Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: TtQvSM0Q08kBXXCwOonltHkZMLL5CdtpnpZEd5O9GZ0=
Subject key identifier: 26:F6:52:D2:EA:EB:C9:14:BB:B1:D0:0C:3B:96:40:0E:E2:0D:BD:FC
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 019A4EF4DBC599C7CAAF5FD692F76EFA1577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0B19
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: XuDKhXhdukmpD3A5rvN48v7qJD+sKzRzr+1cbk0V5Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:db:c5:99:c7:ca:af:5f:d6:92:f7:6e:fa:15:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=26f652d2eaebc914bbb1d00c3b96400ee20dbdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:ca:61:e0:1a:9f:1a:ce:22:f4:04:f8:d1:
0d:a5:ee:c5:fa:16:92:59:d2:a8:d8:0e:d8:4b:d0:
0a:8f:97:70:be:cc:e1:ce:ab:f7:1a:8e:e0:f9:9a:
5f:bb:3a:c4:ed:70:99:cc:f4:b0:cb:e1:3a:89:0c:
2b:d8:b0:6e:3c:ea:92:33:a1:e0:dc:bf:4e:04:ae:
71:8f:7a:06:fd:90:96:41:3f:de:51:f3:2d:c2:10:
52:d8:19:aa:2d:4c:cb:1a:bf:3e:1c:8e:7b:d0:0d:
fc:8a:9a:5c:29:cf:8e:c7:3a:37:5c:aa:55:25:e6:
fe:72:d6:ee:65:41:06:1d:2a:ff:43:7e:8c:ab:05:
f0:8e:d6:d3:82:ab:33:4f:76:ae:df:dd:35:66:c3:
e3:8b:b4:db:ad:da:07:1c:aa:c7:38:8d:30:4f:c2:
72:28:52:64:4f:72:e5:4d:ee:b5:c0:2b:d7:1c:b9:
eb:6b:06:7c:5e:10:76:ea:53:fd:c2:8f:08:e4:a2:
c2:0e:63:fc:63:35:6e:b4:86:de:c7:52:f8:c3:eb:
b2:cd:0f:a9:d5:a7:33:e9:89:d3:a3:90:4c:20:50:
06:48:53:23:ac:98:06:ca:45:ba:22:7a:b2:46:87:
c3:84:d9:15:9d:1d:ca:6a:f2:42:1b:62:cb:7f:d2:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F6:52:D2:EA:EB:C9:14:BB:B1:D0:0C:3B:96:40:0E:E2:0D:BD:FC
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:76:90:26:98:ae:7f:37:ff:6c:c1:1e:02:33:70:63:ad:00:
04:65:68:a1:0f:4c:94:b3:2d:62:72:af:2e:01:db:c4:cb:43:
74:c3:61:31:1b:ff:f3:e5:95:f5:84:b1:57:1e:ae:38:13:ca:
02:d3:f7:41:d5:c4:60:fc:9f:79:59:d8:d9:87:1e:93:3a:61:
dd:45:ef:dd:0d:d7:04:e9:72:94:82:e2:69:09:26:02:a2:4e:
e9:38:cf:7b:a0:81:bb:48:63:ba:f6:67:3c:2f:8a:aa:d4:78:
4f:20:60:da:91:c8:12:a9:e9:58:1c:cd:a1:19:39:09:56:49:
b1:b1:db:5a:ec:a7:bb:8d:83:4a:c9:8e:47:83:87:9a:e6:bc:
82:ca:e5:1c:81:b7:c7:c0:0f:de:da:25:1a:2e:cc:8d:41:3c:
28:a5:f6:9e:2e:40:98:8a:5d:fe:ae:22:da:f9:ba:06:22:cf:
05:c2:a0:0e:50:8d:d4:6d:0f:01:83:95:63:5f:ad:ef:80:ae:
23:e3:5d:ba:ff:88:f8:f4:61:42:48:0b:8a:7a:31:c7:24:3e:
40:16:38:01:c0:24:2e:c6:ec:3c:d4:0f:3e:87:fe:9b:57:0f:
b8:24:1a:b8:f8:c3:37:91:5c:ea:85:cc:43:f4:67:8a:02:96:
88:67:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:13 2025 by rpki-client