Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: NZz2NkFtKQLIzoK7cDXjSYaX4NOLG0iAUSwkoT2t3a8=
Subject key identifier: BC:CE:91:4D:77:95:FF:E2:4F:54:F7:F7:A8:9D:92:D1:01:25:28:64
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 0197B6A06E1E699D50FE5A135D9FD48AD60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: AXZntItNLWtYq7WxylRlZBdr+Gu9P/NPmQQ3Yy1fbjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6e:1e:69:9d:50:fe:5a:13:5d:9f:d4:8a:d6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=bcce914d7795ffe24f54f7f7a89d92d101252864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:0a:1e:9a:4d:dc:73:0e:81:48:eb:f9:e9:
2d:19:ab:12:0f:e2:1f:83:7e:ac:95:08:0c:c2:55:
bc:e7:a6:90:0b:69:b8:8a:86:f7:77:aa:72:7e:de:
2d:d8:fb:8a:fb:58:d4:6f:b2:bd:0b:7a:89:87:13:
e4:e1:01:80:ed:82:50:d0:8b:26:c6:e3:1c:46:2c:
2e:9d:f5:58:80:63:2d:c1:04:ff:7a:75:e7:a7:ed:
18:e0:49:0c:8f:40:54:7b:7f:0b:e6:8c:de:cd:3a:
c8:be:97:70:d8:53:67:37:cb:bb:2e:4f:d5:89:4f:
33:0a:85:aa:c3:2e:5f:9d:f3:d4:23:75:e4:6e:5b:
54:89:53:73:f5:d6:eb:fb:22:67:42:5a:d4:cd:7a:
fc:00:72:fe:44:48:a1:56:11:f5:36:16:10:8c:2f:
95:44:3c:ca:bb:99:8f:3f:52:ff:3d:88:95:0b:23:
1c:be:25:a9:3f:7e:2f:61:58:65:d9:17:88:bd:49:
b5:33:03:4c:a7:9e:5d:66:69:64:65:78:84:4b:79:
31:bd:f8:b1:cd:4c:72:7f:fd:a8:b1:5e:11:89:82:
31:d5:08:8d:e9:cb:a7:ab:93:b6:d2:91:ff:b2:63:
f0:60:e1:b1:72:6e:5c:40:f8:da:a9:cb:f1:01:6b:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CE:91:4D:77:95:FF:E2:4F:54:F7:F7:A8:9D:92:D1:01:25:28:64
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:77:d2:e1:fc:7e:e4:4b:aa:c4:8c:c1:4e:ca:03:1e:55:
d6:dd:59:b1:fb:cc:5d:fd:dd:c2:d2:aa:04:12:b2:2c:79:2f:
bc:21:fe:d7:96:84:56:fa:c1:e8:16:9d:9d:88:1b:a4:4a:5a:
54:a6:de:87:60:9f:4c:7c:b4:8e:0b:0c:78:e1:a3:a7:93:42:
f0:cc:ea:40:9e:c5:b4:b6:5a:64:ca:aa:91:7d:d0:c8:dd:3f:
fa:f7:c5:6a:23:64:85:00:46:6b:f2:27:38:dc:b1:6d:59:39:
75:b0:90:3f:8d:9a:85:24:b8:75:57:04:39:3f:30:c9:ef:43:
b2:6a:9f:09:b5:24:91:56:bb:14:dd:08:8b:1e:90:33:33:0a:
25:c9:6e:05:c7:e3:3a:9e:36:c6:76:0c:34:80:3b:71:41:83:
9b:92:32:7f:6f:42:25:0f:3a:fd:9e:f2:ef:f5:27:2e:57:d9:
b4:58:92:12:0e:0b:67:f8:e0:84:ff:50:ad:a8:26:bd:b6:27:
18:f8:77:08:eb:64:97:90:c2:75:c9:91:38:63:27:a9:db:26:
b0:fa:61:98:79:5e:f8:5b:b4:44:e7:65:e6:c2:5a:86:bf:ab:
8e:91:70:1a:17:50:01:91:fe:8e:1a:c4:dd:e6:86:2e:6d:9c:
d4:c8:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:44 2025 by rpki-client