Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: HNPYZu0FUykhoARTXhZLfmb0r/I1hdda0mawmw0n1QA=
Subject key identifier: A5:CD:65:22:E1:7C:24:C6:E3:51:1A:56:BE:85:AA:6A:45:6C:FB:DE
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019921B19193C7E7E1C9C32C1A2E5D505CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:01:49 +0000
Manifest this update: Sun 07 Sep 2025 01:01:49 +0000
Manifest next update: Mon 08 Sep 2025 01:01:49 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: ayFvNNYWnRsmH1oOHWN6cCRxKQD6ywq7sMtkkJnIo+s=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:91:93:c7:e7:e1:c9:c3:2c:1a:2e:5d:50:5c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Sep 7 01:01:49 2025 GMT
Not After : Sep 8 01:01:49 2025 GMT
Subject: CN=a5cd6522e17c24c6e3511a56be85aa6a456cfbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:98:43:1d:92:57:77:31:da:54:3e:a6:37:
d3:a9:65:a0:49:36:3a:27:5b:ed:09:bf:09:36:5f:
2e:21:fe:d4:15:ea:fd:67:de:13:f1:20:9a:6a:e2:
df:07:2d:0a:07:17:6e:e1:98:a8:c7:df:ca:c5:48:
e4:73:e5:b6:38:83:0c:8c:21:8c:da:65:31:02:fb:
e6:6c:d9:5f:d7:a9:2f:78:3e:96:b4:95:a8:8a:38:
c9:16:4f:28:3a:c0:a4:56:47:91:ab:d1:14:97:0f:
c9:ec:fd:3c:63:9d:f9:28:38:b5:7d:be:74:43:b5:
04:5c:61:86:9e:fd:20:70:73:50:c3:c5:7d:dc:a3:
df:c6:e9:78:6d:13:f7:0b:a6:ed:a4:bd:55:48:82:
48:e3:e5:f5:9f:b7:91:29:9d:a8:f7:27:75:8b:e3:
36:c9:e6:89:d7:c6:ed:9b:b6:71:72:f2:49:d5:12:
39:1f:3a:55:49:75:75:fe:17:fa:15:f5:5c:1e:8c:
bd:c6:7e:63:ae:bf:73:d5:03:9a:cd:ea:49:12:b2:
67:51:1e:69:fd:cf:d2:4b:ea:26:0b:57:66:62:ce:
fc:71:9a:fa:8f:9f:77:36:38:20:9a:fb:fe:33:60:
39:31:78:70:af:b5:51:21:62:98:2c:58:b9:93:97:
72:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:65:22:E1:7C:24:C6:E3:51:1A:56:BE:85:AA:6A:45:6C:FB:DE
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:37:19:5d:8f:74:90:30:f8:99:4c:29:69:7b:fb:61:d5:53:
1a:0b:10:40:76:63:7e:81:08:0b:db:3c:80:61:ec:8c:eb:9f:
69:b5:3c:e0:8c:18:88:6a:80:48:cd:5f:fb:cd:d7:98:f5:79:
d9:92:ab:3c:68:c2:91:3d:82:54:74:5a:52:3f:73:08:c0:2e:
1d:29:50:5b:18:9d:94:e1:34:80:7d:84:23:28:92:c3:ca:2f:
be:4f:71:f0:0e:1c:5b:24:7d:53:10:07:4b:0d:d4:ce:0d:b8:
52:51:eb:28:b4:ee:84:52:7f:1c:0d:ad:32:61:97:f1:8d:b0:
66:37:11:12:f9:d9:72:d6:09:55:53:9c:36:e7:49:6c:ff:f7:
7a:a7:a4:1d:87:61:24:c5:16:56:33:30:0a:4a:b9:b6:aa:92:
7a:b0:8d:ac:7d:c9:53:b9:67:ae:e1:c6:0d:b1:3e:92:3f:58:
b4:c6:a5:0b:b0:69:23:43:79:5c:de:06:ec:ba:65:74:1b:f4:
ef:ef:04:a4:cb:41:0d:87:57:97:5d:c6:1b:d5:2a:06:97:21:
8c:49:52:ef:08:ad:fb:65:4e:fc:fd:de:dc:82:09:fd:c7:17:
b5:a1:a7:64:09:de:06:84:85:08:32:37:db:d8:fc:a8:22:db:
79:30:5e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:50 2025 by rpki-client