Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
File: phvll6k-axrZQXjQPo6MFVcmeMc.mft (raw, json)
Hash identifier: Rki5ChTnPRzw6uLNK7X5MSEFWnkIXyZckfIdIqAQih4=
Subject key identifier: 1D:26:18:3C:74:CF:1B:CC:87:35:81:B5:D3:E0:05:5B:BA:50:AF:AF
Authority key identifier: A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
Certificate issuer: /CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Certificate serial: 019A4E4F36C04235BE0C421E1B9BF0709330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
Manifest number: 04F1
Signing time: Tue 04 Nov 2025 10:00:05 +0000
Manifest this update: Tue 04 Nov 2025 10:00:05 +0000
Manifest next update: Wed 05 Nov 2025 10:00:05 +0000
Files and hashes: 1: phvll6k-axrZQXjQPo6MFVcmeMc.crl (hash: t4T9htlA1HWjOyVm9+cBQaP1zR4tSvuyOV+wtTN4xyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:36:c0:42:35:be:0c:42:1e:1b:9b:f0:70:93:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61be597a93e6b1ad94178d03e8e8c15572678c7
Validity
Not Before: Nov 4 10:00:05 2025 GMT
Not After : Nov 5 10:00:05 2025 GMT
Subject: CN=1d26183c74cf1bcc873581b5d3e0055bba50afaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:99:a6:2a:48:93:7f:5d:0b:a4:35:40:95:
22:35:0c:75:25:76:fc:3b:0d:43:d2:fa:62:13:bc:
96:46:11:79:22:df:af:69:f4:d3:a0:55:59:eb:8a:
7f:9e:95:cd:08:e2:0b:ce:91:a9:7e:fd:9e:32:df:
c3:e3:2f:d0:2e:f4:4c:ac:c8:10:64:68:5c:d4:9b:
26:ac:13:63:08:35:25:fe:64:61:a2:1c:9d:11:49:
be:1b:52:c7:2c:81:a2:5b:fc:e1:39:f4:6a:1c:de:
d2:b5:0b:3b:39:a9:e8:e2:44:60:3e:14:25:80:f6:
92:5e:15:b6:b4:ae:fa:15:0f:e2:a6:e6:59:cf:78:
c8:27:b5:b0:37:2c:6f:1e:1c:6f:91:28:fe:aa:f7:
73:13:d0:7f:2d:b9:6f:31:7d:3f:1c:8e:1d:b2:7b:
5f:f6:94:2b:51:a2:a8:af:f6:04:8b:1e:8b:6e:1a:
e3:fe:d1:9a:b5:dc:1d:30:e0:c9:6c:68:43:f2:20:
46:ad:ef:0e:9f:92:6a:dc:56:ee:0c:27:90:14:4e:
1b:01:82:96:2e:f6:16:d8:a2:4a:92:89:96:0c:34:
50:91:e1:15:22:cd:2d:2e:97:45:d6:dd:31:44:35:
23:fe:fb:3a:06:44:f8:58:92:3b:3f:8c:d6:cc:75:
20:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:18:3C:74:CF:1B:CC:87:35:81:B5:D3:E0:05:5B:BA:50:AF:AF
X509v3 Authority Key Identifier:
keyid:A6:1B:E5:97:A9:3E:6B:1A:D9:41:78:D0:3E:8E:8C:15:57:26:78:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phvll6k-axrZQXjQPo6MFVcmeMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/56a0ef-f6b9-4240-9cdc-c1e4ccb156ee/1/phvll6k-axrZQXjQPo6MFVcmeMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:18:ee:21:0b:7c:94:c9:32:40:8b:49:2b:e7:c0:da:b0:9e:
