Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
File: PCH6xeiV5bfOZv4In_0LL2FVDSE.mft (raw, json)
Hash identifier: aL+0RJGC8dx3ili8sLUBSW/8N4lgVHsT5M3BKRzmOmM=
Subject key identifier: FD:04:F1:65:3E:3C:13:77:2A:78:51:D2:E4:96:86:A5:58:04:E4:54
Authority key identifier: 3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
Certificate issuer: /CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Certificate serial: 0197696076BBA7D27E9E21F31882ACA60CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 13:00:18 +0000
Manifest this update: Fri 13 Jun 2025 13:00:18 +0000
Manifest next update: Sat 14 Jun 2025 13:00:18 +0000
Files and hashes: 1: PCH6xeiV5bfOZv4In_0LL2FVDSE.crl (hash: ymGrbDTo8eQJndjgh8yO/ioamsbix4tPSFsWsE0fXSw=)
2: kMic-cYu_3jAGaMkqOjyp2h03_Q.roa (hash: q724sfMAPnUFvRmxjRBhUtLlfNKhUfTz/xhqtAFnU88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:76:bb:a7:d2:7e:9e:21:f3:18:82:ac:a6:0c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c21fac5e895e5b7ce66fe089ffd0b2f61550d21
Validity
Not Before: Jun 13 13:00:18 2025 GMT
Not After : Jun 14 13:00:18 2025 GMT
Subject: CN=fd04f1653e3c13772a7851d2e49686a55804e454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c4:3b:ce:0b:1c:f2:48:cf:f1:ac:d4:d6:af:
0c:55:d9:08:2f:27:d2:3e:f6:72:0e:36:87:63:ab:
a6:27:72:1b:88:e7:c8:21:38:14:8b:b5:5b:f3:b7:
d6:d6:25:9d:5d:ff:9f:2a:f3:0d:91:7d:3a:1a:18:
75:80:b5:30:93:75:15:52:0e:79:1f:c6:0e:35:07:
ff:53:44:6d:a2:68:40:95:79:34:0d:0b:0d:cf:c7:
d1:6d:28:6f:64:f8:19:c2:07:fb:7b:70:ba:16:47:
a4:12:bb:fd:fd:be:07:2d:21:4f:af:1c:54:d7:89:
81:9a:01:d8:96:4f:e6:e5:08:14:13:7b:0e:1a:8e:
55:f5:e1:05:c7:34:47:9a:ee:99:49:e1:61:01:e8:
4e:9b:e6:66:b9:65:ea:38:0f:4c:e4:b5:91:4a:b0:
3a:60:74:03:71:55:2c:53:87:63:a7:ab:cc:b0:2e:
05:52:26:c4:70:65:1a:96:62:ed:69:79:b5:30:74:
5e:26:0e:43:9c:4a:bd:bb:6b:92:35:ba:b2:7f:71:
7b:df:8f:37:85:65:f0:da:66:b8:45:b1:7b:77:a0:
e1:26:5b:0c:2f:94:ce:be:a7:bf:aa:0a:ca:7c:4a:
7e:8a:8d:2a:2d:89:e1:20:41:d1:b0:61:79:8a:3e:
b1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:04:F1:65:3E:3C:13:77:2A:78:51:D2:E4:96:86:A5:58:04:E4:54
X509v3 Authority Key Identifier:
keyid:3C:21:FA:C5:E8:95:E5:B7:CE:66:FE:08:9F:FD:0B:2F:61:55:0D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCH6xeiV5bfOZv4In_0LL2FVDSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/60b006-6b53-4f00-a488-485dd4ad54fb/1/PCH6xeiV5bfOZv4In_0LL2FVDSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ec:8c:44:03:f7:e5:58:e0:70:e8:03:db:2f:67:8c:62:f6:
ce:3a:c1:d9:64:ef:aa:f6:08:45:28:d0:9a:14:7d:ef:e9:26:
0b:ff:17:ba:d5:01:32:2c:92:68:31:1b:9b:d7:97:ad:11:01:
cc:e9:cc:fc:cc:3b:73:18:d5:82:f7:6f:e8:0f:03:c4:f5:f9:
a4:6b:d2:bf:47:76:cd:a2:10:5e:62:a6:87:bb:43:66:61:0f:
9e:9d:34:b1:2c:36:a1:23:7f:12:75:f0:df:2d:4c:a7:d6:ee:
9b:ba:62:8d:52:7d:28:ba:c0:bc:75:88:40:cd:6c:46:0d:1e:
71:c0:a4:55:f7:2a:ca:2d:c8:6b:ad:d1:93:e1:73:03:33:38:
b8:f3:2c:55:88:cb:a8:fb:a8:5c:9f:a4:11:dc:c7:c3:13:e7:
63:06:f5:cd:b6:bf:d6:ee:2a:dd:7f:d0:88:11:0f:4b:60:57:
fd:07:2c:b1:79:3d:4e:4f:76:6e:12:be:c5:4f:5a:8b:80:cb:
71:b7:04:fe:4c:b0:27:ac:92:40:e4:ef:ea:a7:6c:25:62:cb:
dc:42:a5:ac:32:5a:00:7b:e3:a9:d5:90:b5:6b:76:a6:64:b4:
19:9d:0c:ed:8f:fa:fc:46:c0:be:a9:9f:a6:ed:72:50:18:67:
4b:7d:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:28 2025 by rpki-client