Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
File: PCKK_HA7a--nNfIhKGH9b6REh80.mft (raw, json)
Hash identifier: iDTPwFdf6UA3omvwMc+FQ2S6ig01+ciTkA+94/rM7mE=
Subject key identifier: 34:66:B7:B7:05:A1:A0:8A:29:ED:D8:15:B7:9A:D3:D1:3D:26:DC:8B
Authority key identifier: 3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
Certificate issuer: /CN=3c228afc703b6befa735f2212861fd6fa44487cd
Certificate serial: 01987A88E903FA6A3F60324E514542AF0EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
Manifest number: 10EF
Signing time: Tue 05 Aug 2025 14:00:49 +0000
Manifest this update: Tue 05 Aug 2025 14:00:49 +0000
Manifest next update: Wed 06 Aug 2025 14:00:49 +0000
Files and hashes: 1: PCKK_HA7a--nNfIhKGH9b6REh80.crl (hash: m0nD6Szi0eoL2nE0dGCF9r8DGq0cgKZecDkyqrgPU7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:88:e9:03:fa:6a:3f:60:32:4e:51:45:42:af:0e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c228afc703b6befa735f2212861fd6fa44487cd
Validity
Not Before: Aug 5 14:00:49 2025 GMT
Not After : Aug 6 14:00:49 2025 GMT
Subject: CN=3466b7b705a1a08a29edd815b79ad3d13d26dc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:7c:d7:a9:7f:c9:6f:9a:7d:5e:84:0a:84:
85:7e:53:c3:c1:d6:2f:92:45:77:34:cb:a2:29:0f:
87:9d:d2:93:23:dc:5e:11:6e:d6:f2:fe:d6:35:49:
f3:b5:5a:03:6c:fa:b4:1a:54:a8:0d:30:f1:b4:23:
6e:3d:67:d2:98:38:d5:43:09:9b:b8:70:b5:7f:56:
eb:46:c8:b0:6b:bf:25:95:a5:c0:16:de:d1:60:fd:
61:6e:83:b8:aa:81:b1:3f:32:8e:4f:e4:ca:14:c8:
da:af:fd:42:68:b3:d0:ba:23:b8:c1:56:a3:7a:b7:
b4:43:81:2a:ad:9d:8a:db:79:bb:0c:af:e7:32:29:
69:72:ad:30:9f:2e:43:a0:b4:f2:a1:d9:39:be:cd:
d9:6e:01:36:63:12:4b:1b:d9:6b:4a:60:3e:09:88:
e8:95:3c:ad:16:8d:37:b6:0a:d5:d8:8b:01:0e:2d:
7b:f9:2b:c6:2b:74:83:bc:7a:f7:d3:c7:91:bf:12:
e8:03:3c:54:7a:1a:14:29:bb:54:d3:89:de:df:3b:
72:40:0a:ae:67:12:ee:a2:0b:2b:c5:39:55:e7:4e:
fc:b8:bd:ed:09:de:df:6c:c9:f0:d4:ad:65:2b:ac:
6d:8f:c4:cd:dd:11:ab:03:60:90:7f:0c:fc:ec:7c:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:B7:B7:05:A1:A0:8A:29:ED:D8:15:B7:9A:D3:D1:3D:26:DC:8B
X509v3 Authority Key Identifier:
keyid:3C:22:8A:FC:70:3B:6B:EF:A7:35:F2:21:28:61:FD:6F:A4:44:87:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCKK_HA7a--nNfIhKGH9b6REh80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/81a325-09b6-4517-b93e-5460e5091d18/1/PCKK_HA7a--nNfIhKGH9b6REh80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d6:51:66:1d:32:7f:ee:dd:93:bb:37:2b:43:1b:a8:83:5f:
9d:b3:34:7e:f3:17:3e:78:e0:54:16:78:ac:3a:34:6a:5d:12:
e4:a5:31:0f:4a:d7:c9:15:1c:3c:42:89:1d:26:40:c9:a0:e2:
fd:f9:77:e4:27:48:1d:1a:73:da:6d:70:a7:da:eb:e2:1e:56:
7e:ea:09:9c:90:30:7a:9c:43:b5:8b:fd:c1:a5:0f:0c:60:22:
61:73:2e:97:0e:36:8e:28:50:8a:3b:97:d1:27:31:fe:35:24:
64:55:39:7c:a2:55:63:98:75:b8:c7:bd:25:38:74:d1:56:b2:
ec:7e:49:ba:7a:61:64:82:62:16:a0:ab:1a:12:a5:7a:f0:2d:
8e:fb:67:a3:e6:83:a8:e8:4f:a3:14:3f:5e:eb:69:bf:29:46:
f7:b1:ac:c9:79:70:52:04:f8:10:59:66:42:e0:d5:ec:a7:01:
db:47:8b:60:38:42:f8:07:71:03:50:78:78:86:0b:a3:c9:a5:
f4:f6:81:ac:b6:7f:96:b7:4c:cf:f2:2b:a2:3c:f5:50:23:f5:
51:63:32:87:55:3f:57:b7:b1:51:6e:4f:ba:66:31:24:fa:87:
b8:a6:5f:80:f3:82:20:83:91:7b:ef:3f:25:47:71:f6:61:e8:
18:9b:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:12:18 2025 by rpki-client