Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File: phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier: h0b39S2ERlcODH76Qfx4Q/hF5PbkHQBCqQrL2cEgWOM=
Subject key identifier: AF:B6:91:C3:D7:A2:54:98:E5:81:C2:74:A3:13:85:14:B8:19:57:51
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer: /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial: 019A7112A640BD58FB0B7F83BA64F56F1601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number: 0503
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: pPC5M6ZW1ki2KhEjtEr3+gUepQL6ARVznFuRvEqhi7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a6:40:bd:58:fb:0b:7f:83:ba:64:f5:6f:16:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=afb691c3d7a25498e581c274a3138514b8195751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:a9:e8:18:35:58:95:4a:71:79:46:ca:08:
f4:ce:36:d3:09:0b:e0:a9:a9:34:b0:80:19:ee:69:
0c:c3:c4:3e:f4:04:71:39:53:30:61:8c:3d:73:ab:
f6:c1:d9:88:f6:21:cc:9e:66:44:66:87:cf:5d:5c:
e9:b8:63:d5:3b:bc:c6:5a:97:48:4c:bc:b8:c4:bf:
bf:02:d0:01:23:89:25:7a:79:dd:62:1b:3a:6d:f8:
74:f5:48:45:6c:14:a4:42:2c:19:c3:75:0d:83:9c:
c8:05:28:1e:a5:ae:d2:34:3c:b7:2c:a6:5a:d8:f3:
bf:d6:9a:bf:92:08:06:1e:7e:de:51:e1:ac:58:ea:
e1:af:c6:8e:72:1f:11:03:07:58:48:9a:c0:de:09:
b2:a9:9f:c1:97:a1:4c:cf:08:c8:17:c1:85:c7:fc:
ac:d1:3a:78:f9:dc:2b:63:e7:c4:13:65:87:61:80:
cf:e9:82:f4:d5:42:86:ff:ef:c1:17:b2:0c:d3:7c:
c8:47:37:de:91:39:15:17:7a:a3:5b:56:d2:a5:2c:
75:01:ee:5e:b6:83:c3:f7:05:35:04:e0:08:36:16:
bf:79:86:36:fe:89:f9:da:39:ed:8b:9b:45:15:cf:
6d:b6:55:ef:0c:73:84:72:bb:85:d6:94:de:a9:0e:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:91:C3:D7:A2:54:98:E5:81:C2:74:A3:13:85:14:B8:19:57:51
X509v3 Authority Key Identifier:
keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:83:13:04:09:2b:ed:b0:ed:8e:87:0f:f0:75:8b:f3:b5:5b:
49:29:fd:4e:d5:a3:4f:1f:da:5f:a8:5f:8c:ee:b7:ea:d6:c0:
8a:8e:73:c8:24:89:f9:30:9d:5d:04:fb:51:16:e9:d0:b6:0f:
de:69:ff:9c:86:80:d1:9d:ae:85:bf:cd:09:3d:d9:33:71:8b:
35:59:86:3c:5a:cc:6a:16:eb:4a:7b:57:a3:df:8d:d5:56:2f:
ed:1c:dd:51:96:1d:b9:5a:29:b5:9c:8b:bf:9d:30:7b:f6:65:
b2:d6:9e:5a:10:e2:9f:ce:f4:e3:16:2a:59:79:22:a9:e6:6b:
af:71:f5:59:60:99:aa:52:a6:23:a8:ca:59:62:13:28:69:6d:
2b:8f:97:98:80:36:81:96:47:69:74:62:3a:9e:5d:14:1b:bd:
0f:ef:9c:48:38:ca:23:c6:68:da:23:e3:a8:cb:b7:61:ed:e2:
c7:ea:13:26:68:ad:1f:ee:f2:3a:7d:49:4c:dc:68:cb:76:c9:
c1:5a:80:b8:a3:33:75:f9:0c:0a:85:0f:96:b7:bf:1c:62:2c:
fc:67:2e:bf:4f:40:3d:56:df:77:4c:e6:7d:57:22:ea:b2:30:
70:07:b3:fe:32:35:6d:1f:08:44:fa:1d:2f:1c:65:32:42:75:
f8:1b:a3:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqZAvVj7C3+DumT1bxYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWJlNTk3YTkzZTZiMWFkOTQxNzhkMDNlOGU4YzE1NTcy
Njc4YzcwHhcNMjUxMTExMDQwMDM4WhcNMjUxMTEyMDQwMDM4WjAzMTEwLwYDVQQD
EyhhZmI2OTFjM2Q3YTI1NDk4ZTU4MWMyNzRhMzEzODUxNGI4MTk1NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ap6Bg1WJVKcXlGygj0zjbTCQvg
qak0sIAZ7mkMw8Q+9ARxOVMwYYw9c6v2wdmI9iHMnmZEZofPXVzpuGPVO7zGWpdI
TLy4xL+/AtABI4klenndYhs6bfh09UhFbBSkQiwZw3UNg5zIBSgepa7SNDy3LKZa
2PO/1pq/kggGHn7eUeGsWOrhr8aOch8RAwdYSJrA3gmyqZ/Bl6FMzwjIF8GFx/ys
0Tp4+dwrY+fEE2WHYYDP6YL01UKG/+/BF7IM03zIRzfekTkVF3qjW1bSpSx1Ae5e
toPD9wU1BOAINha/eYY2/on52jnti5tFFc9ttlXvDHOEcruF1pTeqQ6zWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+2kcPXolSY5YHCdKMThRS4GVdRMB8GA1UdIwQY
MBaAFKYb5ZepPmsa2UF40D6OjBVXJnjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMt
YzFlNGNjYjE1NmVlLzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMtYzFlNGNjYjE1NmVl
LzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4MTBAkr
7bDtjocP8HWL87VbSSn9TtWjTx/aX6hfjO636tbAio5zyCSJ+TCdXQT7URbp0LYP
3mn/nIaA0Z2uhb/NCT3ZM3GLNVmGPFrMahbrSntXo9+N1VYv7RzdUZYduVoptZyL
v50we/ZlstaeWhDin8704xYqWXkiqeZrr3H1WWCZqlKmI6jKWWITKGltK4+XmIA2
gZZHaXRiOp5dFBu9D++cSDjKI8Zo2iPjqMu3Ye3ix+oTJmitH+7yOn1JTNxoy3bJ
wVqAuKMzdfkMCoUPlre/HGIs/Gcuv09APVbfd0zmfVci6rIwcAez/jI1bR8IRPod
LxxlMkJ1+BujJw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:36 2025 by rpki-client