Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: rzrFsh4gjj1K/VNG0FuL5bXz0e+6NfkaZLMZ/tF+luw=
Subject key identifier: B5:F8:F4:81:F1:FE:22:4C:03:9F:AA:4C:CE:22:54:2B:9F:F4:40:FB
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 0199FB7CBF297B477AB182409A7586247A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: vfsSp2CgvAdzsAA73Ackd4vTvxha2hW+PHR7Ho+YQEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bf:29:7b:47:7a:b1:82:40:9a:75:86:24:7a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=b5f8f481f1fe224c039faa4cce22542b9ff440fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:53:bb:e7:13:98:b9:52:b7:96:f6:46:6d:
b4:0d:f4:72:eb:c3:68:39:a6:92:d6:95:f8:37:8f:
fb:7c:88:a9:fe:da:27:77:04:7d:3f:b2:5f:7d:9e:
8a:ad:a1:44:37:9d:06:e0:37:31:0c:48:05:c2:a5:
63:79:92:4c:7a:cf:0f:fe:3a:10:7b:53:76:15:0f:
2a:0a:d6:9d:c9:97:58:58:97:39:90:e1:e1:52:b2:
16:8c:87:4b:e1:a9:85:9e:b1:8c:30:d6:83:b5:b9:
12:32:eb:a9:ee:b9:1e:ed:01:01:34:13:ca:12:a4:
45:f2:12:8b:cc:03:3a:c7:ca:db:98:2c:7e:84:57:
b2:bc:43:25:21:d6:79:78:bb:c2:de:e9:39:55:e7:
1c:56:a2:fb:70:26:e9:bb:84:c5:4e:69:27:ff:ad:
d2:b8:4d:53:d8:bb:d2:33:be:5c:2c:80:a6:e4:8e:
1f:f8:b3:f1:d8:3b:5c:ae:52:b8:10:13:5c:bf:50:
f0:5d:2c:c2:f0:bf:0c:14:99:b9:8c:a4:78:1f:81:
f2:37:e8:ed:2e:6e:3e:cc:07:81:12:8d:87:8f:e9:
56:56:c3:24:e5:e9:a6:02:12:00:16:d0:f9:99:a6:
e3:3e:89:82:72:35:97:d3:d7:98:42:65:c5:fd:08:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:F4:81:F1:FE:22:4C:03:9F:AA:4C:CE:22:54:2B:9F:F4:40:FB
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:48:38:fb:ab:b1:97:e8:2f:b3:92:74:22:a1:c9:64:c2:87:
9c:e7:54:0e:ff:a3:c2:47:fd:46:68:6b:14:54:dd:7a:d0:92:
d6:31:e1:2e:03:32:7a:3d:da:af:19:a1:66:79:32:fb:5e:05:
02:8d:23:bf:39:6d:21:b4:f5:dd:50:aa:ad:43:c5:c5:cb:ce:
8b:f6:7b:ea:d4:66:75:0a:d9:f8:11:ae:64:a2:3e:77:cf:0e:
11:70:c5:a5:64:2b:52:42:64:c3:d3:80:55:27:c9:83:d1:2d:
a8:f5:58:c6:20:34:0d:64:e2:ec:a4:88:a7:36:7c:69:4a:7b:
42:43:52:e2:eb:46:53:b2:7e:d1:4b:f2:5a:f0:a7:64:d2:41:
87:81:86:8a:b9:bb:2c:9b:ad:26:10:08:e8:d2:8d:45:db:55:
8b:68:b8:89:09:ea:f6:b7:a5:59:de:b8:02:90:d1:3d:cc:0d:
97:ea:1d:67:0a:fa:31:5c:62:b4:de:0d:c3:06:3b:ef:de:30:
0a:43:d4:fe:96:f7:f1:0e:cc:4e:b8:ef:e2:34:4f:c2:8f:70:
1f:73:71:71:d7:ff:f6:59:83:8e:b1:06:75:cc:bb:90:ed:2e:
0b:5d:62:c7:11:e3:2e:22:51:55:3e:b7:78:2b:88:cc:23:fb:
0f:ff:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:56 2025 by rpki-client