Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: MxSE+epcnJdVawv3wC2aGrTm/agmWYxhADjqn1X1odo=
Subject key identifier: 5F:85:B2:44:82:A8:27:63:D3:6D:10:4A:19:E3:CB:F1:7B:DA:9D:0C
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 0199FDD8FEBDC3030AB9030E53F9ED52A616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: nWZxLp2gejDggnO5Ov3uOlMnUyfP4nj4JYeVcdjneRc=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fe:bd:c3:03:0a:b9:03:0e:53:f9:ed:52:a6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=5f85b24482a82763d36d104a19e3cbf17bda9d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:82:42:99:4c:33:25:61:5e:d8:78:2a:c4:
b2:da:ee:c5:a2:b5:da:29:b1:50:8c:cc:67:35:2f:
0d:8c:e2:4a:cb:0c:e1:0b:99:f0:e5:7b:aa:f9:09:
0a:18:86:d0:67:33:4f:9e:5d:80:f3:08:12:60:18:
17:de:73:88:fb:b4:d6:e6:b5:62:97:88:0f:d9:0e:
be:a3:b3:76:60:d6:85:76:62:e4:b5:f5:a8:dc:c0:
af:0f:39:a3:4b:d9:2b:66:85:1f:db:cc:86:9c:ee:
04:12:65:52:8a:22:8e:76:dc:23:4d:ac:78:1b:dd:
56:ae:cd:94:dc:c9:69:c6:3d:47:87:2e:ea:70:f9:
d8:f9:0e:23:19:81:10:8c:ae:61:06:63:0e:3e:1f:
ac:05:a3:b8:5d:01:98:d7:0d:16:37:cf:79:03:46:
c5:8a:70:e7:cb:30:a8:ee:dc:09:86:e1:34:20:b2:
98:b9:0a:27:d7:2d:79:1c:68:8f:08:e8:78:a7:10:
a3:ce:94:6d:05:6e:df:db:3f:28:b9:ee:19:21:e1:
ed:e8:85:f7:a9:95:31:6e:ed:32:86:0b:50:3f:54:
51:b8:28:b1:e1:d3:d2:61:dd:bb:80:d2:59:4e:7f:
28:47:05:13:21:90:cb:bd:93:b6:ee:b4:f5:4e:e1:
e8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:85:B2:44:82:A8:27:63:D3:6D:10:4A:19:E3:CB:F1:7B:DA:9D:0C
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:ac:42:c4:9b:c1:15:7c:f3:ac:d5:7b:7d:ca:af:e6:c0:a5:
6f:c1:b5:58:92:0c:6b:57:9c:33:38:be:53:9b:49:08:4d:9d:
c2:56:27:26:42:22:89:fc:c8:b1:09:77:c5:3c:8f:b8:3c:1b:
4b:7d:9c:a3:fe:3c:24:43:6d:80:76:17:c6:69:3d:87:63:a0:
fe:d3:2a:72:c6:ab:bf:96:81:5c:5e:db:2c:e9:4f:76:cb:f0:
ae:09:b3:11:f5:fb:94:84:c8:d4:b5:93:41:dc:4b:bd:94:c1:
c0:2f:77:4c:eb:fb:8f:e5:83:01:42:e5:22:ca:05:37:0d:ab:
b6:81:5a:c7:9b:24:4f:51:59:ec:e1:08:c2:f0:3b:48:30:53:
26:0c:75:cb:e0:98:11:6e:4a:10:0a:22:2f:e3:f8:91:ca:e6:
75:13:17:4a:2e:60:7f:35:b0:30:2f:87:ec:8c:2b:43:4e:ce:
11:07:6d:4a:cc:8e:fe:4a:20:f7:eb:08:41:14:2a:20:c0:f3:
e0:4a:5c:b0:8c:ab:cf:49:3f:aa:12:74:3e:47:b6:39:d3:f6:
5e:08:6d:e4:a2:97:c3:7d:0f:cc:60:6e:ea:51:71:4d:7f:20:
0a:1b:a4:a5:b9:fb:02:b5:11:91:cd:a4:52:3d:fd:72:6c:fe:
7f:5e:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:53 2025 by rpki-client