Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: b2dQ2HwglvIvlVxmK7eAK7ci3zoQkR4c3SIoRrxPsbU=
Subject key identifier: 94:EC:EA:7E:E3:30:74:4B:F2:9B:FD:15:6E:8E:0E:06:CB:49:D5:2C
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 019A50E36F98D9A9A15F05432407D612A6D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:13 +0000
Manifest this update: Tue 04 Nov 2025 22:01:13 +0000
Manifest next update: Wed 05 Nov 2025 22:01:13 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: V2r7aReLaz514GHYAueN9qEfqjGf22Q9MTgzNN+/hJ0=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6f:98:d9:a9:a1:5f:05:43:24:07:d6:12:a6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Nov 4 22:01:13 2025 GMT
Not After : Nov 5 22:01:13 2025 GMT
Subject: CN=94ecea7ee330744bf29bfd156e8e0e06cb49d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:96:c3:a4:71:69:4e:73:43:54:0b:25:6e:86:
a9:0d:a0:a6:e1:8c:0c:ac:e5:bb:e6:b0:8c:74:a4:
fa:fc:42:a1:72:9b:a6:28:e3:81:6b:9c:9d:17:1f:
66:20:ce:b2:85:a9:d1:91:3f:8c:2a:8d:47:d9:2d:
cb:e8:e2:30:a7:34:ec:d5:87:d7:f8:eb:bc:8b:fb:
e7:63:6f:fc:85:ba:35:e6:21:3f:1a:d1:53:b9:3c:
85:6e:cc:0d:84:c1:62:65:34:6a:23:04:55:7c:a1:
4d:c7:b5:3b:e7:3a:1b:6d:97:3c:27:9e:97:b2:3f:
c9:14:fe:0d:9d:2c:ee:65:e9:8c:67:ff:44:38:fc:
12:64:c8:a7:dd:b6:33:6f:62:10:34:6a:b1:6f:ba:
78:ed:51:7d:98:da:0e:cd:89:ed:59:65:d0:9a:cd:
ff:e6:e2:9d:8d:79:0f:3a:c7:20:f6:c6:c2:39:4a:
76:a5:f9:c5:ef:36:74:bd:98:ae:c1:f3:7a:e1:de:
b2:b0:f6:fe:f7:5b:1c:09:e8:6b:2b:2b:f9:c8:ee:
08:a2:67:95:a3:ea:41:26:20:1e:ca:c7:97:37:9f:
c4:b3:8c:57:ac:a6:18:b9:5e:3c:1c:06:83:e1:85:
94:f4:89:8a:59:65:f7:f3:32:4c:04:b9:b9:df:f4:
34:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:EC:EA:7E:E3:30:74:4B:F2:9B:FD:15:6E:8E:0E:06:CB:49:D5:2C
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7d:02:53:19:a9:1a:14:95:ed:d0:34:7f:85:9f:c9:04:17:
55:36:19:4d:36:18:34:10:74:4b:8a:f9:35:c9:61:c5:55:93:
ce:01:0d:2b:01:48:20:9a:45:9a:4e:c8:c2:7b:6b:5d:41:fc:
c0:b7:c0:0f:e0:54:f2:61:d9:72:52:b2:94:13:91:29:06:4f:
34:fb:da:ca:cd:e8:b8:a3:a8:0a:c9:fb:3b:2d:70:59:54:ec:
b7:81:20:05:b2:b1:16:db:a1:a7:50:38:ed:d5:c6:af:9d:10:
d1:e3:f0:b3:88:65:e3:cf:96:32:e4:86:7b:ee:69:52:06:f0:
eb:cf:c1:66:25:e4:78:dc:89:5c:a5:87:16:6e:14:35:32:c7:
4e:43:1a:82:80:df:db:94:2e:64:8b:b5:68:aa:8f:0a:11:35:
57:10:05:f1:e1:c1:e9:a4:2a:72:ef:0c:1c:05:3c:c1:34:39:
7b:b5:91:94:67:5e:26:92:37:7f:d1:17:4f:68:0b:3a:1b:c4:
b2:4d:ad:fc:f9:4e:42:9a:ea:bd:b5:a0:78:1b:e8:e5:39:68:
aa:35:a8:18:2c:50:f8:53:c8:bc:5d:be:26:67:78:e9:be:2f:
e8:63:c7:8f:19:62:c8:44:3a:ea:88:23:13:cf:09:60:c0:0e:
e6:ad:b3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:46:00 2025 by rpki-client