Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
File: pHFXAbAK3kiVo5p2oNgQDsleq-M.mft (raw, json)
Hash identifier: /YYNu9o+yRnkdO5xSNfnNsSeOb9ETgxmdkPtJ7Zx558=
Subject key identifier: C5:B3:6E:AA:05:DA:8E:0B:A1:0D:55:5D:D9:06:BE:9A:25:79:6F:25
Authority key identifier: A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
Certificate issuer: /CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Certificate serial: 0199FB7C6B6EB5BBB37FDD86A92E57A7183A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
Manifest number: 0333
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: pHFXAbAK3kiVo5p2oNgQDsleq-M.crl (hash: iwn3e2prv0rJJP3xMfDQenh5VQ9t/uE2Q9yHt8iGc+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6b:6e:b5:bb:b3:7f:dd:86:a9:2e:57:a7:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4715701b00ade4895a39a76a0d8100ec95eabe3
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=c5b36eaa05da8e0ba10d555dd906be9a25796f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b5:26:b8:c5:34:04:d7:d8:17:67:d2:1b:86:
7b:70:b3:26:9c:6b:b9:32:8c:2a:4a:d6:34:c8:75:
01:df:16:0c:f7:cd:8c:00:bd:f1:8b:69:af:2a:d3:
7b:f3:54:0d:d8:b4:80:7a:53:0a:a0:28:09:b6:0e:
93:33:3a:3e:0a:bb:92:8c:63:59:01:44:7a:d5:b4:
2e:8e:27:bc:8c:01:48:ee:82:5d:cd:f3:59:3c:79:
6e:b6:e8:7b:39:0a:4e:62:b1:b7:72:d3:5e:ae:9f:
eb:4c:eb:fa:0c:bd:e5:e4:8e:fe:32:e9:db:c5:d7:
b0:ea:43:c4:5f:0d:20:bc:1c:d5:0e:b7:88:14:3e:
cb:60:7c:79:ac:ae:85:34:a6:7a:92:48:8a:e5:b5:
12:e1:cf:74:2c:20:67:ec:46:6e:e0:a6:8a:03:60:
1f:74:e8:aa:21:aa:50:ba:0c:8b:60:02:79:27:df:
00:c3:4a:ed:84:71:56:b7:93:f0:f3:48:73:e9:73:
5c:1f:80:93:07:e2:09:35:46:ae:d3:d9:a8:c0:4c:
05:0d:2a:cb:8b:9a:01:9e:b8:50:11:49:d1:20:2d:
7b:52:15:cb:78:8c:78:bc:f5:17:65:a4:b9:64:8f:
e0:a3:53:f9:14:2d:e1:99:2c:72:81:7d:f4:eb:f2:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:6E:AA:05:DA:8E:0B:A1:0D:55:5D:D9:06:BE:9A:25:79:6F:25
X509v3 Authority Key Identifier:
keyid:A4:71:57:01:B0:0A:DE:48:95:A3:9A:76:A0:D8:10:0E:C9:5E:AB:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHFXAbAK3kiVo5p2oNgQDsleq-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6037a5-5640-4b41-92e9-f6f2546bc60e/1/pHFXAbAK3kiVo5p2oNgQDsleq-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:bf:3d:94:04:a5:36:b3:e6:bf:27:c6:51:8d:e0:ee:b6:e1:
7a:49:54:2e:7c:8a:33:a7:85:a6:f1:7c:a5:90:91:36:ba:0d:
77:e8:eb:a9:b0:99:64:1a:29:b9:bd:30:2c:16:4d:f7:0c:fd:
5c:20:76:f9:42:14:c3:2b:39:58:14:a8:df:b0:06:62:44:75:
b6:90:16:4a:4b:ff:76:63:68:ea:a8:d2:8d:4a:81:fd:c4:27:
16:ae:18:67:c6:7d:2c:c9:e8:cf:85:4d:2c:cb:67:c3:ef:33:
0e:21:08:41:f3:94:1c:77:6d:19:67:82:44:f3:0c:14:3f:f3:
2c:00:9e:76:40:b5:89:36:70:69:a7:89:c7:2a:51:9a:f5:e8:
36:61:bf:5a:08:a0:89:3d:42:93:c3:8e:51:c8:db:f0:4a:c4:
06:41:b2:36:2a:b1:66:70:69:e6:02:13:40:fd:44:2a:38:6d:
39:09:43:44:73:2c:76:58:61:73:0f:71:9f:ec:20:db:2e:2d:
df:b0:0c:da:62:13:55:bf:db:f4:67:de:d3:a2:c0:46:6a:11:
d6:50:40:8f:28:46:49:c7:ea:15:e1:bb:77:3b:74:ac:1f:22:
8d:5c:b8:0f:e6:79:ed:95:c5:1f:e3:5b:76:14:95:aa:61:3c:
e7:1c:4b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:34 2025 by rpki-client