Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
File: pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft (raw, json)
Hash identifier: qXakHq+UwtaeCbHBERBKdQ5oewHKLdySGo5jZpF09Gs=
Subject key identifier: 06:74:4D:8C:8F:23:A2:A9:EB:2F:B9:5E:B9:D6:7C:D8:90:9E:69:46
Authority key identifier: A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
Certificate issuer: /CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Certificate serial: 019923311FD34FB8C098CE3347330C4A4B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
Manifest number: 049E
Signing time: Sun 07 Sep 2025 08:00:45 +0000
Manifest this update: Sun 07 Sep 2025 08:00:45 +0000
Manifest next update: Mon 08 Sep 2025 08:00:45 +0000
Files and hashes: 1: pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl (hash: XwldDW0NmgiofTnIFlKdKHSAHuD87NAK9POrJqMQCWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:1f:d3:4f:b8:c0:98:ce:33:47:33:0c:4a:4b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a475e651f81aab603392f25521b7c9ab5bd281c0
Validity
Not Before: Sep 7 08:00:45 2025 GMT
Not After : Sep 8 08:00:45 2025 GMT
Subject: CN=06744d8c8f23a2a9eb2fb95eb9d67cd8909e6946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:5e:d1:4f:f4:41:76:8c:e4:90:66:71:9f:
6e:c0:8f:58:07:ec:51:5d:ee:41:24:92:18:91:4c:
42:cb:fb:83:74:a9:fb:45:1e:bf:b8:ec:bc:ff:28:
71:3e:e0:d0:a1:48:61:1c:cd:89:6a:4a:9f:c0:33:
c0:13:4f:67:b1:a1:2e:55:7b:79:3e:94:d8:b6:54:
ff:d6:e0:ff:b8:f1:5b:59:c7:1c:56:78:b8:56:7c:
23:3a:0a:db:30:91:51:5d:2b:86:02:52:d4:ef:9a:
17:6c:e2:7c:48:d9:50:47:a3:d7:2c:67:a8:9f:77:
70:3a:36:20:4f:97:ea:80:37:ca:8e:80:4a:78:54:
87:5e:24:32:e1:97:29:0c:53:86:43:56:3d:d3:63:
23:b6:ab:88:13:fc:b3:30:00:61:b1:1d:cb:50:b1:
ee:8c:9e:e1:9a:18:a8:f8:ea:ee:1b:57:17:64:af:
93:83:53:38:7f:54:c8:9f:8b:8a:62:e4:80:fe:7b:
d8:1d:f5:04:f7:9a:b8:89:90:f4:66:3a:e1:75:07:
a4:aa:2c:0c:24:95:65:e3:0f:5e:54:57:e6:3d:8d:
9c:98:55:39:16:30:b9:7f:12:de:11:9b:00:d1:48:
e0:41:b9:34:2b:46:30:1f:cd:c9:b8:bb:11:f9:bd:
a2:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:4D:8C:8F:23:A2:A9:EB:2F:B9:5E:B9:D6:7C:D8:90:9E:69:46
X509v3 Authority Key Identifier:
keyid:A4:75:E6:51:F8:1A:AB:60:33:92:F2:55:21:B7:C9:AB:5B:D2:81:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHXmUfgaq2AzkvJVIbfJq1vSgcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/cec327-38e1-4af4-a08f-77cfd215b732/1/pHXmUfgaq2AzkvJVIbfJq1vSgcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fb:d5:5c:6e:21:56:88:83:35:59:78:f5:62:c9:7c:65:5d:
d7:1f:ca:e0:e3:f4:a8:24:ad:3a:94:20:5e:88:a8:d2:f9:e8:
fa:d1:22:21:0f:5b:cc:ea:37:fa:e7:2d:05:74:5d:a1:7c:b1:
47:f8:29:30:27:33:16:51:b0:44:9d:73:c2:53:9a:ff:fb:ed:
2e:77:94:59:fb:02:54:6c:b2:7d:4d:fa:42:77:20:83:2f:83:
84:af:1c:7d:d5:c4:27:a6:40:d9:ce:7d:f3:1e:51:63:c9:4e:
c2:c5:db:55:6d:b3:8a:9b:24:65:01:2d:cf:b2:cf:ae:99:4d:
c9:bc:9b:b4:7a:ce:3c:99:24:ae:42:52:28:22:de:ed:91:92:
93:83:00:7b:8d:1e:fd:c0:2f:8c:7d:f7:db:26:7b:72:6c:94:
8b:49:23:32:d0:4c:07:05:8a:4b:6e:80:22:ae:c7:97:a2:94:
73:b3:fa:60:8e:6e:51:a7:f4:71:0f:5a:83:f4:4d:f4:63:68:
d5:b5:62:65:4c:93:2a:bb:aa:14:ba:5e:4c:8f:f1:e6:f0:43:
65:e6:03:7e:44:e4:65:ae:b0:c2:55:0c:fc:60:d1:fe:62:ea:
6b:fc:6d:01:8c:b9:e0:f0:c2:9c:24:4e:4e:64:48:15:b7:72:
43:b8:18:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:45 2025 by rpki-client