Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: lD+xWzWkeTRztINBZrbldtKmXTrqEcSCsb3drLkPSC0=
Subject key identifier: 1F:92:58:04:97:C4:14:3A:12:27:B8:04:42:CE:CC:41:EF:24:75:8E
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 0199FFC8400D70552691867C777D0DB8E41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 1343
Signing time: Mon 20 Oct 2025 04:02:17 +0000
Manifest this update: Mon 20 Oct 2025 04:02:17 +0000
Manifest next update: Tue 21 Oct 2025 04:02:17 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: 34LIL5Dx8ABw2hMlReXY9CtyHL+4YaGQ7tq4GwlA3F8=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:40:0d:70:55:26:91:86:7c:77:7d:0d:b8:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Oct 20 04:02:17 2025 GMT
Not After : Oct 21 04:02:17 2025 GMT
Subject: CN=1f92580497c4143a1227b80442cecc41ef24758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:91:8f:88:90:cd:d9:67:ce:dc:ae:40:39:
82:08:dd:2c:a9:9a:ae:cf:fe:f8:d1:aa:81:3c:93:
3d:34:2f:59:ad:b6:bc:d3:b4:d2:09:7e:2b:38:d1:
94:81:90:e2:68:ba:31:43:fb:a4:3a:56:f9:a7:04:
80:f0:e7:cb:db:e1:1f:61:98:97:3a:ce:31:a9:e4:
e0:25:30:79:3e:70:d9:de:e3:17:64:fc:86:07:88:
03:cf:19:e2:c7:09:f7:e7:bd:f3:84:bc:24:41:34:
fd:47:76:91:d1:0b:a6:ee:1c:20:c5:d6:4f:40:0f:
43:7f:89:f5:16:5f:e4:0f:8a:8b:33:54:ab:c6:b6:
f1:aa:de:c0:ec:7b:9c:16:12:8d:3c:7d:73:f8:a1:
ec:72:42:35:84:37:d8:3f:fb:24:d3:7f:e8:ec:02:
48:d9:24:30:a5:98:5c:fa:f6:a7:c4:9d:82:a7:d0:
6e:ae:ab:4b:50:9e:d8:9d:f4:94:0a:f2:77:3c:93:
d5:b2:5e:8a:02:ea:d1:ad:2e:1e:56:a8:0a:8e:ae:
8c:9d:84:b7:1e:f9:78:38:e0:e2:b1:d2:77:d2:17:
87:24:2a:d3:a0:76:0b:51:6e:cf:99:ab:37:2c:ef:
ca:46:0c:b7:40:e0:de:37:40:6a:5c:3c:d3:41:ab:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:92:58:04:97:C4:14:3A:12:27:B8:04:42:CE:CC:41:EF:24:75:8E
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c4:c5:f8:8a:d5:7b:72:bf:81:e3:86:27:fb:d3:1d:2a:e8:
37:0c:b9:0e:1f:9f:d2:77:38:1d:3e:29:f8:bd:42:a3:a5:a4:
e2:db:ad:10:8c:9f:43:c2:96:71:15:b1:33:8a:df:8b:79:97:
c2:fe:5b:43:14:1c:dc:af:41:65:52:44:13:d9:2d:47:06:df:
9c:2f:4b:67:45:dc:54:b0:54:e2:5d:8e:b0:99:b6:da:09:34:
32:6c:9e:fa:e2:ba:37:12:0f:9c:45:f3:3c:d1:6f:fc:1a:9c:
a6:65:71:dd:23:e6:2b:73:ec:9c:32:1b:36:4d:5b:24:7e:8e:
fe:e0:fa:86:ca:c7:2e:41:5f:5f:79:a6:c0:ee:9f:ac:2a:30:
be:4c:b3:e5:d3:32:a6:be:63:8e:7f:43:43:c6:2e:42:d0:8c:
f8:6c:2b:36:be:12:f2:23:77:29:b0:84:3c:d0:0d:5c:58:8d:
db:ac:15:d3:8a:76:26:50:47:eb:64:c5:17:1b:4c:a4:87:c2:
91:d2:6d:60:37:ff:3d:11:01:d5:4a:e4:ae:82:f9:f1:2e:97:
ed:a0:42:47:91:85:59:62:b3:6f:89:ce:c7:51:eb:9d:69:21:
45:bc:bf:f5:fb:72:4d:b9:ac:d0:52:16:ae:4f:17:c7:35:b4:
44:e3:b4:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yEANcFUmkYZ8d30NuOQaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy
MjE0YjIwHhcNMjUxMDIwMDQwMjE3WhcNMjUxMDIxMDQwMjE3WjAzMTEwLwYDVQQD
EygxZjkyNTgwNDk3YzQxNDNhMTIyN2I4MDQ0MmNlY2M0MWVmMjQ3NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+2Rj4iQzdlnztyuQDmCCN0sqZqu
z/740aqBPJM9NC9Zrba807TSCX4rONGUgZDiaLoxQ/ukOlb5pwSA8OfL2+EfYZiX
Os4xqeTgJTB5PnDZ3uMXZPyGB4gDzxnixwn3573zhLwkQTT9R3aR0Qum7hwgxdZP
QA9Df4n1Fl/kD4qLM1Srxrbxqt7A7HucFhKNPH1z+KHsckI1hDfYP/sk03/o7AJI
2SQwpZhc+vanxJ2Cp9BurqtLUJ7YnfSUCvJ3PJPVsl6KAurRrS4eVqgKjq6MnYS3
Hvl4OODisdJ30heHJCrToHYLUW7Pmas3LO/KRgy3QODeN0BqXDzTQassUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+SWASXxBQ6Eie4BELOzEHvJHWOMB8GA1UdIwQY
MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt
ZmQ5OGZkNzBmMzRmLzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm
LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsTF+IrV
e3K/geOGJ/vTHSroNwy5Dh+f0nc4HT4p+L1Co6Wk4tutEIyfQ8KWcRWxM4rfi3mX
wv5bQxQc3K9BZVJEE9ktRwbfnC9LZ0XcVLBU4l2OsJm22gk0Mmye+uK6NxIPnEXz
PNFv/BqcpmVx3SPmK3PsnDIbNk1bJH6O/uD6hsrHLkFfX3mmwO6frCowvkyz5dMy
pr5jjn9DQ8YuQtCM+GwrNr4S8iN3KbCEPNANXFiN26wV04p2JlBH62TFFxtMpIfC
kdJtYDf/PREB1UrkroL58S6X7aBCR5GFWWKzb4nOx1HrnWkhRby/9ftyTbms0FIW
rk8XxzW0ROO0zw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:13 2025 by rpki-client