Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
File: pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json)
Hash identifier: ByC+6BfYhHR2Gh6xMl1SUA/1Pp+4RIkZ3XDOg+1NrRQ=
Subject key identifier: D9:50:BE:68:A6:F2:5F:D8:86:BE:F6:47:16:57:20:95:DB:4C:60:32
Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
Certificate issuer: /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Certificate serial: 0197CB7107C076C51D3CA4F77DBF728F00F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
Manifest number: 0211
Signing time: Wed 02 Jul 2025 14:01:11 +0000
Manifest this update: Wed 02 Jul 2025 14:01:11 +0000
Manifest next update: Thu 03 Jul 2025 14:01:11 +0000
Files and hashes: 1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: mgUfovDGuyJ+qelIrSX/NO8sJMyV3tVhxL+bQ4O1yEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:07:c0:76:c5:1d:3c:a4:f7:7d:bf:72:8f:00:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Validity
Not Before: Jul 2 14:01:11 2025 GMT
Not After : Jul 3 14:01:11 2025 GMT
Subject: CN=d950be68a6f25fd886bef64716572095db4c6032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:74:f7:ba:1b:ca:75:14:3a:b3:c4:f8:fc:
1c:73:89:da:d4:4c:38:3c:6f:a6:41:cf:97:34:61:
68:8c:eb:fb:20:61:ef:cd:62:73:01:ba:a3:ac:50:
cd:4a:8d:45:22:f1:ae:9e:d2:51:e9:28:49:c0:19:
05:a1:80:18:1c:5e:80:4c:70:f7:aa:6d:52:6b:aa:
82:91:e1:73:bc:39:e9:79:7e:60:4c:d2:1e:55:bc:
bf:06:dc:40:16:03:4b:f0:e3:04:fb:40:91:48:a5:
ff:40:38:4c:32:1d:cb:55:bc:bc:df:72:2a:1d:3d:
ea:29:21:a6:f1:48:90:f2:fa:b5:57:5b:2b:9b:20:
0e:b4:00:81:fa:5f:7d:9f:88:62:8c:e4:d9:ed:5f:
a7:10:ae:8c:fb:b3:33:63:56:c4:67:bf:54:26:d0:
66:9c:f4:ee:97:3a:3a:74:00:c3:69:1b:48:82:96:
94:67:dc:00:c4:ae:96:0c:26:38:f0:e2:9a:2f:28:
f9:f1:25:40:1d:1e:de:0f:63:a8:e7:9a:b6:e0:71:
5c:6a:3b:aa:c2:24:6b:5a:8f:cc:a4:38:23:ed:1c:
6d:59:d4:ee:c3:bf:3e:7a:cb:14:12:54:c9:76:f2:
67:9e:6d:5d:07:c9:a3:d8:7c:34:05:eb:cc:a2:e6:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:50:BE:68:A6:F2:5F:D8:86:BE:F6:47:16:57:20:95:DB:4C:60:32
X509v3 Authority Key Identifier:
keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:5f:02:17:b3:70:58:a9:5c:e5:13:37:0b:d2:3d:f0:9c:45:
d0:51:4f:22:fa:f3:c7:5d:b8:66:2e:74:b0:55:d0:71:52:cc:
1f:c8:1f:22:57:60:8c:c5:04:70:60:e6:9d:c4:9a:74:98:a4:
89:c6:38:97:6a:a3:c9:e1:77:2f:6d:ac:f7:41:cb:de:f4:fe:
a3:53:8f:b2:ce:2c:7a:4d:f8:40:76:65:bf:54:18:56:49:cb:
1c:ce:88:af:29:24:e0:74:8e:e7:8c:e1:e3:6f:50:10:94:cc:
c3:1c:63:94:15:20:54:0c:bc:64:1a:b9:8c:c3:fc:f6:dc:bc:
c8:ec:e2:16:ff:df:a6:75:b6:55:d6:60:e6:54:98:24:c2:fc:
1e:5a:2a:0f:21:3d:20:9f:88:e4:a6:21:ab:76:bb:40:ad:75:
d2:39:4c:b1:b6:91:40:34:98:a1:ed:34:bc:6c:84:08:8e:ab:
71:a7:3c:7b:47:70:7a:42:63:45:f7:6a:cf:29:b1:b9:29:40:
77:46:07:4f:c0:17:77:b7:93:e9:1f:75:70:a4:49:05:76:e5:
09:80:6d:0b:2a:17:7d:66:39:b3:64:60:40:39:25:4d:8b:09:
d3:98:3e:43:f7:f8:fc:69:fc:fd:33:71:ad:8c:04:a1:d2:55:
1c:a9:1c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLcQfAdsUdPKT3fb9yjwDwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NzE1NzAxYjAwYWRlNDg5NWEzOWE3NmEwZDgxMDBlYzk1
ZWFiZTMwHhcNMjUwNzAyMTQwMTExWhcNMjUwNzAzMTQwMTExWjAzMTEwLwYDVQQD
EyhkOTUwYmU2OGE2ZjI1ZmQ4ODZiZWY2NDcxNjU3MjA5NWRiNGM2MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyi1097obynUUOrPE+Pwcc4na1Ew4
PG+mQc+XNGFojOv7IGHvzWJzAbqjrFDNSo1FIvGuntJR6ShJwBkFoYAYHF6ATHD3
qm1Sa6qCkeFzvDnpeX5gTNIeVby/BtxAFgNL8OME+0CRSKX/QDhMMh3LVby833Iq
HT3qKSGm8UiQ8vq1V1srmyAOtACB+l99n4hijOTZ7V+nEK6M+7MzY1bEZ79UJtBm
nPTulzo6dADDaRtIgpaUZ9wAxK6WDCY48OKaLyj58SVAHR7eD2Oo55q24HFcajuq
wiRrWo/MpDgj7RxtWdTuw78+essUElTJdvJnnm1dB8mj2Hw0BevMoub/NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNlQvmim8l/Yhr72RxZXIJXbTGAyMB8GA1UdIwQY
MBaAFKRxVwGwCt5IlaOadqDYEA7JXqvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82MDM3YTUtNTY0MC00YjQxLTkyZTkt
ZjZmMjU0NmJjNjBlLzEvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82MDM3YTUtNTY0MC00YjQxLTkyZTktZjZmMjU0NmJjNjBl
LzEvcEhGWEFiQUsza2lWbzVwMm9OZ1FEc2xlcS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy18CF7Nw
WKlc5RM3C9I98JxF0FFPIvrzx124Zi50sFXQcVLMH8gfIldgjMUEcGDmncSadJik
icY4l2qjyeF3L22s90HL3vT+o1OPss4sek34QHZlv1QYVknLHM6Irykk4HSO54zh
429QEJTMwxxjlBUgVAy8ZBq5jMP89ty8yOziFv/fpnW2VdZg5lSYJML8HloqDyE9
IJ+I5KYhq3a7QK110jlMsbaRQDSYoe00vGyECI6rcac8e0dwekJjRfdqzymxuSlA
d0YHT8AXd7eT6R91cKRJBXblCYBtCyoXfWY5s2RgQDklTYsJ05g+Q/f4/Gn8/TNx
rYwEodJVHKkcrQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 21:42:58 2025 by rpki-client