Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File: phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier: CxG3G+xmy8pnEXdcRN8PySeS7mE51En7vlJadj8vHW0=
Subject key identifier: AF:D8:26:4C:56:5E:E5:C2:F7:B3:13:40:AE:DE:EF:D6:F6:3F:2C:8B
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial: 01987BD2785B5C29BB82F02BD53D71A9EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 20:00:47 +0000
Manifest this update: Tue 05 Aug 2025 20:00:47 +0000
Manifest next update: Wed 06 Aug 2025 20:00:47 +0000
Files and hashes: 1: _6cfi2Dj44vxaZWzfEwd2jk1pu4.roa (hash: 0LoAOyQFdU27wEYvA4eRFUQBIfRX8L27NeM+jRnEJAQ=)
2: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (hash: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=)
3: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: OnKHE4T5U0dTT2A5IQ/HzcRAH7AGuJyCbxSAOFh+tlY=)
4: sZajNmManlPTaNoPcFuaAKck-nc.roa (hash: R4UFS0zdQGwYoD2q6eTRAVpHRYbKs3X1MYzT1lIbryU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:78:5b:5c:29:bb:82:f0:2b:d5:3d:71:a9:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
Validity
Not Before: Aug 5 20:00:47 2025 GMT
Not After : Aug 6 20:00:47 2025 GMT
Subject: CN=afd8264c565ee5c2f7b31340aedeefd6f63f2c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:9c:83:98:51:cf:9f:a7:2e:15:34:c6:7f:
32:97:17:c5:73:ba:eb:8a:96:06:d4:a0:82:bb:93:
6c:ec:df:57:23:65:2c:12:d8:17:c4:2a:1c:fb:33:
0c:67:4d:d2:e3:aa:41:83:95:1c:ff:24:18:d1:fb:
d2:26:97:c0:5c:88:8f:db:e3:4c:5e:b3:5c:40:de:
58:e4:64:10:7d:75:99:97:8c:64:6b:f4:36:7f:73:
e7:27:2c:7d:6d:06:e1:89:26:2a:da:9e:e5:c7:0b:
99:88:83:1d:a0:63:78:ac:af:bc:4e:a6:c7:fc:1b:
5c:25:8c:3c:b1:30:4b:72:60:61:26:a3:f6:49:92:
03:74:c0:72:ad:80:bb:b7:00:a9:8d:7d:80:ec:0e:
2b:f5:df:c2:d1:f3:75:15:a1:9b:65:f2:32:59:48:
85:0a:4f:e9:5a:11:d0:60:6b:b3:9a:15:4b:d6:0a:
94:ee:3a:40:85:84:53:33:6e:83:b3:54:d2:d3:7e:
ec:e3:a4:ab:b4:27:d9:49:07:7f:71:86:e4:47:e7:
57:ce:9a:f0:80:a6:7f:2e:b7:42:b8:0b:c2:88:39:
7d:97:e0:99:2a:18:a9:b4:3c:cc:0a:9e:f5:7c:8f:
93:14:99:bb:c2:75:b3:54:cd:fc:c1:9b:10:12:32:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D8:26:4C:56:5E:E5:C2:F7:B3:13:40:AE:DE:EF:D6:F6:3F:2C:8B
X509v3 Authority Key Identifier:
keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:76:e4:77:e6:4b:7f:9b:30:78:89:e8:18:2b:44:98:f1:0b:
90:9c:a4:dc:f4:65:c2:df:31:8f:f3:59:ab:25:9d:96:59:37:
c9:66:fd:e8:d8:ae:eb:b1:0f:56:c9:83:3f:a3:10:dd:68:13:
0f:46:66:19:63:24:b8:af:9e:bf:ff:7d:95:18:67:3a:ab:e4:
9b:55:ad:bd:69:8b:df:a9:5c:fa:b4:c6:8a:09:2f:78:cc:f3:
e8:fa:26:16:ac:fc:16:a5:09:ef:1f:17:a5:4c:ff:69:cc:d1:
22:81:45:ff:1c:c5:9b:77:2d:cf:5c:eb:91:6a:af:04:55:f7:
03:e9:53:db:da:c4:16:b1:15:b8:f5:fa:40:99:ea:1f:e2:a6:
86:6f:ea:b7:4b:6a:0d:11:0f:56:fb:55:ba:91:cc:40:64:96:
a7:77:96:30:b0:f3:1f:4e:c0:9c:b1:9c:14:43:9e:46:ea:b2:
e0:0f:ad:c2:0b:13:4d:2b:35:ea:2c:e6:4f:19:d3:99:ff:48:
88:64:ad:bd:0e:ed:dc:b4:4c:72:51:ef:a4:24:36:b5:aa:9a:
58:20:8d:e4:2c:62:d7:d7:af:0c:83:81:07:5e:06:af:02:09:
b8:3f:44:83:9b:36:20:78:56:a8:85:c9:80:50:1e:dd:f5:47:
09:b9:6a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh70nhbXCm7gvAr1T1xqeuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWFkYTYxMjAyNDEzY2Q4ZmNhMmY0OTc0MjUyN2FkMDIx
Zjk2NzYwHhcNMjUwODA1MjAwMDQ3WhcNMjUwODA2MjAwMDQ3WjAzMTEwLwYDVQQD
EyhhZmQ4MjY0YzU2NWVlNWMyZjdiMzEzNDBhZWRlZWZkNmY2M2YyYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+Wcg5hRz5+nLhU0xn8ylxfFc7rr
ipYG1KCCu5Ns7N9XI2UsEtgXxCoc+zMMZ03S46pBg5Uc/yQY0fvSJpfAXIiP2+NM
XrNcQN5Y5GQQfXWZl4xka/Q2f3PnJyx9bQbhiSYq2p7lxwuZiIMdoGN4rK+8TqbH
/BtcJYw8sTBLcmBhJqP2SZIDdMByrYC7twCpjX2A7A4r9d/C0fN1FaGbZfIyWUiF
Ck/pWhHQYGuzmhVL1gqU7jpAhYRTM26Ds1TS037s46SrtCfZSQd/cYbkR+dXzprw
gKZ/LrdCuAvCiDl9l+CZKhiptDzMCp71fI+TFJm7wnWzVM38wZsQEjKR4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/YJkxWXuXC97MTQK7e79b2PyyLMB8GA1UdIwQY
MBaAFKYa2mEgJBPNj8ovSXQlJ60CH5Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWIt
YWVlYzdhODU5YzU5LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWItYWVlYzdhODU5YzU5
LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHbkd+ZL
f5sweInoGCtEmPELkJyk3PRlwt8xj/NZqyWdllk3yWb96Niu67EPVsmDP6MQ3WgT
D0ZmGWMkuK+ev/99lRhnOqvkm1WtvWmL36lc+rTGigkveMzz6PomFqz8FqUJ7x8X
pUz/aczRIoFF/xzFm3ctz1zrkWqvBFX3A+lT29rEFrEVuPX6QJnqH+Kmhm/qt0tq
DREPVvtVupHMQGSWp3eWMLDzH07AnLGcFEOeRuqy4A+twgsTTSs16izmTxnTmf9I
iGStvQ7t3LRMclHvpCQ2taqaWCCN5Cxi19evDIOBB14GrwIJuD9Eg5s2IHhWqIXJ
gFAe3fVHCblq5A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:11 2025 by rpki-client