
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
File: PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft (raw, json)
Hash identifier: LSSqdsjkxvQkcXTSrhJbfC8OCGR7Jetkn11NL80BrIs=
Subject key identifier: 6B:67:54:5E:56:73:01:91:0A:0B:08:2F:8E:EC:9E:64:6F:0C:2C:03
Authority key identifier: 3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
Certificate issuer: /CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Certificate serial: 019894118CA9DB5D22C5CE7C54541F8C0ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
Manifest number: 10C7
Signing time: Sun 10 Aug 2025 13:00:34 +0000
Manifest this update: Sun 10 Aug 2025 13:00:34 +0000
Manifest next update: Mon 11 Aug 2025 13:00:34 +0000
Files and hashes: 1: PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl (hash: oB/qJUHHnXKKUiqzmbAIp6cPcLTK9qzU7C/o1wZ13io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:11:8c:a9:db:5d:22:c5:ce:7c:54:54:1f:8c:0a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f37c94a96c48fcf84128e847ae9020d6bc66304
Validity
Not Before: Aug 10 13:00:34 2025 GMT
Not After : Aug 11 13:00:34 2025 GMT
Subject: CN=6b67545e567301910a0b082f8eec9e646f0c2c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:c3:fb:c2:e8:0a:a3:6c:ae:65:bd:2b:a3:
9c:aa:3f:21:d8:ea:48:5a:c2:dc:fb:1d:44:e6:68:
67:f9:cc:15:55:6b:18:17:ef:42:1c:d2:e2:0f:d7:
f5:8d:eb:a7:91:9e:da:bb:90:f3:43:1b:e7:d0:f6:
c7:e5:f7:5f:a7:0a:04:ad:e6:d1:99:20:48:8b:e5:
ff:81:3f:92:e8:37:f4:20:25:d1:9d:bc:c8:4e:39:
3a:86:b6:d2:83:96:aa:2e:b8:42:ce:f7:8a:3e:d1:
3f:10:9f:d4:04:33:53:e7:b4:5b:e9:a7:84:90:02:
ab:69:a7:e4:ee:23:ab:d7:c4:98:d0:49:e2:db:f7:
44:18:8d:67:58:94:96:dc:e4:d7:65:e3:9d:c1:f9:
a6:da:a6:ac:33:41:05:d2:3d:57:0c:dd:56:08:ed:
d0:74:c3:05:b2:8f:0f:a0:dc:66:25:92:79:f5:05:
14:3c:b8:7f:20:54:c8:1e:b9:98:75:11:a2:fe:79:
db:a0:ab:5d:08:6f:5f:df:b6:52:8f:cd:f7:03:c3:
b0:33:9f:fb:90:40:44:11:69:e0:18:b5:c7:9a:38:
8d:a4:c4:41:ca:87:65:c3:d0:2a:d4:c8:23:90:6d:
e0:27:94:7b:91:8f:62:67:30:02:8e:e1:76:8a:d0:
52:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:67:54:5E:56:73:01:91:0A:0B:08:2F:8E:EC:9E:64:6F:0C:2C:03
X509v3 Authority Key Identifier:
keyid:3F:37:C9:4A:96:C4:8F:CF:84:12:8E:84:7A:E9:02:0D:6B:C6:63:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzfJSpbEj8-EEo6EeukCDWvGYwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/35a9bc-b142-445f-81e7-ef990c58b48b/1/PzfJSpbEj8-EEo6EeukCDWvGYwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:37:30:1f:6b:82:70:63:e4:f3:a6:29:94:0b:49:83:bf:
ed:15:a0:cd:cb:a9:d8:45:f0:de:28:c9:8c:db:f6:69:82:8c:
64:7d:ec:0c:8d:76:65:fe:16:8c:82:74:ed:e4:b2:0d:c0:47:
60:be:02:6f:0d:d8:cb:b4:34:20:8c:fd:c4:6b:c5:34:d5:b1:
ff:53:f4:41:c9:f3:7e:aa:f4:2f:7a:79:d0:60:ad:56:a2:d0:
9b:76:c2:e7:67:62:e1:b0:cb:d3:71:e9:b9:63:88:30:b8:c0:
bb:87:25:e0:c9:5d:65:64:f6:54:bc:77:53:f0:1d:b7:44:81:
3b:7a:4c:c2:cb:e7:1c:09:4a:72:3e:37:3a:75:7f:64:11:38:
1b:ed:cd:fe:21:a5:bf:18:f6:b9:50:8b:23:b9:17:3d:7a:8d:
5d:33:60:2c:ba:02:d9:e5:c6:71:5d:92:ed:a6:69:25:25:da:
68:fb:bc:ee:41:74:89:a4:a6:5b:b5:d6:09:c3:8e:58:b6:0a:
0f:c4:53:e7:4a:6d:9b:d0:8e:56:a1:a2:fa:72:ff:5d:45:07:
0e:c7:fb:d9:44:9b:dd:91:8e:02:42:8e:ea:de:49:9a:6f:3f:
06:b9:f4:c8:91:dc:cb:1e:d1:52:99:f2:d8:03:df:12:b8:c5:
bf:a1:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:57:30 2025 by rpki-client