:3C:E8:33:64:2E:63:3F
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 0198D4E076DEF9E4D4A5EA99BE92FA321258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 03:02:16 +0000
Manifest this update: Sat 23 Aug 2025 03:02:16 +0000
Manifest next update: Sun 24 Aug 2025 03:02:16 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: /OtsQGcqeRY6V1vdzrWjT1tw+ritXtnBlYD+p2J5E4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:76:de:f9:e4:d4:a5:ea:99:be:92:fa:32:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: Aug 23 03:02:16 2025 GMT
Not After : Aug 24 03:02:16 2025 GMT
Subject: CN=af9adc90305e6a8d644cfd33f23ce833642e633f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:40:9e:3a:9b:c8:57:12:9a:56:27:77:93:
f6:7b:8a:8a:bf:38:3a:dc:a6:04:e5:4e:9f:bc:4e:
cd:b8:55:02:18:6e:05:ed:11:ef:5b:ae:75:1b:df:
8f:12:80:b4:9c:6d:ff:52:0a:90:ef:f6:b9:83:f9:
13:9b:cb:f8:9a:99:13:97:3d:fe:74:a2:4e:47:1b:
08:9e:e4:c7:50:63:8e:f9:89:2d:4c:8b:2f:4a:a1:
1e:b8:6d:d4:37:6c:2d:5f:10:d3:29:d3:98:cc:ba:
fc:d6:62:b0:ea:2f:a6:53:a7:10:2f:35:5c:fd:5f:
eb:03:5d:61:4e:b4:85:b8:4a:0c:02:71:4e:9a:c6:
c6:76:a6:bc:7c:9d:53:27:4b:9f:48:77:f0:5b:fd:
92:99:35:e8:e8:bc:a4:91:c6:ce:e7:cb:0e:b6:f6:
72:0b:a3:67:3b:67:0f:ec:99:2a:96:78:3a:a2:b4:
8a:47:bb:25:f9:e4:72:98:21:f6:65:54:12:76:0a:
b7:20:9d:66:09:ed:9b:94:69:d3:bd:73:c4:79:93:
75:31:fd:4b:d1:35:d1:91:bf:52:4b:15:ec:37:ac:
c7:3c:c2:2d:dd:30:06:47:38:37:83:95:ea:ad:3d:
ab:1f:77:5d:55:0d:48:e1:08:d1:6c:65:df:cc:ae:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:DC:90:30:5E:6A:8D:64:4C:FD:33:F2:3C:E8:33:64:2E:63:3F
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:50:ce:de:94:19:6e:2c:37:1e:0b:aa:f4:cc:91:b5:60:ec:
94:86:8d:cd:cb:c6:74:1e:d4:e6:08:be:a0:6b:6c:f4:75:da:
55:ca:45:36:fa:e3:bb:51:21:b1:bb:03:1a:06:0f:d4:11:64:
71:f9:d0:b2:32:3f:9f:6b:84:6a:2a:b0:85:ea:28:da:b3:3a:
05:f0:aa:4c:20:00:10:18:22:49:24:d3:69:86:09:e6:93:89:
ab:85:e7:e3:f3:13:0f:28:42:18:ea:c6:bf:24:12:86:dd:f8:
c7:75:1a:c7:4c:4c:a1:4d:07:57:65:45:06:03:a7:c3:b3:35:
98:55:08:a1:b4:81:89:92:c1:e2:d8:b2:05:be:f2:9a:c4:24:
3e:f7:79:94:d1:6f:5f:2a:d0:19:92:6a:d5:05:a3:b3:33:96:
51:7f:40:a0:77:9d:05:af:b6:bc:68:11:20:7e:1f:d8:c2:2e:
ef:12:2b:81:29:56:e7:3d:d8:75:17:5d:03:63:05:2c:27:dd:
e1:c6:35:a8:bb:4c:12:38:47:a3:fd:51:f4:fa:44:a2:fb:3d:
c3:d2:17:59:4b:f2:80:fd:d4:4c:6a:d5:56:d9:cd:2e:61:fc:
39:3d:0e:0a:17:f4:27:12:84:d7:70:cf:05:df:ae:77:4b:fe:
fb:da:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:56 2025 by rpki-client