Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: AdJ7a8mEDTyswO8Oi4Hv8XcJWYAhs4q4UU5gHqM4zpE=
Subject key identifier: 6E:AB:68:1B:85:51:51:5D:63:BD:F5:91:48:1D:E7:A7:F2:EB:EF:D7
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 01984589A9369EF1A6DE1ACA850AB643C4C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 15FD
Signing time: Sat 26 Jul 2025 07:01:46 +0000
Manifest this update: Sat 26 Jul 2025 07:01:46 +0000
Manifest next update: Sun 27 Jul 2025 07:01:46 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: XLHfzMvMIPkcUABi83pvoSPPfQgdVeaX0ObWqVXmUhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:a9:36:9e:f1:a6:de:1a:ca:85:0a:b6:43:c4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Jul 26 07:01:46 2025 GMT
Not After : Jul 27 07:01:46 2025 GMT
Subject: CN=6eab681b8551515d63bdf591481de7a7f2ebefd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:f9:ca:d5:d8:e4:22:9a:a3:74:1b:02:21:
f5:e6:64:bc:54:fa:b5:65:ec:59:e0:60:1b:cd:9b:
cf:aa:75:bd:b0:eb:76:6c:7a:b7:cb:05:90:cc:42:
45:17:e9:8d:6b:2e:00:34:82:f5:56:dd:d9:40:08:
1f:36:83:64:30:65:60:76:5a:67:dd:61:0d:92:44:
29:37:25:bb:36:5c:50:5f:b8:af:00:4c:8a:e2:1c:
51:d0:1c:b3:b6:5a:7c:3e:4a:4b:8a:f8:d5:1e:28:
2c:46:8a:81:7f:2a:8f:47:3d:ff:8b:02:3e:d4:34:
d5:20:3b:58:d1:af:8b:9a:62:f7:3f:de:62:99:b6:
2c:b0:1b:0c:91:f6:8e:ec:6e:ad:5f:4b:65:b8:f2:
9f:83:58:5c:2f:e9:1b:ee:dd:eb:b2:da:0d:3c:af:
83:94:a2:38:a1:ae:1b:8f:7d:0a:26:78:09:81:f0:
5a:4b:64:88:59:f4:97:8e:1e:b6:fe:db:c3:aa:c4:
d8:31:72:22:c9:6d:d3:76:3b:10:d9:84:06:96:0f:
35:fe:ff:9a:7b:f7:3b:42:cd:60:bd:cb:46:cc:80:
18:08:9b:10:c4:32:0a:b1:8a:cd:e6:26:ef:8e:9e:
c4:5a:98:f2:85:48:e3:3b:be:4f:af:8f:fc:a9:76:
a2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AB:68:1B:85:51:51:5D:63:BD:F5:91:48:1D:E7:A7:F2:EB:EF:D7
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ce:1e:51:d9:00:4d:3e:59:ae:47:1d:8f:9d:23:2c:ca:18:
16:97:80:e3:f5:6e:dd:a9:25:0c:19:cf:1a:26:d9:98:ef:d4:
13:67:01:4b:ef:ce:74:c1:7d:12:d4:05:3f:4b:b1:18:f4:fc:
c9:9e:ae:df:59:56:63:0f:89:61:2c:7f:2a:50:9e:b8:d2:31:
11:8b:b9:7b:a9:18:d7:2a:bf:aa:a1:96:76:ed:1f:36:5b:de:
47:ac:d0:fa:75:06:98:2f:4e:d6:72:6f:03:d2:4a:10:90:46:
37:87:f0:72:7f:c0:99:3c:3c:da:9e:7d:eb:93:97:2f:66:6d:
0c:be:fd:38:96:d8:f6:0f:1f:fd:05:31:2e:79:eb:88:78:52:
54:11:5f:32:c5:30:a0:94:a8:75:36:fb:91:e2:99:f7:01:8b:
3a:65:d8:e1:56:be:e6:bb:e1:a9:c5:79:a2:36:bc:26:b1:08:
89:ea:1f:6a:bd:13:a0:31:b8:d3:0a:9c:c6:26:78:32:d7:ad:
f6:6a:af:45:ee:51:e5:d0:5f:05:05:f8:8f:02:8f:c8:fe:cc:
69:e5:a7:d3:80:a3:07:00:c4:13:b2:2b:3a:9b:41:60:63:e9:
78:4b:c7:7d:6b:10:bf:df:ab:1a:61:0e:cd:e0:cd:24:36:5d:
5f:4a:eb:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiak2nvGm3hrKhQq2Q8TBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2JjNmYwZDQ2NWZlZTI5NGZkNjJjODUwZGNmMzhlYzRh
YzE1OTcwHhcNMjUwNzI2MDcwMTQ2WhcNMjUwNzI3MDcwMTQ2WjAzMTEwLwYDVQQD
Eyg2ZWFiNjgxYjg1NTE1MTVkNjNiZGY1OTE0ODFkZTdhN2YyZWJlZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyr5ytXY5CKao3QbAiH15mS8VPq1
ZexZ4GAbzZvPqnW9sOt2bHq3ywWQzEJFF+mNay4ANIL1Vt3ZQAgfNoNkMGVgdlpn
3WENkkQpNyW7NlxQX7ivAEyK4hxR0Byztlp8PkpLivjVHigsRoqBfyqPRz3/iwI+
1DTVIDtY0a+LmmL3P95imbYssBsMkfaO7G6tX0tluPKfg1hcL+kb7t3rstoNPK+D
lKI4oa4bj30KJngJgfBaS2SIWfSXjh62/tvDqsTYMXIiyW3TdjsQ2YQGlg81/v+a
e/c7Qs1gvctGzIAYCJsQxDIKsYrN5ibvjp7EWpjyhUjjO75Pr4/8qXai0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6raBuFUVFdY731kUgd56fy6+/XMB8GA1UdIwQY
MBaAFDx7xvDUZf7ilP1iyFDc847ErBWXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2Yt
MGRiZDIzMmZkMjRlLzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNzQ1MjEtMDcxOC00NTgzLTg1M2YtMGRiZDIzMmZkMjRl
LzEvUEh2RzhOUmxfdUtVX1dMSVVOenpqc1NzRlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlc4eUdkA
TT5Zrkcdj50jLMoYFpeA4/Vu3aklDBnPGibZmO/UE2cBS+/OdMF9EtQFP0uxGPT8
yZ6u31lWYw+JYSx/KlCeuNIxEYu5e6kY1yq/qqGWdu0fNlveR6zQ+nUGmC9O1nJv
A9JKEJBGN4fwcn/AmTw82p5965OXL2ZtDL79OJbY9g8f/QUxLnnriHhSVBFfMsUw
oJSodTb7keKZ9wGLOmXY4Va+5rvhqcV5oja8JrEIieofar0ToDG40wqcxiZ4Mtet
9mqvRe5R5dBfBQX4jwKPyP7MaeWn04CjBwDEE7IrOptBYGPpeEvHfWsQv9+rGmEO
zeDNJDZdX0rrgg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:16:26 2025 by rpki-client