Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: uTyLAumC9oZOqD9CBs4JaDIP+0ziIKm13siPkPnTTGE=
Subject key identifier: 58:4E:51:AD:36:23:9F:17:0F:24:1A:54:F3:66:03:71:AE:E6:8F:F6
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 01987D8A0FBB19407F21373E8665EE8A5D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 04:00:56 +0000
Manifest this update: Wed 06 Aug 2025 04:00:56 +0000
Manifest next update: Thu 07 Aug 2025 04:00:56 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: 4SJX3GjdQZe9pYT37VtsIK7J7PZ0No2JpU6s+VxOv14=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:0f:bb:19:40:7f:21:37:3e:86:65:ee:8a:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Aug 6 04:00:56 2025 GMT
Not After : Aug 7 04:00:56 2025 GMT
Subject: CN=584e51ad36239f170f241a54f3660371aee68ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d3:b7:73:02:0a:4f:d2:69:ba:c3:f5:bc:c7:
20:ff:e2:5e:d1:ca:aa:cf:bc:bc:fc:a1:38:8c:f8:
7d:eb:b4:dd:e5:38:9d:f2:64:39:7c:78:ce:42:cc:
be:dd:5e:3b:ba:e8:55:c3:cc:ad:72:e4:03:02:5d:
00:aa:0e:10:46:aa:28:1c:34:aa:86:62:3f:28:ab:
95:27:8f:da:09:70:e4:04:fc:f1:19:41:55:c1:db:
44:12:34:08:50:7e:92:2c:bf:0b:05:33:eb:23:b5:
e0:79:32:66:3d:16:0b:21:0c:0c:56:9d:a9:b0:f0:
dd:d3:23:fd:18:ae:b9:ce:58:4e:20:a6:70:06:dd:
b9:e8:dd:3b:39:82:ef:f8:8a:e8:04:20:77:7f:e3:
61:84:57:0c:5e:0a:a5:20:77:b8:60:01:6c:4d:30:
12:05:4b:dc:9f:ee:dc:33:80:68:e9:75:19:fe:27:
30:8c:d0:54:41:7e:c1:fc:30:9c:c6:7a:9b:00:fa:
0e:a3:a6:34:95:ca:ff:3a:ca:c8:a2:7a:16:f3:1c:
3a:42:90:80:9c:f5:47:ec:c4:62:5a:e6:a9:c2:b0:
0a:4a:b7:32:39:b8:1b:72:9b:d7:59:58:e0:f6:67:
6f:cd:37:67:9e:7f:5e:04:f7:1d:9b:0b:7a:a0:ca:
c8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4E:51:AD:36:23:9F:17:0F:24:1A:54:F3:66:03:71:AE:E6:8F:F6
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:53:e4:68:2d:a3:a3:f3:d2:32:e4:62:85:5b:9b:e2:72:dd:
08:5b:5c:d8:cd:5c:ec:36:e0:43:58:db:72:26:e0:6c:57:ac:
11:18:43:e2:c2:17:49:d9:62:94:b6:52:14:b0:19:6d:8b:4e:
4f:33:df:86:a8:5c:06:8d:27:dc:79:1e:b4:7e:dc:62:98:ee:
85:4e:b5:60:2e:53:5c:60:91:d7:7c:6f:b5:33:89:d0:45:cd:
01:32:24:25:34:66:cd:92:3d:59:43:80:f4:09:25:f9:28:83:
ac:80:65:5e:b8:0b:35:fa:31:b0:b0:07:e5:c1:33:f2:ae:74:
bc:62:34:65:a7:a2:c3:e4:6c:b7:17:80:5a:af:6f:f9:18:36:
19:17:e8:10:98:d1:ed:33:a9:9f:c0:a6:2a:3f:70:aa:22:01:
6a:62:4d:4f:2f:eb:38:f0:57:b3:3f:cc:d4:67:b5:3f:b4:44:
6d:7b:12:93:e1:35:45:80:b4:63:ac:30:b5:3f:6b:80:c4:11:
8b:05:c9:c7:52:c0:d0:a4:8a:7b:53:f1:1f:84:76:18:0b:97:
18:74:e0:78:6e:f7:54:29:5a:dd:a2:b6:6f:00:fe:4a:10:04:
ca:56:46:39:19:87:2d:5b:62:eb:ac:35:ca:7a:81:2c:f4:5d:
f1:bb:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:54:42 2025 by rpki-client