Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: 34Uk46Oxb/ImpMjqfVz8B0PKIGK7EMpeoIKxiM4b5mA=
Subject key identifier: 39:83:F3:60:63:B1:F8:94:52:BB:3D:46:8F:C4:30:C0:36:4E:E9:58
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 019A71B8A4D3B79CFAF0C2F21FD64D416197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:57 +0000
Manifest this update: Tue 11 Nov 2025 07:01:57 +0000
Manifest next update: Wed 12 Nov 2025 07:01:57 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: UbCE8NI+NKzaQm2WBFNaqQcM3nwmab46rcc8FYXZ6kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a4:d3:b7:9c:fa:f0:c2:f2:1f:d6:4d:41:61:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Nov 11 07:01:57 2025 GMT
Not After : Nov 12 07:01:57 2025 GMT
Subject: CN=3983f36063b1f89452bb3d468fc430c0364ee958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e9:47:8c:67:05:7c:6d:f1:7d:c1:cb:db:98:
8c:ac:28:35:33:bc:bf:c7:19:f5:42:f5:42:23:9e:
1b:00:e2:b3:02:de:53:be:7d:e4:da:b7:dd:99:37:
c1:e5:ac:90:04:34:12:0e:3f:fa:14:f9:37:84:ec:
1d:7f:32:40:65:46:b6:6c:94:89:8f:87:1c:fe:71:
b1:27:56:ba:35:7b:a5:7b:10:1c:87:6f:f6:b4:00:
d1:e8:fe:79:42:52:87:a0:58:81:2f:88:81:38:4b:
ad:27:e1:f1:1a:27:04:38:ea:f8:af:19:52:cf:ba:
7a:3a:bb:8d:79:7f:8c:8c:1e:1b:d4:4a:20:39:d2:
89:4b:46:75:eb:b2:50:26:43:dd:40:df:79:48:7e:
5f:31:6f:be:7f:65:21:86:ec:d6:8f:de:97:2a:8c:
a1:74:f1:89:d3:23:db:59:ec:df:ab:b2:35:c8:85:
87:a4:f9:84:9d:40:5f:9f:00:e6:67:e1:c2:fc:e0:
df:0a:0b:be:0a:cc:a0:ad:93:29:db:ab:9b:9c:bd:
29:c5:af:b5:9b:82:18:67:10:7c:79:b2:2e:6c:e7:
99:f4:83:10:bc:8b:20:e7:f3:5b:f4:d5:50:cf:a9:
70:1a:10:3e:7b:7c:cc:a8:bf:8c:bc:1f:82:44:5d:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:F3:60:63:B1:F8:94:52:BB:3D:46:8F:C4:30:C0:36:4E:E9:58
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:22:e7:f9:36:03:c5:31:ad:74:a9:82:a7:82:e4:0c:bf:89:
d8:42:7c:02:7f:da:92:33:3e:e9:4c:e0:77:18:b6:81:9d:a4:
c9:d5:8d:76:f7:dc:15:ba:9a:f0:df:d0:2b:0a:61:ae:af:a0:
5d:4c:f0:69:4b:51:d4:70:18:cc:e7:4a:55:75:52:cd:a1:5a:
31:a9:71:3b:f0:5b:17:10:36:9e:df:b3:b5:22:1e:b2:63:56:
db:a5:12:6e:50:36:21:3b:0c:84:12:7c:4f:83:81:1e:86:11:
53:7a:92:cc:19:10:59:2c:39:c3:ef:20:64:ab:4f:96:b5:50:
a8:62:52:4b:63:18:c2:b3:1a:75:94:a4:10:48:93:fd:19:ad:
1b:5e:f0:16:cc:03:50:f0:ec:8a:b3:02:eb:d0:40:2c:42:99:
d2:82:b7:bc:cd:21:93:f2:20:d3:03:04:31:23:07:97:f8:bc:
7e:e1:39:80:2c:7a:48:8d:d4:57:58:a6:b2:88:9d:18:76:cb:
f1:7f:1c:a6:cc:02:5f:09:a0:bd:35:92:2d:f0:5d:cc:ba:96:
ea:1c:71:13:01:5b:65:88:65:74:95:09:76:45:e3:71:9b:30:
fc:c4:3f:90:86:e4:c4:75:e3:2f:47:58:08:f0:15:54:fd:98:
f2:89:04:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:57:57 2025 by rpki-client