Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier: R2Vg+bIKgB0SYvZsNT72YRbwuD4oHUP4k9Bl1/B6Kig=
Subject key identifier: A5:D7:45:28:CC:2F:B4:77:DC:C9:18:C2:F7:BE:26:51:FD:4D:A3:E4
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 019894B6A2F6B3ADCC306E3FF127C5319994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number: 126B
Signing time: Sun 10 Aug 2025 16:00:53 +0000
Manifest this update: Sun 10 Aug 2025 16:00:53 +0000
Manifest next update: Mon 11 Aug 2025 16:00:53 +0000
Files and hashes: 1: fFbdm0OeWE1GYVnCMSWrkaX1IWg.roa (hash: H5NNOHLLRS0hsZTLRHxW4ce45JGvEraIddrEMS924Cg=)
2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: 3vx7gMKeqIetdF57I7faoET9Rng0aUXGNn2ZL8NF1l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:a2:f6:b3:ad:cc:30:6e:3f:f1:27:c5:31:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Aug 10 16:00:53 2025 GMT
Not After : Aug 11 16:00:53 2025 GMT
Subject: CN=a5d74528cc2fb477dcc918c2f7be2651fd4da3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:67:99:34:37:fd:9c:75:cc:2a:b0:08:f2:
d0:d4:89:14:54:31:14:64:04:91:71:df:fc:77:7e:
ef:82:a6:b5:1a:65:7a:37:29:ab:88:83:ff:5e:b1:
93:5f:27:52:97:f6:15:aa:d6:d3:8f:99:e9:58:23:
5d:b5:0c:cf:0d:05:b1:56:0b:15:1b:a4:06:30:f6:
06:fb:03:5a:3d:04:22:1c:9b:dc:cf:4e:9e:f5:f9:
d3:e5:b1:ff:75:bb:a2:f7:6a:52:72:29:9e:32:df:
09:87:03:76:a6:a4:af:9a:78:72:fa:34:5f:e6:4d:
4b:cb:5a:e3:c1:13:d4:af:fb:f2:c3:8d:eb:57:31:
17:74:b2:89:d7:99:d3:49:92:9d:f0:c4:a3:fa:3c:
26:85:20:1c:fc:b9:9b:86:ac:57:c7:e4:fd:eb:44:
60:2d:99:9e:02:49:0b:24:cc:cf:f9:70:cd:08:fe:
7c:9f:09:60:0e:c1:ab:f8:6d:c2:c8:f8:fe:95:04:
ff:14:43:0e:ca:7c:10:b3:00:02:6d:ee:ed:13:27:
54:3c:33:b4:5c:aa:23:9a:1a:8e:41:bd:4c:6a:cd:
89:80:d8:dc:c3:be:80:05:e4:2b:f1:d8:18:1b:9b:
9f:ca:55:46:85:75:5b:03:cc:15:b5:7e:4d:6b:60:
1e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D7:45:28:CC:2F:B4:77:DC:C9:18:C2:F7:BE:26:51:FD:4D:A3:E4
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:0a:2f:4c:d0:50:c3:2b:44:e4:cd:69:cb:85:10:14:39:
e4:92:71:93:7d:28:2b:11:1f:ce:81:51:b9:01:f1:bc:db:e3:
a5:bf:75:8c:7a:2a:5f:70:e3:1e:36:d0:d9:b9:f2:3e:8d:77:
2c:34:e9:c6:71:28:fe:d2:de:c0:b3:ba:2b:40:bc:e5:16:c1:
f5:2c:2c:0f:62:a2:13:d3:92:6e:72:ba:6f:d3:10:50:ab:a2:
4d:72:1a:67:aa:59:06:fa:7b:ce:be:ba:f4:ae:ce:9c:0b:1d:
b5:d1:37:71:77:5f:fc:3a:6c:d4:14:e3:13:a5:d7:3c:b0:02:
76:ab:9c:32:b1:d7:e3:e7:ab:8f:2b:c0:1e:a8:10:3b:5e:d7:
37:63:6b:cb:80:f3:20:cc:55:1c:dc:57:66:73:ef:88:ff:4a:
23:d5:6b:f4:59:42:5b:43:8f:9f:f9:77:cf:64:8c:43:bb:f9:
23:fa:93:47:4a:0e:ae:3f:08:de:57:17:56:12:d3:16:2b:9d:
6c:d2:c0:25:a5:ad:75:e3:f1:92:e8:70:f8:b6:64:c3:c8:1a:
2f:78:33:28:df:66:b5:54:16:08:88:26:e8:3a:7b:78:4b:2f:
45:96:10:5d:5c:09:3d:f7:34:4e:f9:84:bd:03:57:67:6c:71:
4e:7b:2f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:10 2025 by rpki-client