Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: h5YIXwUF7NWWphKILIN/NDSoo9xYDqbOLoAYCoBJJ2Q=
Subject key identifier: 40:0C:76:69:44:86:49:7E:D4:20:8C:6F:98:CE:7C:77:23:00:95:0C
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019A541A9B372FDB39D29D1F0E6C15958F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 11AF
Signing time: Wed 05 Nov 2025 13:00:20 +0000
Manifest this update: Wed 05 Nov 2025 13:00:20 +0000
Manifest next update: Thu 06 Nov 2025 13:00:20 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: THdT3aK6/AsdVC64av/9zQscBqinvX65nvFNMyppRRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:9b:37:2f:db:39:d2:9d:1f:0e:6c:15:95:8f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Nov 5 13:00:20 2025 GMT
Not After : Nov 6 13:00:20 2025 GMT
Subject: CN=400c76694486497ed4208c6f98ce7c772300950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:da:29:84:4e:d8:20:55:88:b2:d5:4c:ef:84:
e2:e2:23:a8:e5:43:17:cd:ad:56:b0:9b:db:74:a2:
30:1a:27:03:1a:35:98:7a:b4:22:e9:2c:d4:95:a5:
a5:3a:5f:d8:78:c3:14:9b:5d:a0:11:ae:d8:3d:32:
6e:56:f0:8b:d4:36:4e:dd:2f:d0:9d:70:35:66:71:
ac:e7:5c:d8:6f:7e:34:53:24:2f:cd:07:a5:11:c7:
d0:c9:22:44:d7:b2:27:4d:32:74:b6:3d:2e:19:f5:
8c:c6:b6:3a:e6:93:8d:3e:dd:8c:e3:d1:65:b9:37:
71:4c:a4:e9:f0:eb:f2:09:6a:5a:38:25:74:76:bd:
6f:f8:5a:c8:9b:61:c6:ba:21:8b:3f:e6:da:55:73:
fc:73:44:92:e2:93:e8:07:e2:88:4e:a2:65:76:a1:
2f:ec:85:b7:4d:78:27:17:2f:95:de:c5:72:72:ef:
48:4b:ec:cc:f5:43:3a:fa:9a:d8:c7:03:14:4c:ca:
1e:09:b9:77:de:4b:96:a4:27:e1:6a:0d:2e:a4:8c:
84:84:c4:e8:76:10:df:c3:44:b1:be:9b:4b:cd:24:
ef:fa:ec:7a:43:ba:dc:a3:68:68:7c:16:7b:eb:46:
b2:aa:7f:2d:d1:18:74:14:5f:90:f4:ad:aa:ce:f5:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:76:69:44:86:49:7E:D4:20:8C:6F:98:CE:7C:77:23:00:95:0C
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d4:aa:02:80:ba:95:e5:29:db:53:88:4b:f7:42:97:32:05:
70:62:c9:cb:46:a4:21:28:0d:35:23:2f:a2:7a:13:5b:a7:a5:
c1:7b:e2:ec:da:fe:40:b4:e2:ed:69:00:bd:16:16:49:7c:0d:
3a:86:64:f1:0a:fc:6d:44:8b:59:87:e1:54:9a:b6:52:85:c2:
35:9e:c3:05:ad:d1:44:a1:03:11:49:fa:14:2a:79:0b:eb:43:
1d:6e:33:92:24:bf:97:59:6b:34:1c:29:c1:48:83:3b:5e:e1:
fc:db:60:62:27:5b:17:29:11:6e:08:1c:08:9a:7e:09:9a:03:
78:c5:c7:aa:2c:01:bd:b8:25:6a:85:4d:4a:f2:f0:77:f2:aa:
99:0c:8a:20:13:d1:2e:b9:3d:c4:9c:ca:ca:a7:54:9e:57:90:
f4:3a:77:ad:e4:5a:6f:c9:be:67:ed:2b:ce:45:9f:4d:6b:70:
c7:4f:30:b2:79:40:62:41:18:b6:37:ab:61:65:20:92:3f:65:
2f:32:88:57:c4:64:2c:cf:38:11:cf:be:b2:c9:b6:39:0f:a8:
22:9a:00:f0:10:8b:e7:4e:ef:ee:6a:0a:5d:5f:fc:ea:cc:11:
92:81:fd:55:d8:4e:bf:c5:9e:dc:76:76:6c:27:f1:15:fa:eb:
7b:33:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:43 2025 by rpki-client