Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: W+1aKtUIJ7pIABAA2cP1wlBctOOA2KZfUmR1OjG/2Yw=
Subject key identifier: 40:9D:87:66:C6:4B:0A:16:B0:74:FE:A5:3C:92:D7:56:4D:9D:29:97
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 019A54885012BB3D0D3238B405382968D376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 0236
Signing time: Wed 05 Nov 2025 15:00:10 +0000
Manifest this update: Wed 05 Nov 2025 15:00:10 +0000
Manifest next update: Thu 06 Nov 2025 15:00:10 +0000
Files and hashes: 1: TOxCM6S_arlfToUA479zh5nkrJo.roa (hash: vJ1XssSgRtqMk/Uwgd5Thnwzm2ARorFtzVtt1LqNVUg=)
2: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: MlAtJgFXw9kQ4kJgVK5/wlOwnlLmGCpthdOcn3li138=)
3: vnrJw0_RXF_3eNlI4J759GvRvbQ.roa (hash: Eb6f4bJUmWLqH0E5jlnZq5oby6oYj5i5BTlzMbxWrPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:88:50:12:bb:3d:0d:32:38:b4:05:38:29:68:d3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Nov 5 15:00:10 2025 GMT
Not After : Nov 6 15:00:10 2025 GMT
Subject: CN=409d8766c64b0a16b074fea53c92d7564d9d2997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:d9:d2:08:1e:72:89:1a:41:f0:ab:9a:a7:
7a:aa:cf:33:f8:d0:b7:f9:1d:5e:d5:f7:96:0b:72:
3d:ef:46:5e:1c:3b:7d:d8:7d:18:6f:69:ea:b8:a8:
8d:89:08:1d:0e:69:3f:7e:80:11:87:6b:80:6c:19:
b6:e2:bc:81:fd:8b:16:a8:03:31:35:3e:b3:e6:92:
05:54:69:49:23:eb:37:9b:e8:08:eb:7b:ec:18:16:
d1:3d:55:24:63:2c:39:53:a1:31:14:09:74:d2:2f:
f9:2e:03:31:d0:a0:27:9d:84:35:bf:9b:57:b1:04:
71:77:38:31:12:04:03:e2:00:11:e2:df:61:d4:e5:
fb:4d:c3:b8:15:91:89:f9:ad:4c:77:01:12:d5:d7:
8f:f7:d8:bc:12:0c:69:65:ac:21:7e:f9:70:e1:7c:
66:3f:2a:fe:f2:c1:71:53:eb:c7:9e:d6:6a:22:c0:
de:8d:9b:3d:fb:e2:47:0a:ce:75:9f:02:fa:4a:62:
45:1c:9c:d2:b3:7e:ea:cb:ad:bf:2f:38:cd:0d:50:
16:86:2f:1d:82:e9:ed:a8:e7:36:13:61:a4:a4:d5:
5e:61:85:0d:af:cd:1c:a4:ce:6d:67:47:d6:a6:42:
06:42:16:c4:0c:4d:a5:a5:24:68:fb:c3:b4:df:69:
35:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9D:87:66:C6:4B:0A:16:B0:74:FE:A5:3C:92:D7:56:4D:9D:29:97
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:82:18:91:75:66:06:f0:01:76:64:1b:f6:e8:bf:8d:23:79:
e9:1a:77:e0:ff:87:54:11:24:c6:63:ae:4f:75:6f:ed:f5:51:
85:41:2f:bf:f3:84:50:16:36:e5:0e:61:19:98:f4:8b:16:23:
7c:73:49:d9:b8:07:ea:4c:d9:db:b3:81:8d:de:d8:ff:89:db:
e8:d0:ce:31:9e:dc:78:55:0e:dd:ab:54:65:23:2f:4d:7f:fb:
60:4b:f3:38:41:ab:b6:3e:b9:4b:72:3c:6a:c2:a7:ee:a7:fe:
e4:b0:bc:25:c9:1c:af:9c:88:96:9d:f6:c2:ee:0d:6c:6f:76:
1a:33:05:69:f8:9c:26:bb:83:27:c6:f8:5a:d0:cc:be:bd:48:
42:67:a0:eb:e5:f0:9d:2d:70:98:a1:dc:b3:75:14:87:3c:e4:
75:ce:7c:05:52:48:46:d2:e5:c8:bf:bf:b4:19:57:0c:f8:f1:
71:59:31:8d:a7:ed:fe:54:43:b1:6d:23:5f:9c:3d:f0:65:74:
a3:2c:0c:44:57:85:44:1b:e7:92:46:8e:4d:89:c1:32:7b:d7:
5c:9a:88:38:3e:b5:cf:95:e4:90:64:ab:ee:04:89:35:2e:c0:
8a:11:3f:d2:75:df:5a:9c:29:35:1f:0e:40:96:f2:33:40:83:
9f:2d:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:36 2025 by rpki-client