Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: 1SdUjeNL6CNSS4Z7rV1TAJRc9BdKYmAD7Q3stxQN3EY=
Subject key identifier: 26:04:9D:3F:60:FA:FA:49:E0:EF:94:4E:77:71:B9:D3:2B:6D:DD:8A
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 0198D7733AAA2F632DD63D177DF3EA41F695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0E5F
Signing time: Sat 23 Aug 2025 15:01:49 +0000
Manifest this update: Sat 23 Aug 2025 15:01:49 +0000
Manifest next update: Sun 24 Aug 2025 15:01:49 +0000
Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=)
2: IjLvJG0-M1KnBbBDVenkXKquV78.roa (hash: n27HZGX2v3aJZrtVUVhPUuskMFjClOmq43C+EIraFso=)
3: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: JTN1XBcmcJeX1UNs2zhvkEQeRccsAf9bZ07X6mti6h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:3a:aa:2f:63:2d:d6:3d:17:7d:f3:ea:41:f6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Aug 23 15:01:49 2025 GMT
Not After : Aug 24 15:01:49 2025 GMT
Subject: CN=26049d3f60fafa49e0ef944e7771b9d32b6ddd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:89:bb:0a:07:81:14:d3:02:52:14:bc:df:
b3:f1:4f:2b:21:4d:68:f6:f1:3f:f8:fa:90:b2:35:
c1:18:e8:3d:52:07:25:3c:c1:cb:a7:9a:7f:d8:fd:
65:37:70:ce:72:ec:42:11:9c:68:b0:e4:42:c7:63:
c8:60:47:3a:36:8e:eb:14:37:4d:3e:39:ee:16:97:
f3:16:08:5b:41:a6:7a:d1:fa:e2:94:4b:ad:50:8b:
e3:0e:7d:ae:b4:bc:07:cd:39:1b:ed:3b:2c:28:ce:
52:9f:c9:d5:98:7e:69:0c:e8:b4:0b:8c:ad:5a:37:
55:b6:8e:01:2b:4a:fc:0f:20:2e:d8:f4:41:48:2e:
f3:5c:1d:55:d0:75:f9:1d:1a:0b:f9:a9:3b:a9:53:
e3:5e:7a:08:07:d4:86:7d:13:29:a7:ef:8c:82:91:
c8:33:d6:4b:9f:cc:08:64:6e:22:fd:db:09:f1:16:
63:af:24:fa:1c:67:cb:bb:6b:21:ed:c4:7b:be:9d:
28:73:83:43:bb:6a:b1:29:31:64:67:95:dc:42:ee:
84:e0:4e:0d:89:94:27:ea:71:e3:9f:ea:d1:ed:c7:
5f:6f:8a:dc:d8:f9:e1:28:90:6b:55:60:9c:5f:aa:
2a:d6:43:b1:54:ee:7b:73:85:2a:0e:28:fd:59:1a:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:04:9D:3F:60:FA:FA:49:E0:EF:94:4E:77:71:B9:D3:2B:6D:DD:8A
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a6:95:6e:d3:51:26:83:86:66:b7:df:80:28:89:2f:4a:a1:
87:be:99:9a:3a:05:b1:57:a4:12:0d:c4:21:5f:c3:49:b5:5b:
1a:24:4c:ef:ac:b9:a2:7e:dd:a1:33:af:25:f0:30:92:d1:44:
6d:64:5e:fa:37:17:51:25:99:7c:36:4f:7e:98:3a:35:d0:0f:
40:17:bf:f7:30:65:5d:b3:6b:9a:fe:8f:64:d6:3b:a1:54:9b:
d1:de:06:70:e3:14:21:54:a0:d3:4c:e7:a6:ce:23:e6:bb:55:
e2:dd:4e:20:61:52:13:fd:e6:72:20:74:13:fb:cf:42:99:5f:
51:31:4b:6f:df:cb:4e:7e:10:f4:50:d6:63:e2:8e:9e:50:c3:
4b:95:10:b9:46:0f:21:2c:b2:e5:d2:44:17:78:7d:a7:cd:f8:
4a:93:a5:2e:1e:51:93:d8:8a:9d:30:22:9d:16:87:40:fd:10:
f1:bf:47:7a:09:57:5f:6d:fc:c5:f0:17:10:c0:5f:a4:ae:0e:
3c:15:41:85:e6:be:03:db:83:49:ae:98:e4:8b:e2:41:b3:7e:
db:0d:cf:f4:dc:51:e5:a8:69:d4:d0:d5:68:91:41:50:2c:f5:
7b:db:4b:87:14:e5:1f:77:94:82:8d:dd:69:f5:ec:26:a7:48:
51:2f:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:33 2025 by rpki-client