Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: S8prZXz9LrJpjwGU7ItwNUjKUEmMUJQU+TqMdePiUkQ=
Subject key identifier: 09:F3:8A:C1:02:49:1A:66:E0:46:C3:DE:D5:E4:E9:53:65:53:6D:83
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 0199FFC7FA73079E4E392040DC8ADF19C42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0AF0
Signing time: Mon 20 Oct 2025 04:01:59 +0000
Manifest this update: Mon 20 Oct 2025 04:01:59 +0000
Manifest next update: Tue 21 Oct 2025 04:01:59 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: YOKnnZsbjBUoo4KrxnJvVSvUd4eKqAUg6JFYEAxmbMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:fa:73:07:9e:4e:39:20:40:dc:8a:df:19:c4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Oct 20 04:01:59 2025 GMT
Not After : Oct 21 04:01:59 2025 GMT
Subject: CN=09f38ac102491a66e046c3ded5e4e95365536d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3d:e7:a1:8c:eb:ec:79:c5:55:80:84:0b:c4:
48:5b:a2:39:23:a4:81:a3:62:ab:2f:17:06:23:8e:
40:5d:51:7c:20:5e:41:5d:58:42:ba:6b:c8:f6:e8:
b1:3a:98:4d:2c:6d:e7:ed:b6:62:01:67:51:cc:9d:
95:92:bb:77:e5:5d:51:d1:62:c9:53:a8:f9:10:b2:
7d:39:8f:27:9c:06:6f:b3:61:94:c2:c1:d4:dc:56:
00:45:5a:2e:cd:c4:3c:0f:7e:ba:a3:38:02:7e:c7:
f5:75:98:f8:25:2e:61:b4:90:05:0a:72:47:dd:76:
66:a2:1b:a1:47:3e:34:e8:35:d9:0a:3c:f2:65:bf:
dd:23:35:29:60:fc:d7:7a:04:21:3d:91:a5:cb:f2:
ca:d7:e6:e1:ce:60:12:59:74:7a:55:b9:84:e2:e5:
33:4a:97:30:6f:a0:63:f9:bd:c3:ec:29:b6:5c:62:
f4:04:24:ee:0a:18:3e:fe:c1:fa:70:23:4d:29:a2:
d2:fe:7e:fb:d8:a3:8a:7a:0b:cb:8f:9b:c5:0d:e7:
18:05:63:49:10:12:c6:5f:97:89:a6:94:c9:fb:58:
58:66:1f:6d:3f:d5:ef:3e:21:6d:f0:2f:6a:23:ed:
62:c3:29:99:e9:ff:a1:84:76:a4:68:f1:c3:bd:2a:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:8A:C1:02:49:1A:66:E0:46:C3:DE:D5:E4:E9:53:65:53:6D:83
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3a:0c:67:42:f1:7a:dc:c2:d6:a3:bb:5d:9a:3d:59:61:10:
ad:ca:99:e7:26:37:4d:f6:83:9b:e2:90:f6:ae:05:44:0b:c7:
28:8a:c2:65:19:43:27:36:4a:70:d8:e9:e6:d9:d3:b0:d5:f7:
75:75:37:89:a5:44:50:6e:68:a8:e7:6a:40:05:a3:59:14:e1:
c5:98:a9:65:35:5c:64:51:23:04:c5:9a:70:90:97:f5:97:95:
27:27:c6:fc:61:6f:3a:23:a5:68:16:dd:84:ab:f7:0b:55:2b:
4b:71:62:80:db:8e:de:af:7d:6f:9c:47:4f:cf:d8:f3:d8:af:
e2:42:82:73:3f:11:b7:99:aa:50:73:9f:5e:de:c3:3d:90:af:
ee:24:7e:db:be:5e:7d:e0:95:2a:39:a0:19:77:4e:a6:e0:ae:
52:99:61:39:ef:07:e2:2c:67:73:96:1e:60:c4:6d:a5:e4:c0:
ef:b6:1c:1d:38:f8:5e:8b:33:86:bf:18:53:94:e5:db:52:ab:
e1:bb:ea:42:98:b8:c5:7e:ea:d3:a9:3e:92:d2:da:86:7c:22:
9b:e7:10:3c:65:7d:67:b0:4a:93:36:88:60:e8:dc:6f:f5:17:
3e:59:15:16:ee:4b:68:5d:d0:9e:d4:e8:6a:5c:11:43:8e:be:
32:e0:9b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:22 2025 by rpki-client