Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: GRXwiAKmbk6du6aMKHgVw/DNITfm7HgsaEAQYAGcQmg=
Subject key identifier: 79:A2:54:75:05:41:87:C9:F7:BC:83:B1:97:AD:4A:16:6A:6F:A2:54
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 0199FB7CEDC50157B0B762272D877AB36A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 050E
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: KLm/t7WCqaSoji40xfO48p0OOTsNRTMJ5SedKq+NA1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ed:c5:01:57:b0:b7:62:27:2d:87:7a:b3:6a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=79a25475054187c9f7bc83b197ad4a166a6fa254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:9c:08:32:c7:f9:5b:1d:6c:37:85:b9:6d:
76:28:6d:e9:d0:95:f6:fc:f3:3f:3f:f2:b7:86:4c:
9d:4a:b2:7a:ef:09:aa:c5:11:79:77:bc:be:67:17:
42:52:70:bd:9f:38:27:43:61:65:53:58:56:8d:4c:
18:ca:3e:d2:6d:bd:06:fc:59:fb:ca:38:58:13:26:
47:cc:ac:77:c3:8c:7c:20:94:10:38:f6:d6:f6:b2:
ae:eb:d5:b0:c7:9b:1a:1a:13:a2:39:dd:24:53:2b:
23:a3:81:8e:31:e5:10:a2:4f:d8:bf:dc:64:ad:d9:
3f:fc:46:38:46:35:9a:48:99:b5:b4:78:07:a6:be:
59:64:b5:d9:ae:a5:85:f6:78:c4:96:fe:9f:23:09:
66:7f:ba:ff:76:2c:5a:2b:95:90:c5:bf:0c:f2:44:
a8:08:db:e3:ea:14:f6:af:53:46:40:d5:b2:73:d2:
13:1f:f7:9a:8c:6c:59:e2:05:91:72:86:4e:e3:31:
ec:9f:7a:31:f2:7a:ad:07:be:db:6a:37:a3:4b:cb:
41:fd:d8:57:18:a4:75:da:ae:1d:bc:69:9b:7f:ac:
ba:f2:c4:59:84:2f:ea:10:5f:c2:7b:89:7f:eb:1d:
87:f7:fb:cd:aa:a1:bb:ef:8b:f3:b2:eb:1e:71:52:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A2:54:75:05:41:87:C9:F7:BC:83:B1:97:AD:4A:16:6A:6F:A2:54
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f9:bb:af:2f:22:db:1f:37:54:c0:2e:e2:72:0e:bb:19:48:
aa:a2:d1:78:74:5d:fb:1c:3c:0b:93:e5:56:b9:ce:66:94:8e:
dd:d4:df:7a:4f:71:d4:f3:b2:05:69:2c:26:7a:83:26:a3:3a:
0a:1e:f0:b3:1d:fd:c2:a8:4f:ed:a1:3b:9e:66:ef:1d:de:aa:
62:42:63:7a:df:fa:c0:c0:f3:0f:dd:26:4a:33:8d:89:22:1d:
e6:f3:19:ca:1c:d9:86:23:a1:99:59:0b:b4:34:2d:f7:78:21:
cf:33:3b:b2:e4:97:bc:f8:99:93:58:d5:d6:85:2e:be:80:d5:
b9:07:ff:10:e9:83:7c:f1:64:64:20:ae:22:c0:b9:f3:10:4f:
34:77:f7:86:38:fc:45:ae:2c:65:15:8d:65:dc:d6:1a:3f:c0:
0c:59:0d:c6:98:36:99:ee:f2:32:38:96:bd:ea:6b:31:b7:55:
c7:ca:96:cc:8e:13:3e:67:b1:01:fb:0c:69:eb:ed:37:0a:98:
9a:92:40:04:3c:a3:28:ee:60:8c:1c:dc:3d:f0:f2:dc:fa:f5:
4d:41:b4:91:38:85:df:99:d0:23:c4:92:ce:08:a4:da:ff:67:
7f:84:5e:b3:31:b4:d4:2b:c0:28:94:b8:87:37:4c:93:82:d8:
e5:ee:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:43 2025 by rpki-client