Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: BOaQmeTz+dkSeRXqe+cgH5tehdlbaq7a/Mm2sVPP7UY=
Subject key identifier: 17:46:E1:2C:6E:07:41:E2:59:C0:8C:4F:A6:DC:22:3A:68:CA:FF:B6
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 0198D65F5B3D251A1DFE251A635DB38ECD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:00:30 +0000
Manifest this update: Sat 23 Aug 2025 10:00:30 +0000
Manifest next update: Sun 24 Aug 2025 10:00:30 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: gi6Qj+9M0u2yKZTx6rY2pkgOkNlhKjWcMvrVvSGFnzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5b:3d:25:1a:1d:fe:25:1a:63:5d:b3:8e:cd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Aug 23 10:00:30 2025 GMT
Not After : Aug 24 10:00:30 2025 GMT
Subject: CN=1746e12c6e0741e259c08c4fa6dc223a68caffb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:88:9d:7e:85:af:17:fb:af:75:9c:81:e8:23:
53:b5:b7:42:07:d1:ac:10:f8:b4:44:d4:bf:4c:58:
64:84:51:14:f0:cc:bb:0d:23:30:7d:b7:5c:2a:df:
cd:b7:3b:a3:55:5d:4c:ab:31:c3:b2:c6:79:06:0c:
d0:e2:61:a7:c0:38:e8:57:27:fa:13:0b:20:26:6e:
55:62:c2:00:78:a8:c4:1d:ba:2c:cf:1a:33:57:bb:
84:03:88:ca:4d:ad:23:e8:63:94:e6:d9:d7:9f:6a:
e2:5a:91:bf:fe:ed:cb:2a:a7:67:30:c1:1d:36:41:
5b:f1:ae:4d:f3:b4:e8:bb:7d:d6:0a:42:72:c7:86:
33:8a:4e:20:25:9a:2a:46:d4:2f:2a:eb:f5:f3:5e:
8c:4f:80:a2:53:15:b3:e8:e7:ac:2d:53:b8:12:bc:
f7:dd:7d:a5:b0:89:5a:a1:0d:63:77:7a:9a:cc:c8:
10:60:af:b3:a5:3a:0a:3b:43:ee:12:f5:d3:d4:b5:
dc:7e:42:eb:6d:2b:6d:cb:f5:68:74:63:69:a8:5e:
b6:cf:1b:f4:2c:ee:83:ec:c6:fc:0f:ec:eb:a4:1c:
56:97:82:4f:3f:60:df:a1:0c:73:a7:1e:58:69:a6:
4f:b0:0b:67:c1:5e:26:4f:b7:10:c2:38:97:18:e8:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:46:E1:2C:6E:07:41:E2:59:C0:8C:4F:A6:DC:22:3A:68:CA:FF:B6
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:e6:ee:3c:c4:d5:fe:56:df:dc:2f:3d:97:ff:29:f7:6c:
0b:e8:4a:22:6b:a8:ca:83:c8:27:46:1c:3e:7d:29:b9:11:37:
50:d7:85:ce:7b:35:a9:4c:52:db:1c:b7:17:79:af:1d:ae:1e:
e3:21:59:04:cc:87:62:23:bd:13:8a:5f:2e:45:d8:87:7e:13:
0c:51:96:0b:33:b7:a6:ab:8b:37:a5:9a:08:15:34:7c:27:de:
bc:f6:b1:3d:28:a0:bd:7f:3e:fa:cc:ed:88:84:d7:3a:5c:98:
a9:0b:49:fd:7b:51:6a:22:6c:f2:b5:ec:f3:84:94:c0:7e:73:
a0:1e:53:2e:4c:ed:6b:33:95:63:8f:ea:bb:a4:2f:c0:41:d2:
f8:7b:10:90:c2:72:7d:5e:af:a9:8c:06:2e:e8:bb:ed:3f:79:
00:9b:ea:db:36:40:6e:fb:dd:2c:35:04:d4:0c:f5:42:33:f8:
70:82:1b:d9:ea:db:40:0b:f2:d1:fb:73:0d:40:d2:c0:9b:59:
8c:52:e8:18:4f:9f:a5:9d:5f:40:a9:ff:08:c2:e1:8d:1d:89:
85:93:47:c2:09:d1:58:ff:cb:07:cd:ba:cb:6d:11:44:20:da:
1d:17:14:c6:a2:32:6f:85:c2:72:cd:13:aa:58:dd:b2:8c:ad:
c3:d8:35:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX1s9JRod/iUaY12zjs1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2JjNmYwZDQ2NWZlZTI5NGZkNjJjODUwZGNmMzhlYzRh
YzE1OTcwHhcNMjUwODIzMTAwMDMwWhcNMjUwODI0MTAwMDMwWjAzMTEwLwYDVQQD
EygxNzQ2ZTEyYzZlMDc0MWUyNTljMDhjNGZhNmRjMjIzYTY4Y2FmZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoidfoWvF/uvdZyB6CNTtbdCB9Gs
EPi0RNS/TFhkhFEU8My7DSMwfbdcKt/NtzujVV1MqzHDssZ5BgzQ4mGnwDjoVyf6
EwsgJm5VYsIAeKjEHboszxozV7uEA4jKTa0j6GOU5tnXn2riWpG//u3LKqdnMMEd
NkFb8a5N87Tou33WCkJyx4Yzik4gJZoqRtQvKuv1816MT4CiUxWz6OesLVO4Erz3
3X2lsIlaoQ1jd3qazMgQYK+zpToKO0PuEvXT1LXcfkLrbStty/VodGNpqF62zxv0
LO6D7Mb8D+zrpBxWl4JPP2DfoQxzpx5YaaZPsAtnwV4mT7cQwjiXGOj35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdG4SxuB0HiWcCMT6bcIjpoyv+2MB8GA1UdIwQY
MBaAFDx7xvDUZf7ilP1iyFDc847ErBWXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2Yt
MGRiZDIzMmZkMjRlLzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2YtMGRiZDIzMmZkMjRl
LzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC1jm7jzE
1f5W39wvPZf/KfdsC+hKImuoyoPIJ0YcPn0puRE3UNeFzns1qUxS2xy3F3mvHa4e
4yFZBMyHYiO9E4pfLkXYh34TDFGWCzO3pquLN6WaCBU0fCfevPaxPSigvX8++szt
iITXOlyYqQtJ/XtRaiJs8rXs84SUwH5zoB5TLkztazOVY4/qu6QvwEHS+HsQkMJy
fV6vqYwGLui77T95AJvq2zZAbvvdLDUE1Az1QjP4cIIb2erbQAvy0ftzDUDSwJtZ
jFLoGE+fpZ1fQKn/CMLhjR2JhZNHwgnRWP/LB826y20RRCDaHRcUxqIyb4XCcs0T
qljdsoytw9g1Rg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:24:13 2025 by rpki-client