Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: cDXSUSa6xw7Q5RTwnrqaf4FXDhbdWp1wstxxbZZChVE=
Subject key identifier: CC:A4:3D:15:32:33:74:FF:DC:B9:52:51:6E:D2:97:00:19:1C:0A:58
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 0198D5F1BC4D8DA71209316AD7D0453F96F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: F5fV9qjaKD+t6dggzvS/y6V8MuIbKqEZIPcc9zJrYvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bc:4d:8d:a7:12:09:31:6a:d7:d0:45:3f:96:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=cca43d15323374ffdcb952516ed29700191c0a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:60:94:23:41:a5:37:ce:1d:a5:c5:9d:da:
99:44:5c:c4:97:c4:2d:b5:0d:56:3a:5e:7d:b0:f0:
9b:3c:8d:7e:40:51:e2:1c:c5:f0:e6:2b:0d:4f:1c:
78:21:9e:e6:2b:db:c6:61:74:c1:14:bd:1b:71:da:
90:a1:c5:a9:ea:f4:fe:dc:2d:f4:8c:57:f5:46:bc:
ed:85:4f:bb:a3:47:c2:e7:d7:07:16:c8:67:fe:a4:
22:0d:54:c8:59:f0:ae:38:e9:36:cf:0f:58:31:46:
ca:57:47:de:80:97:3d:22:c6:a1:5b:9b:35:36:a3:
b9:f8:87:4c:41:08:d1:19:75:63:fd:7f:9e:2e:79:
4c:ca:9c:9d:64:b4:c7:1e:34:16:f9:7d:61:10:4c:
f1:62:39:73:62:cc:53:23:20:86:83:b4:f5:84:e3:
c7:4a:08:a1:6a:5c:81:0f:4c:a0:ae:4a:67:97:56:
03:42:9e:ac:8c:5d:b6:bc:04:09:b0:73:31:f5:93:
a6:31:23:a8:37:c0:d6:d5:9d:f4:52:49:cf:cf:d0:
3f:15:0e:e7:8c:83:28:3a:47:28:70:5e:7b:b7:69:
8f:20:fe:93:63:25:d2:e1:c9:d8:00:a0:bc:7e:63:
a1:33:e7:c4:9a:1a:91:19:61:d0:08:d5:71:4c:89:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A4:3D:15:32:33:74:FF:DC:B9:52:51:6E:D2:97:00:19:1C:0A:58
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:6c:7d:01:7b:80:31:92:7f:aa:1d:57:9a:f6:16:a3:c3:74:
76:58:fd:6a:56:f6:39:fa:63:a1:18:5b:2a:9f:03:98:e7:25:
7b:1f:c2:b5:ce:1c:b7:c1:aa:a5:31:1c:e5:8d:3c:b2:11:5b:
1e:33:aa:3e:6d:79:2b:6d:7c:bc:43:36:40:77:5c:eb:a0:6f:
b4:7c:ef:46:5c:a4:5f:31:1d:36:82:57:b7:bd:88:81:19:93:
15:eb:7c:0d:41:bc:42:fc:8d:dc:47:15:2f:a2:d2:f8:3f:b1:
42:49:d5:8c:9d:a1:fa:b6:f0:05:de:35:7d:43:7e:b5:66:a1:
45:aa:64:c9:db:0f:1f:9d:29:75:ea:ee:e5:15:5e:e9:62:55:
03:56:fc:ec:58:84:f5:dc:f0:9a:33:75:cb:2a:7b:71:0a:d4:
f3:a8:e9:2a:7a:91:60:e9:f8:2e:ae:05:5e:63:68:14:08:fc:
c9:5b:9c:fe:56:f0:92:aa:7e:f9:c3:27:d2:56:06:b3:c6:ff:
b6:a7:63:18:54:86:c9:00:3c:03:20:a3:5b:80:80:1b:60:31:
8f:c6:d0:75:cc:0f:88:3e:78:32:b5:b5:de:5c:63:15:80:20:
1f:65:75:52:d1:5c:2e:92:66:80:c4:6e:4f:c5:16:79:29:a8:
35:d3:43:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:12 2025 by rpki-client