Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: IsSVi3Pypc8hrsLLL5chfbiAGTECYxQ+D4ESZN5rl7c=
Subject key identifier: 3D:13:E2:A2:B0:C1:7B:8C:9E:16:07:21:DD:13:93:CA:22:DE:AD:25
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 01974FD7F0190256820940043785B21959AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 03AC
Signing time: Sun 08 Jun 2025 14:00:41 +0000
Manifest this update: Sun 08 Jun 2025 14:00:41 +0000
Manifest next update: Mon 09 Jun 2025 14:00:41 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: igoC7oISaUc1XOOKXwjTkdBVVM8kncnM7IIRiOmPluw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:f0:19:02:56:82:09:40:04:37:85:b2:19:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Jun 8 14:00:41 2025 GMT
Not After : Jun 9 14:00:41 2025 GMT
Subject: CN=3d13e2a2b0c17b8c9e160721dd1393ca22dead25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:9c:49:28:b9:23:17:26:41:e9:b0:f6:66:2e:
37:22:1b:e6:36:ce:f4:36:9c:33:1b:ec:49:88:61:
70:d2:b6:72:2f:6d:a7:f3:32:40:cc:34:26:5c:f8:
99:f5:8b:c2:61:e0:b7:ea:2f:f5:56:f2:e6:42:d7:
93:99:d9:3b:07:30:a7:81:c2:64:6c:2e:d4:6c:3f:
8d:ae:49:c2:be:50:11:82:52:c4:1b:55:e4:eb:f4:
03:fc:ec:84:c9:e2:dd:d3:a5:d7:ed:87:e0:d6:a5:
aa:d9:61:00:67:08:da:4c:65:ce:10:73:97:22:ec:
6c:e0:01:3b:00:1e:a4:7a:5c:cc:9c:08:c5:e5:6e:
cd:5d:04:7f:2a:4a:b6:39:49:a5:f3:d1:c8:a8:f5:
75:df:46:a3:13:54:29:c8:f9:aa:65:96:24:af:f6:
18:22:78:70:9f:e5:f1:69:dc:00:34:66:db:3a:23:
42:71:ec:75:ff:84:47:63:c7:31:6d:34:f2:f5:95:
fc:00:f5:0c:55:b0:1e:70:45:d0:f8:b0:5a:57:a2:
10:d0:7e:31:91:40:a7:48:7e:59:2f:3f:17:54:50:
2f:6d:c4:fc:d7:9f:8f:01:6d:e8:77:1d:1f:d4:ab:
7b:8f:18:b9:d4:7e:62:aa:07:70:38:7e:78:96:61:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:13:E2:A2:B0:C1:7B:8C:9E:16:07:21:DD:13:93:CA:22:DE:AD:25
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e7:ad:e3:77:67:69:38:bc:9a:84:69:80:f9:aa:30:06:8b:
60:a4:df:05:57:1c:25:a9:33:b5:7f:2b:37:32:03:5e:eb:e9:
26:e9:b1:05:33:8c:83:d1:0f:65:45:ff:6b:a5:12:84:5c:b4:
bf:cd:e3:5b:aa:4b:d7:d4:30:06:65:d7:52:0a:b5:b6:4d:67:
b1:d1:72:64:2d:e9:ba:59:bd:6f:16:77:7f:04:ff:50:0f:80:
33:02:b2:87:2b:45:d0:71:bf:cd:80:37:66:e1:46:cb:31:6c:
ce:9c:43:1d:79:e1:e1:78:94:82:13:47:c9:7d:6c:ce:38:d7:
bb:ff:d8:06:40:eb:96:4e:66:93:ac:d3:a9:b2:4f:ad:4d:e3:
25:0f:a7:7c:fc:3c:db:02:46:64:49:69:c8:a6:e5:c8:95:1e:
8e:5f:55:8d:89:6f:a5:4c:b4:b5:89:e0:b2:5f:4a:71:a1:07:
30:e4:a0:0c:80:14:48:76:17:c3:04:4e:9a:df:69:f0:41:39:
86:de:44:62:2a:8f:31:7f:c6:05:5e:f2:24:23:19:16:7f:af:
84:4c:f5:c4:fc:bc:c1:b4:7f:c8:8a:ee:09:28:cb:21:46:eb:
d0:d3:64:bc:eb:b1:c3:98:9d:74:49:9c:77:a7:12:db:e4:86:
0a:3d:1f:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdP1/AZAlaCCUAEN4WyGVmuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NzVlNjUxZjgxYWFiNjAzMzkyZjI1NTIxYjdjOWFiNWJk
MjgxYzAwHhcNMjUwNjA4MTQwMDQxWhcNMjUwNjA5MTQwMDQxWjAzMTEwLwYDVQQD
EygzZDEzZTJhMmIwYzE3YjhjOWUxNjA3MjFkZDEzOTNjYTIyZGVhZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+pxJKLkjFyZB6bD2Zi43IhvmNs70
NpwzG+xJiGFw0rZyL22n8zJAzDQmXPiZ9YvCYeC36i/1VvLmQteTmdk7BzCngcJk
bC7UbD+NrknCvlARglLEG1Xk6/QD/OyEyeLd06XX7Yfg1qWq2WEAZwjaTGXOEHOX
Iuxs4AE7AB6kelzMnAjF5W7NXQR/Kkq2OUml89HIqPV130ajE1QpyPmqZZYkr/YY
Inhwn+XxadwANGbbOiNCcex1/4RHY8cxbTTy9ZX8APUMVbAecEXQ+LBaV6IQ0H4x
kUCnSH5ZLz8XVFAvbcT815+PAW3odx0f1Kt7jxi51H5iqgdwOH54lmH+bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0T4qKwwXuMnhYHId0Tk8oi3q0lMB8GA1UdIwQY
MBaAFKR15lH4GqtgM5LyVSG3yatb0oHAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYt
NzdjZmQyMTViNzMyLzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9jZWMzMjctMzhlMS00YWY0LWEwOGYtNzdjZmQyMTViNzMy
LzEvcEhYbVVmZ2FxMkF6a3ZKVkliZkpxMXZTZ2NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOet43dn
aTi8moRpgPmqMAaLYKTfBVccJakztX8rNzIDXuvpJumxBTOMg9EPZUX/a6UShFy0
v83jW6pL19QwBmXXUgq1tk1nsdFyZC3pulm9bxZ3fwT/UA+AMwKyhytF0HG/zYA3
ZuFGyzFszpxDHXnh4XiUghNHyX1szjjXu//YBkDrlk5mk6zTqbJPrU3jJQ+nfPw8
2wJGZElpyKblyJUejl9VjYlvpUy0tYngsl9KcaEHMOSgDIAUSHYXwwROmt9p8EE5
ht5EYiqPMX/GBV7yJCMZFn+vhEz1xPy8wbR/yIruCSjLIUbr0NNkvOuxw5iddEmc
d6cS2+SGCj0fag==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:33:25 2025 by rpki-client