Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: nXpRc2/+Rs4982J3vdrQyd9jqe7JFMHS8/O8z4C2Jlw=
Subject key identifier: 32:EE:6C:AE:B4:AF:64:DB:07:77:B9:76:FF:6B:E9:6A:64:E2:8A:C8
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 0198D5F1586372FC595A6C5B5F0A6EB5CBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 0476
Signing time: Sat 23 Aug 2025 08:00:20 +0000
Manifest this update: Sat 23 Aug 2025 08:00:20 +0000
Manifest next update: Sun 24 Aug 2025 08:00:20 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: JcEELZ6IlD7rPoWRFhFzcos+iqXrSVXYexCiJt5fNfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:58:63:72:fc:59:5a:6c:5b:5f:0a:6e:b5:cb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Aug 23 08:00:20 2025 GMT
Not After : Aug 24 08:00:20 2025 GMT
Subject: CN=32ee6caeb4af64db0777b976ff6be96a64e28ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:29:0a:de:df:39:5f:b1:2f:8f:a5:5f:9a:
55:5a:0b:ef:d3:8f:53:fc:56:86:8d:ea:40:e7:aa:
dc:49:de:a6:91:3a:14:6f:c1:7f:d8:1c:f5:84:25:
75:91:31:e0:89:49:47:43:83:ba:50:ea:78:b6:0f:
2f:7e:5b:48:40:9e:e2:db:8b:76:b4:33:b5:af:bf:
4c:35:bc:bc:56:a4:9f:66:08:cd:46:f5:8e:5f:f7:
9f:66:af:8f:27:de:e4:ec:cf:a5:b1:0e:f1:21:1d:
cd:14:0d:15:61:e6:c7:7a:ef:3a:f4:fd:74:a5:cc:
d3:1a:75:5c:d4:65:07:0f:0a:03:c6:a2:85:4d:85:
b3:cd:10:e4:2a:1c:9c:6e:02:03:73:54:83:71:02:
31:c6:be:5e:10:18:04:52:38:2f:c5:0e:b1:99:a7:
81:ba:68:93:a0:bf:3f:c5:58:cf:a8:ae:dd:43:ed:
1e:5e:f3:88:a0:b9:15:83:a3:cc:d5:14:44:73:53:
01:73:d7:3e:bb:b5:50:aa:85:32:83:dc:e7:28:97:
60:55:e0:04:8e:b9:54:81:d5:a2:62:e1:dc:6a:8d:
f3:29:e8:cc:36:b0:2b:13:7e:04:6b:74:fb:96:98:
27:ef:d0:39:ef:e7:d1:c8:92:5a:8f:e0:5d:eb:29:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:6C:AE:B4:AF:64:DB:07:77:B9:76:FF:6B:E9:6A:64:E2:8A:C8
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:00:ce:5b:33:71:e0:8f:e0:87:8d:8a:94:ae:38:a0:a8:9d:
c0:c6:90:b4:fa:e7:9f:3b:3d:53:90:9a:16:0d:0c:68:8e:4f:
a7:c7:4d:3c:d8:1a:08:01:f9:f8:b6:61:a2:6f:c5:e3:53:f1:
7d:7b:1a:ea:ba:fc:1a:2c:a6:41:b6:14:13:ed:5a:19:84:89:
f9:56:8b:77:91:ec:fb:30:0d:e7:94:90:34:e2:61:df:94:21:
ea:0b:31:44:dd:c5:9f:5d:e7:fe:ad:53:5d:45:58:ef:a9:16:
52:77:e1:37:e7:4d:b6:bb:87:d5:24:d3:2f:95:cf:f4:65:f8:
10:0d:58:e5:c8:bc:73:9f:a0:9f:a5:af:37:11:3a:bc:58:6a:
9d:88:31:ea:a5:82:70:df:98:19:d6:9d:8b:32:ba:d1:59:a6:
8d:a8:3f:55:dc:63:f5:ba:8f:34:06:7e:14:6c:12:aa:27:2c:
32:80:c7:55:32:51:0d:8e:2c:76:90:91:2a:20:26:4a:28:05:
9a:91:d6:91:85:7a:44:40:22:ff:3e:18:44:20:2a:10:d9:26:
06:52:ae:6a:3e:6c:5c:68:1f:c7:ff:a7:bd:fb:3c:e6:af:a1:
f2:8a:0b:a5:c9:65:b1:ac:63:04:33:9f:4f:cb:6e:6d:7c:6e:
6b:cd:eb:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:44 2025 by rpki-client