Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: v58Jrcrv5Y4ows2i9wO1gWBMJgjcs0LJLhOcVHB919g=
Subject key identifier: E4:7B:9A:B2:C6:E8:D2:A6:B8:26:A6:5E:BA:90:92:B8:89:18:7D:5E
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019A71B7E120C8E9A6261EF3A79F1348AA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: nadPpLZj0XYq7j5OsNjkNu+R8Cesdxb9AQ/r/e1+lhE=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e1:20:c8:e9:a6:26:1e:f3:a7:9f:13:48:aa:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=e47b9ab2c6e8d2a6b826a65eba9092b889187d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:4c:b3:0f:45:2f:60:2d:6e:d5:2c:47:9e:
50:2f:d3:b9:8b:cb:1b:a9:20:af:35:47:36:fe:02:
13:82:ab:b5:b7:ab:19:03:bf:4e:ca:bd:2a:6c:d8:
10:19:b6:f6:24:20:a2:4e:a6:45:3b:24:09:a3:28:
c3:c2:ef:37:f1:0b:27:40:6a:b5:4a:7e:6d:d0:d5:
a3:4b:77:be:28:2c:7b:d5:28:34:91:0d:e3:4d:71:
1b:54:3c:a4:bb:65:78:ec:c3:5e:9b:6b:d2:58:e0:
ec:a3:37:2f:8f:bd:54:cb:33:53:9c:93:9c:52:0e:
41:3e:4c:8a:3e:f3:94:a9:c5:73:67:0d:1d:70:2c:
77:e9:aa:45:f6:29:23:de:4e:ab:54:53:71:60:2f:
9d:39:fc:4f:59:24:3d:1e:87:b7:e6:97:d8:52:b6:
09:bc:be:3a:66:a2:93:af:2e:ea:01:84:4f:7b:55:
f6:1c:5f:a3:bc:15:b6:74:70:eb:8e:19:f6:33:8e:
7b:3d:81:df:25:e9:c0:40:e5:c7:00:24:12:54:98:
e3:e7:e3:0c:2a:bc:b7:71:ee:e0:27:66:8d:06:53:
f0:fa:36:50:eb:db:35:77:12:ae:2d:06:51:b4:66:
4a:08:c1:88:9d:86:40:2b:4f:f8:c4:7b:da:db:64:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7B:9A:B2:C6:E8:D2:A6:B8:26:A6:5E:BA:90:92:B8:89:18:7D:5E
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:e8:fd:fd:3c:77:31:0a:78:09:7f:ca:9b:73:a1:64:55:
0e:07:64:fb:81:9f:19:ab:91:4b:9b:55:3e:9c:ab:85:fd:d9:
6b:fe:c6:e9:46:8e:67:b3:00:62:af:8c:c1:38:b7:a6:d2:d9:
ed:4c:3a:a1:21:4c:25:ba:b9:12:ff:d2:8f:ca:b8:42:a9:8d:
5f:70:b7:ec:01:84:a2:88:ff:ce:b4:b0:45:73:10:94:80:17:
fc:76:2f:a8:8f:b9:01:e6:6c:1c:3c:f7:00:28:b7:64:c5:f8:
30:66:e2:dc:2d:6c:a5:ae:0a:77:e1:52:32:75:ef:cb:7f:11:
f0:32:4b:0b:10:6a:0d:ca:ce:ef:51:50:0b:04:65:6c:b7:ac:
9c:53:00:a6:02:77:9d:47:1a:54:e7:a4:5b:cc:ff:35:e6:2c:
c5:ac:a6:66:8e:a9:3c:ad:b8:26:ca:d0:5a:64:03:12:4e:cb:
70:6f:55:53:91:ad:06:33:1f:0a:ef:a5:45:ea:e7:84:a4:10:
9d:e4:aa:5b:fd:f4:c0:98:e2:39:fb:2a:b8:c1:e5:a0:aa:5d:
f4:ee:79:89:81:c6:1a:41:c2:3a:47:8e:e1:9d:ed:f8:d0:1c:
96:f1:80:50:d1:68:71:14:2c:01:6a:49:fe:0e:b7:45:d9:24:
42:be:0d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:53 2025 by rpki-client