Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: m2Dl1KMJkvjUlUMgBcmbWMgwDwtcqIteBTzMIL7vzYE=
Subject key identifier: 35:24:02:EE:3C:0D:FC:2C:28:BE:7F:FF:60:9C:EE:75:A3:EE:09:94
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 0197B6A103CE268D9B4B7CDBCBD8F2BDC649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 12D7
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: rcOnc1zHnE0FhJTZua1yv7NzsnHRF7NZwGzpqUAnH+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:03:ce:26:8d:9b:4b:7c:db:cb:d8:f2:bd:c6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=352402ee3c0dfc2c28be7fff609cee75a3ee0994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:52:c1:44:44:00:8b:6f:3d:b4:e5:c7:0f:
90:52:ef:eb:b6:ff:27:11:17:3e:d9:af:78:0c:cd:
cd:ec:4a:47:13:5b:f5:35:71:0c:ba:5d:04:33:8a:
3d:55:89:29:7b:0c:74:07:6a:ea:44:98:73:7e:17:
98:b8:5e:da:e9:1c:e5:52:d4:fe:15:d7:89:d9:bb:
50:3f:a4:f0:0f:5b:e3:7b:71:cd:7e:5f:1b:b2:fb:
41:73:d7:38:90:33:a6:1e:3c:c9:4d:c3:0a:b2:21:
12:91:c0:21:c5:ad:54:2c:ad:ef:d0:af:7d:90:fc:
04:a5:fa:62:aa:0a:13:7d:de:ef:f8:44:2d:76:39:
30:10:ad:f2:70:96:31:f3:26:5f:21:1e:10:fc:5a:
7a:50:d3:55:59:10:96:17:ab:e6:19:ba:f9:f6:f2:
76:b4:19:1a:ca:cb:be:4f:b5:2a:f8:80:49:6c:c0:
6f:be:9c:96:a0:0b:82:e1:be:02:b5:7c:98:30:ad:
e1:51:98:4d:83:6e:6e:bf:7d:57:44:48:32:5d:a8:
b5:26:f2:9a:e1:83:02:b3:11:62:54:0c:c6:70:07:
a5:93:22:3b:da:c8:a6:de:68:76:56:95:c4:ea:55:
82:c7:94:69:aa:89:f3:8b:cc:ea:02:07:bb:41:66:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:02:EE:3C:0D:FC:2C:28:BE:7F:FF:60:9C:EE:75:A3:EE:09:94
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:65:ec:20:79:65:ec:ed:40:27:fe:f5:f5:fa:59:e7:3e:d6:
f2:cb:80:cd:5a:df:21:b7:6b:61:fd:d4:d1:5c:e0:2b:46:48:
ab:43:83:81:4e:fd:e8:98:8a:e4:6c:77:66:db:38:ec:6f:0d:
f4:a2:70:f8:78:39:19:54:73:eb:92:b8:16:00:ec:bb:5f:f7:
ad:7d:31:08:b8:0c:f9:a2:f3:f8:c8:4c:a1:a7:b0:66:ff:7e:
79:df:06:79:93:3e:e4:11:d2:44:1d:ac:d6:09:7a:e5:3b:9a:
b3:d4:75:a6:29:9b:3d:17:34:c2:1e:24:8d:c8:19:00:53:36:
c1:7a:f2:8b:f0:1c:18:fc:d7:26:9b:e9:b2:e2:91:b5:f6:40:
43:71:e4:fe:6f:02:25:83:72:91:af:75:a1:51:60:e2:64:e5:
45:97:0f:83:56:4c:ac:6a:8b:62:c6:c1:0d:cd:f3:35:de:50:
76:a5:06:7b:a1:92:32:57:c6:e0:9c:16:44:4e:1a:05:a9:a2:
50:6c:be:80:a5:4e:75:b3:a8:e5:38:39:09:08:ce:31:86:ab:
87:47:ea:43:43:b8:8a:98:97:e7:b8:04:38:4a:27:c9:d1:d1:
97:e9:48:48:03:d6:13:3e:73:1a:7a:da:e1:d3:47:c5:38:35:
3f:d2:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:31 2025 by rpki-client