Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: eYVULKGgDbkFJZi4iUjyQ4nuvdMKUXa+uWH466UDbFY=
Subject key identifier: F3:F0:B3:10:FA:DC:3B:BB:11:92:A1:B5:5B:7A:D7:EE:1B:D2:5E:AF
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 0198D65F395450297EDD47CD742BDCE1842B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: QFzaOM0kJDQsw2mYYz1kBMd+8XM7af8ok8vtZaFHAcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:39:54:50:29:7e:dd:47:cd:74:2b:dc:e1:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=f3f0b310fadc3bbb1192a1b55b7ad7ee1bd25eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:19:17:52:4e:bb:7d:f5:44:92:e0:08:0e:c1:
7d:1d:8f:af:c0:57:6f:9b:e8:62:08:d6:42:56:39:
30:13:01:0d:73:ec:06:c6:79:d5:6b:f6:af:a8:e7:
20:33:90:58:4d:a0:bd:66:d3:da:31:91:56:05:b7:
9e:64:74:79:62:e4:3d:af:9d:35:fe:5b:35:ea:86:
0a:8b:d7:a5:55:1d:c9:3b:81:f5:f9:80:dc:9b:34:
58:5e:f8:77:f8:b6:62:9f:52:4d:1e:39:c5:44:82:
96:2e:62:a4:3c:cd:ed:4d:2f:9c:6c:0d:b2:4f:d8:
e2:63:a8:ee:c1:36:48:55:8f:da:1e:60:50:58:5d:
b7:96:ad:ee:49:4c:fa:1b:81:93:79:4c:f0:0d:48:
4e:93:4e:8e:fa:1e:e9:0e:fd:44:b5:d4:ea:08:64:
11:a2:3b:b2:31:b0:b5:2e:91:a5:87:92:23:07:72:
02:8a:59:c1:43:f7:86:a4:24:62:30:85:2a:00:8a:
06:31:d5:03:21:85:47:7c:1a:65:fa:1b:74:22:c0:
3b:6d:cc:8d:6c:7c:c4:d6:b9:e5:b7:d8:35:4b:5b:
a6:35:b2:df:99:ef:b2:43:bd:cc:72:37:6a:70:6c:
45:ae:05:45:74:0c:94:99:de:be:5d:79:8d:50:de:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F0:B3:10:FA:DC:3B:BB:11:92:A1:B5:5B:7A:D7:EE:1B:D2:5E:AF
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8f:5a:c9:f5:2f:8c:ac:52:52:f9:6f:17:65:42:fc:a5:9e:
7c:23:6d:2b:77:74:ca:8e:eb:cf:f3:60:92:39:79:c4:59:e2:
52:e7:ef:52:7d:bc:59:98:1e:b7:52:68:3f:d8:0e:2d:fb:c8:
d9:0f:97:59:f1:58:77:4d:b2:7e:8f:28:f1:5c:77:a5:0f:d1:
da:83:1f:02:ea:e2:5a:8f:8b:27:ee:92:83:40:14:6d:22:3f:
c7:89:76:ea:74:55:ad:e5:5d:44:23:3a:fd:02:94:cc:35:74:
08:06:50:c2:62:89:a0:f4:21:38:16:77:b0:46:bf:2a:be:65:
de:11:df:cb:3d:8e:c3:f2:a9:33:f8:a2:74:30:d1:7a:bf:ea:
dd:cf:14:b5:19:66:92:77:b9:b7:a4:ae:83:4d:09:36:2d:58:
6a:2b:20:d2:53:8e:c3:f2:1f:38:99:b6:55:ca:8a:48:bc:a4:
8a:72:8a:cf:58:d5:7a:23:9d:8b:ca:28:46:2c:64:e9:b1:d3:
da:d2:45:98:e4:47:1d:a9:7e:c1:da:66:72:2d:10:85:3b:d9:
30:b8:2f:0a:6d:22:52:2f:e8:32:87:fb:44:2c:54:4b:1e:09:
38:e1:5a:71:c0:da:26:f5:15:bc:21:22:a6:7d:60:47:42:c8:
2b:80:d4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:27 2025 by rpki-client