Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: Gw7FmdOyy595eMw3GcK1S4g5a94jBT91jhx35u/NE1E=
Subject key identifier: A7:30:0B:D6:B7:F3:DE:63:FD:66:C7:E6:B3:01:26:2E:49:C0:9E:72
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 01969F08B40C5A584A53FE30F42ADF18E29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 1521
Signing time: Mon 05 May 2025 06:01:09 +0000
Manifest this update: Mon 05 May 2025 06:01:09 +0000
Manifest next update: Tue 06 May 2025 06:01:09 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: /piKZP5i1lNT33e2XJ7EY8r1eMEa2z212h0zx4I1JKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:b4:0c:5a:58:4a:53:fe:30:f4:2a:df:18:e2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: May 5 06:01:09 2025 GMT
Not After : May 6 06:01:09 2025 GMT
Subject: CN=a7300bd6b7f3de63fd66c7e6b301262e49c09e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:2a:d9:da:26:d6:f9:2c:c0:3e:ce:60:8d:
f2:2e:1e:02:99:12:9d:06:12:b7:74:c7:10:94:94:
e7:fd:fd:a0:c1:87:15:17:1e:c2:25:84:03:7d:cc:
5a:b7:90:5b:b6:32:1a:5e:d7:bc:79:0a:ba:19:6e:
c5:dc:be:9f:86:c6:7c:8e:60:44:26:3a:e5:d8:c4:
0c:1e:4d:b5:4d:85:81:6b:9e:c3:1c:f6:b4:70:cd:
ca:6f:aa:e8:ca:4d:9f:5d:7a:97:f1:eb:76:75:75:
66:bd:12:7d:3a:3b:8b:db:8c:72:ac:66:99:6c:3f:
1d:f2:0b:b9:ee:b1:b0:3c:eb:98:91:bf:da:0f:33:
ee:38:27:3e:1c:a6:9f:71:83:f7:8d:17:bc:61:4f:
4a:d7:e4:71:70:d2:b9:88:78:f8:62:3a:fa:a9:2f:
f4:1f:2a:04:5f:a3:9b:b8:75:61:19:43:6f:a0:bd:
f0:d5:12:0d:97:4b:07:53:b0:7b:ff:90:9a:ef:ab:
fb:b4:13:7c:ad:af:6f:32:92:56:63:59:e1:22:bc:
b7:94:70:d2:91:63:b3:fa:a4:e6:65:5b:6f:35:69:
80:20:ce:3f:7a:d2:fa:ae:9e:42:27:26:96:71:ba:
58:7d:97:dc:62:3f:0c:c7:ff:c1:8b:8a:99:5e:c3:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:0B:D6:B7:F3:DE:63:FD:66:C7:E6:B3:01:26:2E:49:C0:9E:72
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1f:70:f9:ef:c0:c7:5d:dc:f7:12:fd:3d:9f:c5:44:73:53:
19:c8:92:68:ff:8b:a7:e6:77:11:dd:50:a8:95:f3:1e:91:ce:
8d:05:68:56:e7:a0:01:75:bd:fd:87:34:74:95:c9:38:8e:45:
c6:cd:24:ab:d6:89:19:20:05:e9:bc:0b:80:71:6c:1f:61:88:
b4:47:84:87:67:37:af:03:06:89:48:8c:29:83:e1:2c:d9:8b:
f5:f4:b7:6e:13:d7:d8:2c:a4:65:bd:84:d4:f2:eb:9d:b4:19:
ad:52:07:7c:07:8d:ca:76:e0:53:df:36:7f:32:30:5b:8f:e5:
3c:86:57:14:2f:7a:9c:25:03:83:27:af:3b:b5:8a:61:c2:83:
93:e6:5c:d1:5f:3c:37:2a:2f:21:0d:26:89:66:9f:9c:83:ba:
b8:7a:33:0b:b7:54:a3:ef:54:dd:06:e0:e9:5e:de:42:6a:1b:
0b:f5:37:a2:a8:71:13:f1:d3:ba:78:d9:6b:39:62:69:3e:2f:
93:d2:55:94:98:26:65:ec:4d:c4:fc:cf:4e:a6:05:95:49:89:
7f:b3:9e:00:7f:77:cb:c6:3f:08:dc:e6:65:45:9b:d8:bf:79:
d0:b9:ab:aa:b3:39:81:e3:94:41:1b:27:09:d2:21:7d:39:af:
59:cc:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:38:40 2025 by rpki-client