Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File: pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier: Q+iunR1uDlhnDkwnRuRJ+5aUE9WzgVy6yUC229FcHQc=
Subject key identifier: EA:61:A4:7A:01:65:E9:36:BC:C6:44:7D:6D:48:51:92:51:CD:FD:E2
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer: /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial: 0197C237E2B3FEA59A1E579CACA30E0ED210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number: 11FE
Signing time: Mon 30 Jun 2025 19:02:11 +0000
Manifest this update: Mon 30 Jun 2025 19:02:11 +0000
Manifest next update: Tue 01 Jul 2025 19:02:11 +0000
Files and hashes: 1: fFbdm0OeWE1GYVnCMSWrkaX1IWg.roa (hash: H5NNOHLLRS0hsZTLRHxW4ce45JGvEraIddrEMS924Cg=)
2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: eNx+tKA/WZf7Z+C5PIacHT8Tsa78WEISRKHdRTpbHXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:e2:b3:fe:a5:9a:1e:57:9c:ac:a3:0e:0e:d2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Validity
Not Before: Jun 30 19:02:11 2025 GMT
Not After : Jul 1 19:02:11 2025 GMT
Subject: CN=ea61a47a0165e936bcc6447d6d48519251cdfde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:0d:e0:3e:f4:20:da:0b:38:e4:c7:1f:26:
5a:a8:9d:83:96:5e:aa:fe:e6:4c:c9:c7:09:d4:00:
e1:0b:7d:bc:e0:6a:42:83:fb:b6:d5:80:dc:ee:01:
a4:bb:25:46:02:37:82:e8:13:8b:08:7f:d1:d6:a5:
8c:f5:56:b7:2e:cd:4e:6b:5a:01:47:46:fc:85:05:
c0:aa:9f:2a:c1:3c:de:ec:66:ae:35:a4:08:fc:49:
ed:3c:d2:66:ba:c7:ce:22:60:d2:9a:c2:21:33:3f:
d3:c8:d7:0e:24:c5:4b:0e:b7:e1:8c:80:fc:42:0d:
6d:8b:ba:8f:45:68:4c:39:18:a2:b7:41:35:67:36:
56:e1:b7:0a:69:f5:eb:02:53:85:84:1d:ca:54:83:
63:37:63:fe:f5:27:34:99:4f:be:c7:7e:59:53:a7:
30:7b:5b:51:68:ab:d8:61:c4:e9:d2:68:6e:27:6e:
b5:c9:a0:ad:ad:ba:b0:8d:ec:7f:a9:89:33:a7:0e:
45:0a:66:58:06:ee:0b:7d:eb:fe:39:c5:b3:46:8a:
96:5a:49:c3:84:7b:98:78:3d:39:86:74:15:0e:1c:
b2:82:32:b2:15:d9:fc:11:24:96:ce:4b:02:8b:32:
e6:8f:d1:1b:d1:f3:ed:9c:e1:b3:31:ad:79:a2:4c:
38:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:61:A4:7A:01:65:E9:36:BC:C6:44:7D:6D:48:51:92:51:CD:FD:E2
X509v3 Authority Key Identifier:
keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:10:ca:04:64:0b:66:5c:66:0d:dd:d7:be:47:0e:0b:1e:97:
45:c6:43:bc:e7:d4:6e:0f:93:16:a9:20:af:fb:ba:a2:84:1e:
a3:a2:73:be:3a:2a:ad:06:f7:27:38:17:db:26:c2:2c:98:3f:
cd:be:db:96:3d:f6:d2:3c:5f:50:22:6f:07:bf:70:23:f5:6b:
3f:df:01:bf:0b:21:22:b9:f0:55:61:df:79:6e:45:b8:12:cf:
66:51:89:9d:d4:8d:29:68:64:ec:45:e1:44:a0:9c:2e:39:14:
94:81:18:b9:55:e6:b2:aa:74:ff:91:af:51:3b:cc:dd:c8:83:
f1:4f:a0:7c:a6:fe:4f:cd:99:cd:ec:f0:5e:c9:a5:0d:76:81:
03:c4:3b:00:b2:2c:f7:84:9a:67:68:aa:1d:4e:a2:19:16:69:
bc:96:3e:0e:d9:68:78:01:ca:0c:30:39:33:3a:a0:92:e3:5f:
d7:fd:c9:7a:8e:0f:ea:ed:a0:6f:27:06:8c:4f:9e:ee:3b:a6:
1e:a6:cf:ad:52:aa:1d:f4:fb:6e:76:24:9b:ab:7a:61:06:13:
24:ce:4e:27:28:67:f1:58:32:02:09:43:71:1e:2a:45:d3:18:
97:4f:b2:9e:19:3b:9a:ac:c3:26:93:e8:cd:e2:21:4e:f2:a8:
30:84:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:52:04 2025 by rpki-client