Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: ce82XbRz3hae/FMAnFgAWxIvC+BSGV1OZVJX0bVBES8=
Subject key identifier: 97:51:5A:10:2A:96:29:17:52:30:6F:A8:28:D3:D0:B8:4C:1E:AD:DC
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 01988D6B3C883087A02A63F80A21F3D97C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 0E1B
Signing time: Sat 09 Aug 2025 06:01:11 +0000
Manifest this update: Sat 09 Aug 2025 06:01:11 +0000
Manifest next update: Sun 10 Aug 2025 06:01:11 +0000
Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: Mm2+hHJWCPBo1Exp8abrdaY8SV5hW6iNJPN34FH2CHI=)
3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:3c:88:30:87:a0:2a:63:f8:0a:21:f3:d9:7c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Aug 9 06:01:11 2025 GMT
Not After : Aug 10 06:01:11 2025 GMT
Subject: CN=97515a102a96291752306fa828d3d0b84c1eaddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:76:16:3f:c7:e1:39:e6:a7:e0:05:f9:cf:e3:
9e:0a:bb:dc:33:91:75:2c:03:36:53:69:cd:78:6c:
51:76:c9:bc:07:c6:55:47:b5:bd:8b:40:0c:5e:72:
9c:f8:44:b6:a3:4a:54:7f:8d:a5:e0:7a:bc:ae:04:
e6:b3:55:0f:73:0a:be:fc:1a:c8:5b:7e:8b:9f:e2:
1e:c4:ad:7f:ad:0b:16:f9:03:a5:39:04:0d:fe:3a:
04:5a:97:04:b9:fa:a2:fa:6c:21:dc:b7:75:08:49:
33:ad:58:0d:f1:6f:e7:74:7b:34:65:b7:06:c0:8c:
7a:a0:7f:78:9c:4c:5a:b3:79:91:62:84:99:b3:aa:
f9:c5:9b:73:70:0a:be:e1:bc:ab:75:9b:e2:8f:1e:
58:6b:b6:fd:c3:d2:ed:64:cd:44:fa:44:52:ca:82:
94:60:7c:7e:19:7d:db:c9:5a:b0:ad:d5:92:9c:15:
6d:00:d6:d7:6d:c0:17:fa:bd:35:e9:47:a7:6a:37:
af:86:33:5e:d1:47:7a:af:a5:c8:cb:79:c4:50:7f:
a0:1f:ad:21:92:e7:e4:0f:ca:69:80:37:01:d8:b5:
78:b7:0c:e0:7f:5a:c4:70:b6:f4:24:72:eb:99:22:
3e:ec:7d:5e:d5:8a:d2:87:84:a6:b7:56:47:4b:ad:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:5A:10:2A:96:29:17:52:30:6F:A8:28:D3:D0:B8:4C:1E:AD:DC
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d3:7d:b0:97:b4:97:91:dd:08:98:57:ef:67:1e:e2:36:57:
88:f8:37:0c:8f:54:b3:4d:11:65:3c:8c:1b:09:7a:5b:62:2c:
d0:2d:9d:d5:f7:5c:72:cd:a4:01:61:6c:97:0c:3e:5f:8a:81:
56:e7:cd:60:6e:d2:40:18:bf:96:dc:cd:bb:b5:fc:4f:16:6a:
0a:c2:3b:8f:da:8c:8d:91:13:37:7d:38:75:d9:7c:79:e7:d9:
d9:fd:9f:1a:5b:52:27:28:59:ab:6e:e0:e7:09:42:f6:9e:4d:
8f:23:a5:07:77:e0:7c:79:ae:79:41:7e:36:8f:ca:5c:73:b7:
9a:a2:73:c7:1d:89:56:26:44:6b:a3:86:5e:d8:90:a4:b9:26:
55:e2:32:37:f4:2e:94:b9:ad:66:d5:ab:c9:17:23:d4:fd:94:
e7:e3:31:b5:e1:51:40:8f:d9:35:72:0c:a5:8d:bc:42:7e:c4:
e5:92:4e:0f:7a:cf:fc:73:44:88:2f:09:4d:f9:df:17:6d:6d:
6e:3d:0f:4d:6c:c1:c6:5c:3c:65:80:bb:4d:55:84:96:e2:52:
2e:50:1f:42:39:b4:f8:75:1a:63:0b:55:d2:ee:02:7a:db:6e:
35:0f:24:c9:3d:82:cf:7f:e7:05:76:33:c4:04:21:ec:c8:c7:
19:6b:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:03 2025 by rpki-client