Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier: EXd/nGPURepKHXlR3xFzUklu+j08mEbvX0VoJE+bvJc=
Subject key identifier: EE:A5:3A:26:EE:4C:96:86:F8:B6:47:19:55:C4:E8:CB:DC:61:C8:BE
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 0198D65F7B19DC18A264B6434FDE5C503FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number: 128D
Signing time: Sat 23 Aug 2025 10:00:38 +0000
Manifest this update: Sat 23 Aug 2025 10:00:38 +0000
Manifest next update: Sun 24 Aug 2025 10:00:38 +0000
Files and hashes: 1: fFbdm0OeWE1GYVnCMSWrkaX1IWg.roa (hash: H5NNOHLLRS0hsZTLRHxW4ce45JGvEraIddrEMS924Cg=)
2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: 0eMVTXDbUpnQDphUQQWl/zMLYrmB41qES0JxggK7EPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:7b:19:dc:18:a2:64:b6:43:4f:de:5c:50:3f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Aug 23 10:00:38 2025 GMT
Not After : Aug 24 10:00:38 2025 GMT
Subject: CN=eea53a26ee4c9686f8b6471955c4e8cbdc61c8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:63:50:f9:a7:fc:6c:55:7d:d8:2e:b3:79:
a4:c2:b3:f2:b5:95:81:67:6b:d6:72:19:76:b8:09:
9f:28:1b:aa:06:3c:b8:ab:02:ec:20:e4:83:e4:04:
84:9c:8a:e2:36:50:8f:42:50:06:4e:59:90:c6:0b:
b3:3d:ed:27:31:4d:2e:ee:91:26:12:77:e2:17:f2:
af:53:f1:8b:e3:91:4d:24:74:2f:cc:91:c3:80:5d:
d3:dd:e4:15:ef:30:a9:93:28:bc:bd:0a:fc:64:ab:
48:ba:42:3b:06:a3:54:6e:a5:5e:7d:58:f5:5d:62:
26:c0:71:15:95:31:e1:3f:12:33:41:56:e3:18:1c:
17:36:0b:94:e9:0d:cd:e2:be:14:18:9f:b7:40:37:
4a:d3:c8:b4:c7:b9:70:49:a2:86:20:2b:9e:1c:17:
c5:79:d0:c9:37:66:f4:0a:5b:0f:56:4b:6b:b2:a4:
fd:79:7a:0c:fe:27:75:05:fa:22:ad:0a:9a:6b:3e:
18:e3:fa:4d:09:1a:96:98:88:1d:3e:9f:60:b3:db:
cd:5c:01:81:5a:fc:bc:e0:94:86:59:73:3c:5e:d4:
55:79:ee:6d:f4:e4:b2:63:98:aa:f9:79:7f:25:3c:
87:30:1b:1f:2e:43:b2:f7:cf:aa:78:63:83:ac:15:
c0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:3A:26:EE:4C:96:86:F8:B6:47:19:55:C4:E8:CB:DC:61:C8:BE
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cd:a0:f9:66:6b:f1:7f:33:5e:86:00:e5:f3:69:d4:d3:2c:
c7:47:e2:f4:34:e2:1e:0b:34:48:e2:a0:cf:8f:e2:fc:88:28:
26:a2:6d:de:84:e0:b1:74:6f:8b:3b:3a:71:63:76:66:e9:8b:
d4:57:6a:28:05:61:a9:cc:ba:f7:e5:37:b7:aa:eb:75:4d:5f:
34:9d:1a:0e:35:05:c7:89:2f:e7:b1:5f:23:fd:9b:28:5a:fe:
68:da:95:06:69:b7:8a:96:bc:90:78:93:6a:e7:ca:eb:89:83:
8e:b7:51:03:62:e2:c3:03:06:0e:b3:b2:83:cc:36:b5:ae:39:
6b:b6:ca:a8:1a:7c:26:5c:43:01:03:5b:35:ad:78:c3:f4:84:
f1:41:45:a3:83:58:8b:b3:52:b5:4e:16:3a:b5:22:3a:86:24:
60:9d:20:96:73:a9:91:01:bb:2a:8a:da:9a:1b:08:2c:a5:5f:
f0:36:f9:bf:0e:57:71:84:ab:fe:fa:75:a6:f1:3d:d5:fa:6f:
52:74:60:f3:99:e8:09:2e:af:85:dd:30:d3:08:29:6a:f9:11:
03:64:18:1b:67:58:40:f2:b9:97:77:4d:10:c1:2e:03:c8:af:
27:ae:97:bb:b4:8e:84:28:5f:c4:3e:a0:ef:a7:3e:96:c6:d4:
5c:a4:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:23 2025 by rpki-client