Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File: pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier: HLvtc8AvDl5k04dAkWh/7PBwfK/sMWMNrAY6245Ee18=
Subject key identifier: C1:46:7C:E4:E5:88:AB:CD:D1:F4:C5:84:36:79:A9:62:80:AF:9B:A7
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer: /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial: 0197B70F26E995CCA8B9364A50B42118C7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:52 +0000
Manifest this update: Sat 28 Jun 2025 15:01:52 +0000
Manifest next update: Sun 29 Jun 2025 15:01:52 +0000
Files and hashes: 1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: V6Kfys+gY5XSk73/i1TjFBp9BiaBMaIp/HAaN/zvdJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:26:e9:95:cc:a8:b9:36:4a:50:b4:21:18:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
Validity
Not Before: Jun 28 15:01:52 2025 GMT
Not After : Jun 29 15:01:52 2025 GMT
Subject: CN=c1467ce4e588abcdd1f4c5843679a96280af9ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:bd:7b:9a:bd:3c:16:c2:7a:ae:2a:47:67:
5a:b2:16:ba:03:74:07:ea:ed:c2:28:44:39:ad:d9:
d2:91:83:17:be:de:81:4e:0d:ff:88:2a:7a:58:b0:
8f:b3:10:f3:42:77:b6:c7:8e:4f:fc:53:4b:94:e6:
0a:0e:40:7e:ac:e6:c4:97:83:b5:27:9f:f4:67:75:
74:ba:8f:64:7c:6d:d5:d4:71:ab:25:c5:2a:0e:97:
08:25:f1:1d:b3:b8:3f:7d:50:44:e7:f1:43:1c:2b:
c5:13:84:1c:32:76:42:1a:ba:f4:88:3d:46:3f:db:
06:9e:54:9d:31:ab:71:cd:0a:47:0e:24:aa:35:7d:
ed:c0:0b:7e:37:0f:1f:1d:bf:8b:6e:fe:11:07:14:
78:6b:9c:55:93:d4:04:77:58:2a:20:9d:2e:25:03:
87:3a:c7:d8:a9:f5:15:ca:84:cc:9b:a2:b3:16:8d:
8b:81:68:9d:52:aa:e1:31:b1:fd:09:41:1f:0e:d0:
1f:90:93:51:d1:16:40:c0:a4:d1:9d:d9:32:1c:54:
35:52:dd:fb:02:2c:d6:d8:a7:ac:61:6e:45:bd:38:
07:74:d9:d7:59:02:39:22:7b:40:91:17:0c:3b:6b:
94:bc:b6:be:92:4e:89:b4:35:53:b9:09:78:f0:43:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:7C:E4:E5:88:AB:CD:D1:F4:C5:84:36:79:A9:62:80:AF:9B:A7
X509v3 Authority Key Identifier:
keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:f4:94:b2:4b:90:13:64:53:7b:8b:dd:af:72:54:87:39:
34:c3:28:07:14:e8:d1:19:58:e0:97:8b:d8:b9:ff:a5:18:d6:
1e:cf:a6:1f:fb:3a:3c:29:b0:1b:38:8f:48:fa:89:16:fd:1b:
db:72:47:ac:91:08:db:96:1d:49:63:49:e7:8e:f9:ef:d7:b2:
52:65:64:2d:8f:30:c6:56:f5:7d:b7:ac:54:c8:42:80:6f:a9:
e3:7b:41:68:11:ed:ef:2f:3b:0d:44:fc:8b:64:27:c1:c1:bb:
1f:15:c4:18:61:bd:c4:e7:65:a3:87:1a:64:7b:46:86:92:c0:
a6:f8:96:01:77:06:3d:81:6f:2b:d9:d0:4a:e5:ef:ea:ad:d0:
4e:81:95:02:ec:d6:5f:d1:1d:b4:fa:7c:09:f4:4e:7b:e6:39:
8a:e4:b2:74:de:6e:f8:a3:5c:12:c6:02:16:14:53:70:ab:17:
c7:28:64:58:59:e2:72:82:8e:8a:4c:ca:7d:ba:37:0f:c8:c2:
6c:dd:2a:8d:b3:95:8a:5f:ba:8a:f1:92:b0:c5:6d:29:63:1b:
50:22:bd:42:45:d2:fd:0d:c7:27:bc:4c:1a:fd:4a:bb:d7:1d:
70:45:21:60:d1:48:81:6c:81:64:a7:44:39:7c:3b:f8:05:04:
25:8c:91:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DybplcyouTZKULQhGMesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MzdlMjkwMTY5Y2ZjZTZhMzM4YTY2YmNhNDVjZmU2MzVk
MTU0NDYwHhcNMjUwNjI4MTUwMTUyWhcNMjUwNjI5MTUwMTUyWjAzMTEwLwYDVQQD
EyhjMTQ2N2NlNGU1ODhhYmNkZDFmNGM1ODQzNjc5YTk2MjgwYWY5YmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BC9e5q9PBbCeq4qR2dasha6A3QH
6u3CKEQ5rdnSkYMXvt6BTg3/iCp6WLCPsxDzQne2x45P/FNLlOYKDkB+rObEl4O1
J5/0Z3V0uo9kfG3V1HGrJcUqDpcIJfEds7g/fVBE5/FDHCvFE4QcMnZCGrr0iD1G
P9sGnlSdMatxzQpHDiSqNX3twAt+Nw8fHb+Lbv4RBxR4a5xVk9QEd1gqIJ0uJQOH
OsfYqfUVyoTMm6KzFo2LgWidUqrhMbH9CUEfDtAfkJNR0RZAwKTRndkyHFQ1Ut37
AizW2KesYW5FvTgHdNnXWQI5IntAkRcMO2uUvLa+kk6JtDVTuQl48EOeVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFGfOTliKvN0fTFhDZ5qWKAr5unMB8GA1UdIwQY
MBaAFKc34pAWnPzmozima8pFz+Y10VRGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHpmaWtCYWNfT2FqT0tacnlrWFA1alhSVkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hZmE5YWYtZmU1ZS00MDIzLWFjMGYt
NzZkMjY3YTI0ODlkLzEvcHpmaWtCYWNfT2FqT0tacnlrWFA1alhSVkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hZmE5YWYtZmU1ZS00MDIzLWFjMGYtNzZkMjY3YTI0ODlk
LzEvcHpmaWtCYWNfT2FqT0tacnlrWFA1alhSVkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcD0lLJL
kBNkU3uL3a9yVIc5NMMoBxTo0RlY4JeL2Ln/pRjWHs+mH/s6PCmwGziPSPqJFv0b
23JHrJEI25YdSWNJ547579eyUmVkLY8wxlb1fbesVMhCgG+p43tBaBHt7y87DUT8
i2QnwcG7HxXEGGG9xOdlo4caZHtGhpLApviWAXcGPYFvK9nQSuXv6q3QToGVAuzW
X9EdtPp8CfROe+Y5iuSydN5u+KNcEsYCFhRTcKsXxyhkWFnicoKOikzKfbo3D8jC
bN0qjbOVil+6ivGSsMVtKWMbUCK9QkXS/Q3HJ7xMGv1Ku9cdcEUhYNFIgWyBZKdE
OXw7+AUEJYyR4g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:30 2025 by rpki-client