Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: bQ1tUq9NEaUcF9N6F2XlxGbae/X2MgSvOd1l+BpDZ/Q=
Subject key identifier: 13:D5:E8:C4:F8:27:68:F3:70:B7:B4:27:85:38:DC:D0:1A:64:37:44
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 019A03A42BE69B70220A0609F4542296E6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 22:01:22 +0000
Manifest this update: Mon 20 Oct 2025 22:01:22 +0000
Manifest next update: Tue 21 Oct 2025 22:01:22 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: SxOBMz02oQ3ofKDUpG2hTew+/pz9+pRlYYPs7eIM+VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:2b:e6:9b:70:22:0a:06:09:f4:54:22:96:e6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Oct 20 22:01:22 2025 GMT
Not After : Oct 21 22:01:22 2025 GMT
Subject: CN=13d5e8c4f82768f370b7b4278538dcd01a643744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:eb:5c:40:6e:a6:27:e1:9a:dd:39:7b:80:
53:6b:e2:0b:56:96:7f:86:77:70:cb:1a:df:56:42:
de:ed:7c:7f:59:c4:98:13:fe:08:f0:54:b4:c7:b4:
bc:0b:5e:b1:bc:1a:12:d4:d8:d2:3d:65:a7:d6:5f:
ba:27:e8:af:32:48:42:c3:4f:6f:87:6f:3f:04:47:
7a:04:33:fa:21:97:40:f0:cb:de:ad:a6:5b:01:ba:
2a:dc:9d:3e:b4:69:4f:27:20:1c:94:ba:00:ac:23:
81:f0:55:d3:74:15:8b:7d:bb:76:af:f3:9e:3e:81:
1d:a6:51:9a:ea:fc:8d:33:a3:4e:db:84:20:23:76:
fb:ba:40:37:f3:a5:21:94:fe:29:23:52:6d:f1:f5:
a0:4c:60:b2:45:ff:25:8e:91:c6:1a:25:45:ae:f5:
51:72:f7:92:0c:7b:2d:be:dc:bb:05:c9:09:f2:42:
6b:d2:8c:4c:15:f6:2d:1a:99:11:b0:be:c6:a6:57:
4e:3a:11:cf:d4:05:21:c1:84:f6:0d:48:92:25:1f:
5d:83:93:8c:73:a8:0e:31:cb:f7:3c:00:91:fc:8e:
55:e9:2c:7c:f5:f2:1e:13:ad:6f:65:6a:60:da:0a:
1a:7c:9e:c6:ad:ad:c2:b7:95:5d:b0:92:84:47:c3:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:E8:C4:F8:27:68:F3:70:B7:B4:27:85:38:DC:D0:1A:64:37:44
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:77:5e:21:9a:b9:19:2d:74:66:4b:e4:dc:8e:8f:b7:e7:a4:
e0:85:86:71:3e:d7:24:94:e8:d0:9b:12:09:4b:76:cd:8e:49:
2c:ed:31:5a:cf:30:a9:15:e4:e8:c6:4d:d5:92:b7:1f:f6:fd:
15:75:f5:90:b1:f7:4f:7e:6f:3a:93:62:2e:b3:53:c1:fb:52:
ac:f3:dc:0d:df:b8:b0:ff:97:24:85:34:e6:66:1f:71:51:d7:
55:e2:8a:63:0d:eb:e1:84:2a:f8:ab:d8:93:e0:de:8f:56:8b:
33:56:e1:a5:15:60:e3:94:04:eb:dc:2d:ae:2f:cc:40:c7:22:
36:21:75:63:95:7c:2e:d6:04:1d:d4:d6:36:40:78:e7:44:30:
46:7c:c6:31:26:41:f2:15:7b:88:8e:37:7e:c0:cb:63:09:34:
b5:af:e1:90:ef:d2:5f:2b:74:5c:1c:9c:ab:bf:33:e1:0a:ea:
d5:d2:43:8b:51:16:fe:8f:84:15:81:47:4d:9e:3d:8b:6e:b1:
79:0a:65:5c:e5:6f:8c:95:58:38:0e:69:2a:dd:10:08:62:2e:
a0:37:eb:5a:b9:8c:01:26:22:0a:52:5d:02:14:e1:97:81:13:
46:09:e9:eb:db:bc:90:3e:5e:03:40:ae:b5:53:49:1a:83:0f:
92:be:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:02 2025 by rpki-client