Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: 1m4gfNKgdY9LUtTwwCIqK78NCZQdOZ2duvt21rZzdFM=
Subject key identifier: A5:09:9C:3F:F7:90:CB:AE:B5:AC:AF:9E:5D:87:27:22:B1:42:A5:2E
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 0197B5C51565A8BBAAD50EC558FA23E2198C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0DC9
Signing time: Sat 28 Jun 2025 09:01:21 +0000
Manifest this update: Sat 28 Jun 2025 09:01:21 +0000
Manifest next update: Sun 29 Jun 2025 09:01:21 +0000
Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=)
2: IjLvJG0-M1KnBbBDVenkXKquV78.roa (hash: n27HZGX2v3aJZrtVUVhPUuskMFjClOmq43C+EIraFso=)
3: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: M3OFW2F4TRxfkbjD8vzWXrxMKui08blaQdpn2ddy5CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:15:65:a8:bb:aa:d5:0e:c5:58:fa:23:e2:19:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jun 28 09:01:21 2025 GMT
Not After : Jun 29 09:01:21 2025 GMT
Subject: CN=a5099c3ff790cbaeb5acaf9e5d872722b142a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4c:e5:81:10:fc:e5:10:55:aa:0a:19:d0:a7:
65:1c:df:49:8c:ec:52:3b:42:70:65:b9:c8:98:63:
54:15:2b:d1:d6:aa:15:82:c6:17:20:df:43:99:49:
90:c1:d5:18:44:f0:e3:7b:56:f1:f8:07:29:ac:ed:
d7:38:3a:b0:3c:1d:cc:51:b8:d6:f9:b5:fa:4c:b7:
b7:ec:ae:95:db:24:23:46:d2:c5:7f:0a:1e:fa:22:
db:fe:74:2c:38:f9:d4:6d:44:b9:c6:d1:5c:6a:2e:
19:c0:18:6a:2d:f5:1d:f7:7f:9b:32:37:3e:77:67:
1a:d5:b5:4e:76:d5:22:22:9b:44:9f:09:89:ba:e8:
2e:ee:ee:d0:93:90:8f:eb:0e:b2:c8:0a:3c:18:2f:
e3:95:2d:e9:fe:41:e1:0f:f8:57:04:fd:a6:2e:7f:
8e:22:a2:15:19:c6:ed:f4:c1:ef:8f:fe:eb:f2:8a:
ac:86:57:ae:0c:ad:6e:c2:4a:db:b9:c8:b7:55:06:
02:59:50:f4:4f:0b:34:1d:1d:e4:6b:ea:93:24:de:
7a:a5:b2:ca:8f:1b:78:98:c5:37:e8:f4:34:a6:69:
b5:4f:77:2c:c1:dc:f9:ff:2a:25:62:27:ea:92:d7:
8f:9f:23:62:1d:f3:9d:07:3b:a7:3e:77:5e:68:ad:
95:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:9C:3F:F7:90:CB:AE:B5:AC:AF:9E:5D:87:27:22:B1:42:A5:2E
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0e:f8:c4:3d:55:a1:b6:dc:bd:c7:14:fa:ca:fd:60:ea:81:
51:16:48:19:7a:b8:31:18:bf:45:96:0e:83:46:c3:2a:e3:0d:
1b:87:0a:a2:61:d2:99:70:c3:7b:44:d0:ec:b3:73:72:a2:b0:
6a:f0:62:e9:ee:0e:71:3f:1f:99:76:8b:2b:a7:35:01:c7:3d:
9c:ea:ad:43:b5:d2:3d:8f:f9:03:02:24:b2:7d:51:8f:1e:2e:
22:c6:de:4e:b6:3b:26:60:8e:14:08:c2:38:0d:21:53:63:66:
8a:75:72:4b:7e:61:ff:3b:cd:8c:50:a9:f6:dc:b9:f5:8e:85:
2c:94:82:b3:f5:a1:3c:98:57:22:21:de:fa:a0:3f:4f:46:85:
fb:8e:86:27:97:ce:31:3a:67:02:70:d0:3b:f7:08:36:91:bd:
0c:09:fd:ba:ac:a5:77:85:c3:66:b7:80:c2:76:3d:02:3a:71:
88:d8:6f:8f:eb:32:b7:61:7d:28:7e:e6:45:86:c7:c4:26:8f:
b8:2a:f4:50:67:37:f6:48:64:88:c3:01:3f:7a:5c:a0:e3:9f:
0a:35:5b:80:80:6c:35:9b:1b:cd:51:32:1f:c3:b7:28:a3:af:
ed:7e:49:f4:b0:6b:d3:a9:fc:82:61:ed:9b:9b:b3:3a:24:1b:
9e:f0:7c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xRVlqLuq1Q7FWPoj4hmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMTc4MzdhMTBkYjFkM2RkNzNlMjBkZjBiNDc5ZTQwZGIy
MjM2ZmUwHhcNMjUwNjI4MDkwMTIxWhcNMjUwNjI5MDkwMTIxWjAzMTEwLwYDVQQD
EyhhNTA5OWMzZmY3OTBjYmFlYjVhY2FmOWU1ZDg3MjcyMmIxNDJhNTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykzlgRD85RBVqgoZ0KdlHN9JjOxS
O0JwZbnImGNUFSvR1qoVgsYXIN9DmUmQwdUYRPDje1bx+AcprO3XODqwPB3MUbjW
+bX6TLe37K6V2yQjRtLFfwoe+iLb/nQsOPnUbUS5xtFcai4ZwBhqLfUd93+bMjc+
d2ca1bVOdtUiIptEnwmJuugu7u7Qk5CP6w6yyAo8GC/jlS3p/kHhD/hXBP2mLn+O
IqIVGcbt9MHvj/7r8oqshleuDK1uwkrbuci3VQYCWVD0Tws0HR3ka+qTJN56pbLK
jxt4mMU36PQ0pmm1T3cswdz5/yolYifqktePnyNiHfOdBzunPndeaK2VRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUJnD/3kMuutayvnl2HJyKxQqUuMB8GA1UdIwQY
MBaAFD4Xg3oQ2x091z4g3wtHnkDbIjb+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAt
YzU5NmFmMmE0MmJhLzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS80YzA0M2MtNWZjZC00OGNiLWJkNTAtYzU5NmFmMmE0MmJh
LzEvUGhlRGVoRGJIVDNYUGlEZkMwZWVRTnNpTnY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANA74xD1V
obbcvccU+sr9YOqBURZIGXq4MRi/RZYOg0bDKuMNG4cKomHSmXDDe0TQ7LNzcqKw
avBi6e4OcT8fmXaLK6c1Acc9nOqtQ7XSPY/5AwIksn1Rjx4uIsbeTrY7JmCOFAjC
OA0hU2NminVyS35h/zvNjFCp9ty59Y6FLJSCs/WhPJhXIiHe+qA/T0aF+46GJ5fO
MTpnAnDQO/cINpG9DAn9uqyld4XDZreAwnY9AjpxiNhvj+syt2F9KH7mRYbHxCaP
uCr0UGc39khkiMMBP3pcoOOfCjVbgIBsNZsbzVEyH8O3KKOv7X5J9LBr06n8gmHt
m5uzOiQbnvB8ww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:44 2025 by rpki-client