Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: cL8zouq/a8eOLl65Giyps7rAfb4sLCTLBLRL66rbYxk=
Subject key identifier: 00:0B:16:9B:46:82:BA:39:97:D5:AB:12:F1:56:36:7A:2B:F0:9E:89
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 01987ABFB70E46FEE341A89AB7AF4078F5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 013F
Signing time: Tue 05 Aug 2025 15:00:41 +0000
Manifest this update: Tue 05 Aug 2025 15:00:41 +0000
Manifest next update: Wed 06 Aug 2025 15:00:41 +0000
Files and hashes: 1: TOxCM6S_arlfToUA479zh5nkrJo.roa (hash: vJ1XssSgRtqMk/Uwgd5Thnwzm2ARorFtzVtt1LqNVUg=)
2: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: ZTfyjzjv+lkYe/jbAs/ZbJfOqGpIWYTHhxHzmegojuw=)
3: rEjgEhZzL4goWIA1kujfN_BwihE.roa (hash: j3AflFklIT5kR+h++zJX2Hgi1qkfo3rJgP91fSsoBso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:b7:0e:46:fe:e3:41:a8:9a:b7:af:40:78:f5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Aug 5 15:00:41 2025 GMT
Not After : Aug 6 15:00:41 2025 GMT
Subject: CN=000b169b4682ba3997d5ab12f156367a2bf09e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:83:0d:e4:0d:00:2c:3f:1f:b7:d4:91:ae:
6d:fc:8d:8e:67:61:73:c7:27:27:dc:72:95:a5:5a:
de:25:17:2b:48:47:c9:dc:1f:7e:94:84:e7:df:d3:
c8:e4:67:10:73:e0:b5:cc:85:16:29:55:bf:e0:15:
ca:e3:fe:b7:f4:6f:7e:ba:5d:76:9c:5f:3b:44:8a:
0c:85:ae:e7:ef:e9:16:44:20:f0:8c:3f:09:46:e8:
97:18:51:a3:52:b6:c1:6a:d8:5a:3b:37:c1:88:b8:
d7:80:07:dc:9d:78:a2:b7:82:b1:75:74:60:13:4a:
61:7b:9a:86:56:05:da:0f:41:7e:3e:d2:0c:7c:57:
a0:c3:9f:cd:82:a4:c6:c5:91:46:d9:1c:87:73:76:
be:52:90:04:6d:4f:1b:e0:a6:84:9c:74:33:ff:42:
48:d7:20:c7:ff:d5:b8:aa:b3:a7:92:a8:c5:35:97:
6c:e0:8b:ad:c2:4b:b8:a8:25:6c:cc:c4:81:6a:9d:
64:58:54:1b:d6:51:5c:6d:ca:d4:27:68:9a:34:d8:
66:0b:c2:7f:68:df:fe:c5:2f:8d:e7:32:52:c3:11:
3e:a1:ce:dd:06:78:92:3c:b2:74:b5:87:86:0b:e2:
85:76:9d:29:53:b3:82:8c:3d:1e:8d:da:bf:ca:d9:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0B:16:9B:46:82:BA:39:97:D5:AB:12:F1:56:36:7A:2B:F0:9E:89
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2e:c0:bc:f9:ed:63:62:25:7d:24:24:c4:16:79:e6:a0:13:
33:2b:af:f6:22:29:34:98:b7:9c:2d:57:3e:14:63:f6:24:61:
df:c9:1f:ec:37:fa:7d:47:3c:e0:06:9f:57:10:fd:dc:19:6c:
e6:f7:ee:71:4a:1c:9c:fe:70:03:8f:2f:c7:cd:74:60:b0:ea:
be:14:a7:4f:ab:f7:0e:41:21:7a:e4:07:bf:5a:4d:2b:29:d7:
58:73:e1:b9:3c:dc:d2:fb:99:94:eb:c2:91:30:31:26:6a:07:
ef:c8:36:35:64:70:24:d8:33:07:8b:3e:a8:b5:02:cc:0d:ad:
f7:97:a2:90:a5:26:d3:0f:6a:70:c5:eb:4b:35:74:c5:5e:46:
20:5c:32:3b:e4:b1:21:ec:fb:69:3d:e6:37:2b:89:3d:c9:81:
5d:db:ac:cf:89:98:63:0a:a3:d4:38:3e:dd:16:73:05:6a:eb:
54:b5:cd:14:8b:4e:d0:ea:52:65:c1:1c:1b:57:92:a3:b3:29:
d3:a3:4b:88:2d:10:93:07:e6:d9:18:aa:1b:b9:77:5c:ef:19:
12:f3:11:11:38:3d:b4:9c:a8:c7:25:c4:8c:f9:75:d4:32:7d:
d7:d8:f0:32:0e:d4:99:67:98:c5:24:dd:a8:53:9e:80:62:fb:
ba:83:75:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:41:55 2025 by rpki-client