Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: u+tote/06i3Y8mhtyPJAHPhrydVpwhmKtyuAJHj7eks=
Subject key identifier: 5C:3A:DF:DC:E0:11:A4:37:84:93:F0:08:14:28:0E:41:E2:A6:B7:95
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 019A4D743D0081C21B65A9C2A2C770715E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:54 +0000
Manifest this update: Tue 04 Nov 2025 06:00:54 +0000
Manifest next update: Wed 05 Nov 2025 06:00:54 +0000
Files and hashes: 1: K8gb2IugzK8IgsCtvVgzoDUY6tM.roa (hash: wR8LR0jtRTOAWt2SjVhqd0hsllRe9a/OzBTCiGqDDfI=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: TfWqRp2glwO49v+Dcl2tmFjJG1eeOpzHW2s4pqEwkeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3d:00:81:c2:1b:65:a9:c2:a2:c7:70:71:5e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Nov 4 06:00:54 2025 GMT
Not After : Nov 5 06:00:54 2025 GMT
Subject: CN=5c3adfdce011a4378493f00814280e41e2a6b795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3f:49:4a:bc:2b:f9:43:3a:da:61:72:51:a5:
49:ef:c4:84:fe:aa:6d:83:11:47:5e:e1:33:0c:a5:
f7:c6:b3:6e:c5:60:42:3a:c6:84:7e:a2:c8:a8:88:
8b:8a:46:a0:1a:27:76:2a:bc:0c:64:e0:b5:3f:06:
fb:ea:cd:5c:e4:ce:fc:46:0d:1c:a3:5c:50:f0:0a:
29:d4:e5:8f:6c:50:e4:1e:e6:29:12:99:aa:a2:12:
b6:77:62:49:69:f6:dc:51:4a:2c:89:fa:3f:ab:a2:
6c:da:81:b8:ea:bb:18:74:c9:80:dd:9b:e8:e8:e1:
77:c0:6d:c7:97:88:30:c8:e1:30:59:6a:f0:ec:31:
04:8b:24:40:a8:31:a6:9f:9f:c7:5e:84:f8:ce:0a:
01:6b:f4:a6:93:9c:54:37:14:6c:1d:54:85:1c:c3:
31:bb:91:8a:23:28:85:21:08:9e:2c:d0:11:6d:86:
32:5d:3a:46:fc:b0:90:bc:27:b5:2f:c1:ea:f7:0b:
a4:84:00:b8:fb:8e:bf:66:b1:aa:1a:87:a5:a1:68:
6d:35:bb:9a:9a:eb:81:7f:83:65:5f:77:7d:e7:be:
b4:d4:d6:b7:7c:06:c7:7f:7d:39:65:ff:0e:50:58:
f1:1d:f4:3d:5a:22:b6:7c:75:56:08:c4:66:a1:aa:
4e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3A:DF:DC:E0:11:A4:37:84:93:F0:08:14:28:0E:41:E2:A6:B7:95
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a7:6c:d4:67:20:cf:24:ac:52:7a:33:14:14:55:ae:f2:b6:
a9:79:63:cd:86:0f:ae:bd:bb:0f:b7:6e:71:88:6a:b4:cf:17:
96:ed:55:17:cc:4c:07:ae:e2:ed:12:35:bb:4f:a3:6e:3c:60:
4a:97:28:a4:29:cf:db:8c:c3:d0:77:af:6e:54:c9:b4:b8:b3:
b3:e2:44:d4:a0:31:1c:e6:66:32:79:3c:eb:da:4c:58:43:e3:
9c:57:68:93:b3:a0:5f:20:bf:7c:83:f5:f4:3d:a8:d0:47:89:
49:0b:87:d5:54:6a:e6:27:ac:93:b8:81:b3:de:c2:09:7b:20:
da:e1:6c:22:3d:d8:fb:79:c1:7e:54:b6:e5:34:af:6e:30:d3:
41:21:8f:1d:5c:1b:e4:2a:d3:44:cb:f4:19:4b:33:be:98:35:
d4:ac:42:ea:c3:5a:d6:8f:92:29:58:d1:09:47:63:92:34:c8:
bb:58:19:02:26:4b:6d:d0:6d:dd:ad:d5:bf:2c:0f:6d:21:fd:
a6:cb:23:a3:34:d2:6c:8e:e7:49:97:d2:f5:41:f4:10:92:e8:
8e:df:f1:af:22:21:14:5f:61:eb:bb:87:ec:6b:1e:1e:2e:d5:
f4:33:24:be:14:b1:25:5c:b7:63:95:10:c3:f1:cc:be:68:07:
be:ec:26:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:06 2025 by rpki-client