Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: NGQMSUKz0WyUMl8J0UTKTs3wyc5rc0H4f2e6ohj+X24=
Subject key identifier: 9E:E1:67:61:88:CE:6A:71:38:C0:1D:F8:CD:9F:B6:E0:5E:DA:12:CA
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 0199FC8F9131570F7672DE8CC88FA776DF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0B5A
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: c8fMgkOHQuovjTAZ+TB7coIm36EZyrp8+ILdmOF3Kl4=)
2: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (hash: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:91:31:57:0f:76:72:de:8c:c8:8f:a7:76:df:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=9ee1676188ce6a7138c01df8cd9fb6e05eda12ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:02:94:df:8c:9d:22:cb:6d:17:3a:6a:7c:
5a:ab:e8:69:dd:40:3d:16:39:61:20:5f:05:7b:57:
22:aa:80:ed:80:bf:ff:01:7e:a5:b8:d6:08:54:1a:
8c:f9:0d:df:d8:ef:98:0b:81:59:3e:56:24:40:09:
6e:a2:7e:c2:04:ee:ba:26:24:47:0f:03:31:a2:a9:
6f:a6:61:a7:ca:d5:9d:84:ed:81:ec:3e:da:39:6b:
9d:7c:0b:50:ce:c8:92:2b:6b:9e:43:68:cd:5b:96:
3f:24:9a:c7:8c:16:87:d2:ef:98:55:db:58:e5:63:
b3:b0:a8:cb:fd:29:13:d0:8c:e9:dc:c0:38:7a:4c:
34:9c:2d:c1:5c:20:47:f2:d9:ff:02:34:b8:36:60:
59:b4:85:5d:6e:2c:39:b8:7e:01:72:f1:04:74:94:
89:87:94:c1:92:d4:43:16:55:e1:db:7e:bc:7b:fb:
51:c6:81:b4:35:f7:46:47:14:d7:5a:3a:ed:7e:58:
c9:4f:b7:6a:06:fa:cc:0a:45:b6:44:ef:bf:10:20:
12:15:29:27:3d:1e:89:7f:b3:40:c1:17:fb:55:b0:
6e:9f:18:a2:e6:ec:fc:27:02:14:fe:79:9c:70:c1:
d0:c6:98:db:e8:3a:18:35:83:c9:71:88:6d:6e:32:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E1:67:61:88:CE:6A:71:38:C0:1D:F8:CD:9F:B6:E0:5E:DA:12:CA
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:6b:8b:25:06:0c:4a:23:d0:d1:02:f2:49:8a:20:c2:25:
91:7a:60:74:92:41:37:af:8d:8f:fe:54:81:66:3c:7d:9e:f6:
4a:16:75:59:3e:fd:40:29:73:b7:7e:11:6e:4e:a7:cc:de:09:
ff:bd:17:28:2b:ad:8e:f9:7c:f3:fb:3a:5e:06:7f:44:a0:a7:
93:15:a5:96:83:9b:cf:7d:9e:ea:26:ce:05:2e:3c:67:7f:ba:
1f:ab:62:23:b0:3d:17:89:8d:ac:84:28:e4:c5:1e:92:d4:10:
47:ed:e0:17:64:c3:de:de:ee:74:9f:5d:4e:73:f7:4f:2d:dc:
57:75:fa:e7:c5:dd:44:3b:65:7f:87:25:a0:9d:38:e4:78:9c:
94:0c:a9:30:9d:f2:f7:10:fd:61:4c:e4:48:c3:24:7a:a1:c0:
76:d1:39:c0:4e:ba:bd:fd:3b:79:06:ac:0d:40:03:33:06:72:
ed:00:73:77:4c:58:cd:91:d9:0d:ee:d0:06:5b:46:d5:b7:05:
31:12:b3:8e:e9:28:c7:0f:dd:1b:39:53:0c:94:01:ca:4b:d8:
de:ba:11:49:07:8d:2e:c3:2f:5c:dd:f1:2e:74:d7:11:23:4e:
0b:b6:aa:57:ac:54:91:d0:e4:61:3e:05:bc:45:df:be:5b:aa:
6e:bf:ec:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5ExVw92ct6MyI+ndt8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNzc1ZTFiOWZiMGFjOTNkNTYzYmE4ZTk3MDg4NGRhNTdi
NmUxOTcwHhcNMjUxMDE5MTMwMTMxWhcNMjUxMDIwMTMwMTMxWjAzMTEwLwYDVQQD
Eyg5ZWUxNjc2MTg4Y2U2YTcxMzhjMDFkZjhjZDlmYjZlMDVlZGExMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAAClN+MnSLLbRc6anxaq+hp3UA9
FjlhIF8Fe1ciqoDtgL//AX6luNYIVBqM+Q3f2O+YC4FZPlYkQAluon7CBO66JiRH
DwMxoqlvpmGnytWdhO2B7D7aOWudfAtQzsiSK2ueQ2jNW5Y/JJrHjBaH0u+YVdtY
5WOzsKjL/SkT0Izp3MA4ekw0nC3BXCBH8tn/AjS4NmBZtIVdbiw5uH4BcvEEdJSJ
h5TBktRDFlXh2368e/tRxoG0NfdGRxTXWjrtfljJT7dqBvrMCkW2RO+/ECASFSkn
PR6Jf7NAwRf7VbBunxii5uz8JwIU/nmccMHQxpjb6DoYNYPJcYhtbjIL5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7hZ2GIzmpxOMAd+M2ftuBe2hLKMB8GA1UdIwQY
MBaAFDx3XhufsKyT1WO6jpcIhNpXtuGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEt
NGU1Njg2YmU2YjgyLzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMWRiYjctYmNmZC00YTYxLWE2NDEtNGU1Njg2YmU2Yjgy
LzEvUEhkZUc1LXdySlBWWTdxT2x3aUUybGUyNFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCZriyUG
DEoj0NEC8kmKIMIlkXpgdJJBN6+Nj/5UgWY8fZ72ShZ1WT79QClzt34Rbk6nzN4J
/70XKCutjvl88/s6XgZ/RKCnkxWlloObz32e6ibOBS48Z3+6H6tiI7A9F4mNrIQo
5MUektQQR+3gF2TD3t7udJ9dTnP3Ty3cV3X658XdRDtlf4cloJ045HiclAypMJ3y
9xD9YUzkSMMkeqHAdtE5wE66vf07eQasDUADMwZy7QBzd0xYzZHZDe7QBltG1bcF
MRKzjukoxw/dGzlTDJQBykvY3roRSQeNLsMvXN3xLnTXESNOC7aqV6xUkdDkYT4F
vEXfvluqbr/slg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:47 2025 by rpki-client