
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: 5DYXxN4IiIp/GibXo1BW+QbovmHx5wseVDFtt6tL8nQ=
Subject key identifier: 3B:45:9B:C7:6F:9E:5E:54:CA:4D:10:EB:D7:F5:B0:3A:24:E4:66:A5
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 01988168C24875A1FC30967CDC6E92EC4E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:03:02 +0000
Manifest this update: Wed 06 Aug 2025 22:03:02 +0000
Manifest next update: Thu 07 Aug 2025 22:03:02 +0000
Files and hashes: 1: 1UVKiNRMJ_HImWl4v8Xm_ov2alc.roa (hash: 5flJUckS677lE7riT489EDvVCL32yj3m5+tviIp0Aik=)
2: ZmD1TA5j_WUZpHewze6nukzZJsg.roa (hash: +71Vr/FTpakGGRIUTsx4iBEKymM4Qh918F7HPx6zt+Y=)
3: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: zG0a7X97slsrS/ULxM9cDtZ0Tr38ogjnt28HZBmhdjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:c2:48:75:a1:fc:30:96:7c:dc:6e:92:ec:4e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Aug 6 22:03:02 2025 GMT
Not After : Aug 7 22:03:02 2025 GMT
Subject: CN=3b459bc76f9e5e54ca4d10ebd7f5b03a24e466a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:56:a0:4d:8c:3d:b5:20:2d:29:b3:28:87:
08:e0:0b:25:01:f7:30:37:8a:66:2c:39:c1:a2:7e:
04:1c:29:09:c2:f4:1d:44:f2:1e:44:19:91:35:2c:
1b:a2:90:77:b8:54:ef:88:36:d6:bf:48:65:34:f4:
de:ec:e3:5f:75:5d:99:a3:b5:a9:d4:d3:aa:4d:af:
1c:4b:b5:46:67:f1:cd:00:2e:4a:3a:37:42:64:f6:
fd:83:a8:a5:28:06:c6:46:f1:96:b7:ee:de:26:42:
5a:0b:ba:85:af:55:da:c2:45:d8:55:fb:4d:16:74:
f8:c8:a7:13:d7:4f:79:47:a6:db:09:aa:ca:e1:94:
e0:44:e2:83:61:73:c4:9f:20:92:6e:92:b8:36:93:
d0:3a:a1:db:5b:ed:00:dd:51:a5:17:c5:9e:ef:34:
2e:4d:50:1e:91:15:1b:3f:8d:e9:be:05:d5:3c:b0:
d9:ee:6c:5f:f6:ad:da:63:93:ee:dc:3c:27:c7:eb:
37:ce:69:83:52:ea:ff:3f:c4:4a:ea:2c:c5:91:35:
1c:0e:a2:b8:9c:fa:07:e7:3a:ec:f0:32:6b:8f:33:
5e:2f:bd:2f:59:d5:e1:4c:fb:dc:cd:92:62:2e:0d:
9b:1a:10:6c:a5:5a:b2:3d:dc:5b:9a:26:7b:f8:5b:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:45:9B:C7:6F:9E:5E:54:CA:4D:10:EB:D7:F5:B0:3A:24:E4:66:A5
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6b:16:3d:32:b2:13:3a:a1:03:11:aa:c4:be:85:2c:19:f2:
bb:38:33:bf:5f:d0:95:0f:64:09:c2:20:c4:a8:e6:42:0b:8e:
5a:ae:b7:4f:23:0f:9f:3d:4d:05:99:d6:27:53:52:86:fa:c4:
0d:4b:6c:1c:c9:92:4e:92:8e:ef:7a:d2:ac:81:92:1e:13:2e:
41:7b:7f:83:33:b8:d3:64:67:52:23:18:8a:55:b3:c4:81:cf:
c7:50:db:b1:83:65:91:82:86:88:3b:17:d7:f0:e8:bb:17:89:
c3:f4:15:c7:0e:48:57:e7:a8:b8:39:b8:f9:8d:25:8e:b1:7c:
3a:2f:e7:7a:9a:2c:8d:67:f9:a4:5d:eb:e5:f0:48:12:c2:1a:
a7:fc:8e:b3:62:e0:de:cf:a9:7c:39:29:61:7e:61:34:58:e2:
ee:62:e9:3d:cb:39:b5:fe:97:cd:70:7e:25:7d:56:76:27:73:
b1:ac:38:52:d9:75:f0:38:17:e6:24:62:9d:ac:16:02:cb:3f:
5c:29:86:27:03:0f:72:40:fa:ed:0a:1a:42:2e:05:41:de:39:
e1:3c:01:c2:29:06:ec:84:88:8b:1c:73:7a:cf:c6:05:e2:d3:
cb:07:d9:2b:ec:97:ae:6a:18:be:9a:9a:55:0d:70:c3:cb:9b:
2e:f0:d1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaMJIdaH8MJZ83G6S7E5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl
OWYwNjMwHhcNMjUwODA2MjIwMzAyWhcNMjUwODA3MjIwMzAyWjAzMTEwLwYDVQQD
EygzYjQ1OWJjNzZmOWU1ZTU0Y2E0ZDEwZWJkN2Y1YjAzYTI0ZTQ2NmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGVWoE2MPbUgLSmzKIcI4AslAfcw
N4pmLDnBon4EHCkJwvQdRPIeRBmRNSwbopB3uFTviDbWv0hlNPTe7ONfdV2Zo7Wp
1NOqTa8cS7VGZ/HNAC5KOjdCZPb9g6ilKAbGRvGWt+7eJkJaC7qFr1XawkXYVftN
FnT4yKcT1095R6bbCarK4ZTgROKDYXPEnyCSbpK4NpPQOqHbW+0A3VGlF8We7zQu
TVAekRUbP43pvgXVPLDZ7mxf9q3aY5Pu3Dwnx+s3zmmDUur/P8RK6izFkTUcDqK4
nPoH5zrs8DJrjzNeL70vWdXhTPvczZJiLg2bGhBspVqyPdxbmiZ7+Fs9TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtFm8dvnl5Uyk0Q69f1sDok5GalMB8GA1UdIwQY
MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt
YjU2YmIwNjQ3ODY4LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4
LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGsWPTKy
EzqhAxGqxL6FLBnyuzgzv1/QlQ9kCcIgxKjmQguOWq63TyMPnz1NBZnWJ1NShvrE
DUtsHMmSTpKO73rSrIGSHhMuQXt/gzO402RnUiMYilWzxIHPx1DbsYNlkYKGiDsX
1/DouxeJw/QVxw5IV+eouDm4+Y0ljrF8Oi/neposjWf5pF3r5fBIEsIap/yOs2Lg
3s+pfDkpYX5hNFji7mLpPcs5tf6XzXB+JX1Wdidzsaw4Utl18DgX5iRinawWAss/
XCmGJwMPckD67QoaQi4FQd454TwBwikG7ISIixxzes/GBeLTywfZK+yXrmoYvpqa
VQ1ww8ubLvDRxA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:53 2025 by rpki-client