Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: Oq48rIN8mgXW8LrruMqMpprOmfjNR9sPwFOaBK8pSSw=
Subject key identifier: 21:A7:DE:5B:B2:86:72:AB:D7:8D:C8:F2:F3:01:65:43:66:07:8D:55
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 0197B6A248F01D791856DFCF08AA3BEC9CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:02:58 +0000
Manifest this update: Sat 28 Jun 2025 13:02:58 +0000
Manifest next update: Sun 29 Jun 2025 13:02:58 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: H9MaR8dJusffH/kTQXywu9EJDIm0TrZnMc3Twyq/Pjw=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:48:f0:1d:79:18:56:df:cf:08:aa:3b:ec:9c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Jun 28 13:02:58 2025 GMT
Not After : Jun 29 13:02:58 2025 GMT
Subject: CN=21a7de5bb28672abd78dc8f2f301654366078d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:1e:4a:f0:7e:f6:10:5a:46:c1:35:5a:28:
7c:98:ac:63:a9:e3:e1:6e:b6:20:76:37:27:1c:d7:
84:01:22:8e:2b:41:77:74:14:50:0a:3e:e0:48:2a:
6d:c4:31:03:8b:27:0f:af:30:9d:fc:22:75:5b:28:
32:47:e6:9c:d7:d7:d6:81:5b:5c:0b:cd:91:6c:f5:
6f:08:b6:89:8a:dd:6c:64:32:a8:80:47:cd:2e:88:
43:fc:6a:4c:9c:17:b3:9d:c6:61:62:f8:66:ff:fa:
43:2d:ad:04:fa:e5:fd:14:93:54:38:69:fb:c8:6f:
cc:cb:4d:f4:84:b8:e5:0a:e2:ae:c8:20:49:aa:bd:
b1:8a:c7:f0:98:32:eb:28:c1:86:eb:fa:49:fb:cd:
c9:43:89:37:2a:cb:e0:59:64:a9:9c:9c:95:b6:12:
5f:a9:d1:7c:5d:23:0d:26:01:69:12:2b:63:63:24:
3e:fc:7a:22:1f:20:54:7b:74:a9:3e:4f:5b:8e:ee:
52:17:89:57:cd:ca:74:0f:e1:89:22:53:c4:65:74:
16:7e:8b:47:68:04:bf:77:b6:f3:d1:c4:3f:2c:94:
b6:9e:b8:59:e8:49:ea:7c:a9:57:a4:92:a0:0c:2f:
ed:a1:aa:01:0e:b5:f8:24:8a:9d:ff:4e:38:29:68:
16:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:DE:5B:B2:86:72:AB:D7:8D:C8:F2:F3:01:65:43:66:07:8D:55
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:01:9a:66:e5:6d:a5:7a:aa:78:27:f9:2f:b1:34:4f:83:c4:
0c:76:f2:eb:c1:cd:b0:62:d9:3e:23:b0:33:fc:84:cb:e1:db:
5e:d5:57:88:46:46:34:33:0c:02:c1:2d:b5:3d:e5:a4:0f:cc:
a8:1a:87:86:7c:62:6a:09:80:a3:5c:03:01:0e:d8:42:a5:9d:
6b:a8:05:da:85:16:a1:42:36:63:83:3d:e6:bc:ce:40:8f:12:
8e:cb:0c:61:7f:d8:d8:81:4c:db:8b:35:da:c8:28:16:2d:46:
30:d3:22:01:25:cf:cc:28:c6:30:1d:a9:8a:0b:2d:fd:92:36:
4e:9c:2c:12:c5:fe:a1:84:df:0b:0c:fb:c5:6e:32:d3:83:2f:
34:76:ff:3a:e7:2f:22:bc:2a:ff:e5:51:d2:55:ce:ef:01:12:
2a:36:4b:38:bf:63:79:20:59:81:b2:b8:d3:e6:2d:6a:d6:75:
6f:15:19:23:35:a0:ae:92:d7:0f:26:d7:7f:0a:d4:df:9d:0f:
2c:59:67:3a:9d:83:df:0d:13:70:70:6c:65:32:3f:95:79:0d:
9e:42:76:5b:e7:9d:9f:fb:43:94:e8:70:a0:45:fc:bc:49:f9:
73:64:86:98:0d:1d:d2:56:b2:55:83:e2:68:fc:f7:36:91:60:
49:e4:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:46 2025 by rpki-client