f5:c9:a3:37:af:d8:5e:be:4d:29:d8:69:f0:c2:54:8c:a7:0e:
44:14:df:36:7f:6a:c0:3e:81:58:67:82:51:b7:ea:25:44:87:
45:29:98:17:3a:8d:f8:68:59:8b:a8:df:d6:f1:da:ad:fc:53:
c7:6a:95:04:4d:db:db:58:50:30:f7:55:26:60:ae:cb:49:8d:
8d:7b:0b:cb:4c:24:91:80:f0:4f:84:fe:2e:98:7b:3f:2b:35:
93:7d:5e:c6:12:b9:92:51:7a:d9:c5:8b:6f:b6:66:71:25:9d:
0b:20:c8:79:f6:e3:42:69:4b:88:da:77:09:9b:10:c1:65:27:
89:05:57:97:4b:c0:93:b9:7f:37:eb:1f:e8:87:98:35:75:c5:
64:66:42:20:00:16:3b:8a:85:f1:f5:11:64:bd:93:e2:55:7f:
43:7f:aa:00:d8:78:c1:26:35:bf:78:0b:90:4a:f2:bb:16:59:
5f:96:4e:29:41:37:c5:e4:fa:4b:65:ef:73:1d:d8:2d:6a:53:
42:c2:90:17:52:6c:3d:b6:ea:56:4d:05:28:20:4e:32:fc:98:
29:76:c4:04:95:f6:43:f3:b4:77:0f:44:6e:96:e4:20:7f:12:
b6:cc:c7:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzbAQjW+DEIeG5vwcJMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWJlNTk3YTkzZTZiMWFkOTQxNzhkMDNlOGU4YzE1NTcy
Njc4YzcwHhcNMjUxMTA0MTAwMDA1WhcNMjUxMTA1MTAwMDA1WjAzMTEwLwYDVQQD
EygxZDI2MTgzYzc0Y2YxYmNjODczNTgxYjVkM2UwMDU1YmJhNTBhZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslmZpipIk39dC6Q1QJUiNQx1JXb8
Ow1D0vpiE7yWRhF5It+vafTToFVZ64p/npXNCOILzpGpfv2eMt/D4y/QLvRMrMgQ
ZGhc1JsmrBNjCDUl/mRhohydEUm+G1LHLIGiW/zhOfRqHN7StQs7Oano4kRgPhQl
gPaSXhW2tK76FQ/ipuZZz3jIJ7WwNyxvHhxvkSj+qvdzE9B/LblvMX0/HI4dsntf
9pQrUaKor/YEix6Lbhrj/tGatdwdMODJbGhD8iBGre8On5Jq3FbuDCeQFE4bAYKW
LvYW2KJKkomWDDRQkeEVIs0tLpdF1t0xRDUj/vs6BkT4WJI7P4zWzHUgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0mGDx0zxvMhzWBtdPgBVu6UK+vMB8GA1UdIwQY
MBaAFKYb5ZepPmsa2UF40D6OjBVXJnjHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMt
YzFlNGNjYjE1NmVlLzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC81NmEwZWYtZjZiOS00MjQwLTljZGMtYzFlNGNjYjE1NmVl
LzEvcGh2bGw2ay1heHJaUVhqUVBvNk1GVmNtZU1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERjuIQt8
lMkyQItJK+fA2rCe9cmjN6/YXr5NKdhp8MJUjKcORBTfNn9qwD6BWGeCUbfqJUSH
RSmYFzqN+GhZi6jf1vHarfxTx2qVBE3b21hQMPdVJmCuy0mNjXsLy0wkkYDwT4T+
Lph7Pys1k31exhK5klF62cWLb7ZmcSWdCyDIefbjQmlLiNp3CZsQwWUniQVXl0vA
k7l/N+sf6IeYNXXFZGZCIAAWO4qF8fURZL2T4lV/Q3+qANh4wSY1v3gLkEryuxZZ
X5ZOKUE3xeT6S2Xvcx3YLWpTQsKQF1JsPbbqVk0FKCBOMvyYKXbEBJX2Q/O0dw9E
bpbkIH8StszHJg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:06 2025 by rpki-client