Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: gBChJAwfpjLsl0keT7rrwcDuyRJaoJH2o4hArSciMlg=
Subject key identifier: 83:DB:65:6B:13:F8:62:6A:4C:41:C9:97:A1:A7:E1:F4:9B:3F:91:64
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 01974A7AA4B18C6E1D17D3A014C9A606FE73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:00:40 +0000
Manifest this update: Sat 07 Jun 2025 13:00:40 +0000
Manifest next update: Sun 08 Jun 2025 13:00:40 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: mofVYEpSPidUSbVykriwwYcnMd40tJJwsFA2Kn0+rm8=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:a4:b1:8c:6e:1d:17:d3:a0:14:c9:a6:06:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Jun 7 13:00:40 2025 GMT
Not After : Jun 8 13:00:40 2025 GMT
Subject: CN=83db656b13f8626a4c41c997a1a7e1f49b3f9164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:cf:44:65:ee:d2:6d:c8:6c:11:09:f2:b0:
e1:ba:2b:ee:01:6a:c9:99:b8:65:b0:16:b2:24:a5:
68:f7:26:19:d5:f6:0f:c8:a6:02:a2:4d:3a:cb:58:
97:d3:57:20:51:64:22:37:2f:c3:ba:b8:6b:59:dd:
46:81:28:72:ac:85:eb:aa:c3:54:a8:15:d3:15:11:
1d:99:02:79:a8:67:15:15:31:2e:ac:f8:30:f2:4e:
cc:7f:02:33:7b:b8:f0:82:ea:0d:d1:24:09:05:be:
b1:c7:c9:d6:81:92:59:07:5b:0c:85:20:33:c6:7b:
10:71:30:fd:2f:eb:ee:44:bd:c3:4b:8a:33:49:df:
5d:54:5e:78:ca:d5:1b:8d:7f:db:7d:73:0c:56:d0:
fb:19:7d:c2:1e:4a:98:af:78:65:6a:dc:f6:da:e4:
be:e5:8f:89:2b:4d:d5:2e:cd:72:a0:11:7f:a4:49:
d4:86:ee:e7:34:89:1d:ea:e2:9d:38:1f:39:14:ca:
ca:31:19:8d:ad:a2:a4:24:da:56:dc:d7:22:24:a1:
30:a4:08:9f:66:c8:47:3f:e9:00:5d:9b:5c:33:61:
ab:f1:6c:4e:59:80:c1:70:10:f1:ef:26:2c:fb:e1:
d6:16:f5:2f:55:cd:3b:88:6a:86:85:dc:67:46:df:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:65:6B:13:F8:62:6A:4C:41:C9:97:A1:A7:E1:F4:9B:3F:91:64
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5a:54:20:25:fd:2d:76:84:de:93:14:17:68:25:65:44:f7:
e3:74:25:29:e0:f7:21:b0:d3:c3:32:48:a0:e7:86:f4:ca:35:
77:e8:a8:fd:8e:e5:86:cf:84:02:29:c1:b0:f2:96:22:05:8b:
9f:75:94:c2:34:89:52:65:bb:e3:6a:18:94:d1:70:20:b7:73:
63:08:ec:8d:25:4e:63:f2:c9:4c:39:db:f4:97:64:f8:87:ff:
2c:23:14:31:d4:39:aa:60:fb:68:95:43:91:28:df:4e:3c:54:
1a:b9:4e:39:6e:b4:eb:d3:2c:a0:14:9c:b0:ea:32:cb:6b:18:
76:00:54:32:d1:bf:fe:e9:2e:b4:86:59:89:6f:5a:ee:c3:20:
4d:df:80:84:72:85:a8:1e:31:d3:8e:a4:34:45:b7:99:84:d1:
a2:08:fd:7e:cd:ab:69:9b:52:28:ee:5d:c1:b5:fa:65:11:5a:
c3:61:05:7b:95:75:41:a9:0f:21:cf:ad:fd:73:4e:32:e7:b9:
f2:58:e7:3d:83:e4:98:3b:d2:12:4f:74:32:4b:9c:71:10:95:
94:5e:b7:4a:09:fb:8e:d1:44:22:fd:b3:d7:e9:50:3a:08:5c:
c4:95:c0:ee:15:f9:20:03:68:08:05:f7:ac:1c:d8:f5:cf:55:
66:f8:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:39 2025 by rpki-client