
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File: R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier: 9UCm+m5vtXMObolEYGA1rnMSapcamUpHYus2+wvfWb4=
Subject key identifier: 60:A4:29:91:22:FA:23:D6:FB:21:9C:84:17:8A:6A:46:35:FC:F6:91
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer: /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial: 0199FCC6A4CC07A2CE8C2794F0453EE2CDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number: 05AE
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=)
2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: 3CnrZmSiNNKvW+QFZIJzJtryct/GGGX2C7/JSjWyqOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a4:cc:07:a2:ce:8c:27:94:f0:45:3e:e2:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=60a4299122fa23d6fb219c84178a6a4635fcf691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:58:a6:48:93:be:f7:58:26:aa:80:4c:34:
4a:b5:ef:d2:c0:9f:7b:4e:ae:db:45:6c:7a:5a:26:
89:ce:c8:26:7d:b9:cf:50:ab:2c:d4:7a:7f:fa:d7:
51:ad:19:62:92:47:ad:eb:84:aa:b6:f1:95:9a:f6:
60:56:27:3f:c9:95:3e:3e:44:a0:81:0a:fd:44:bd:
b2:d7:a3:69:80:09:8b:8d:37:41:f5:05:9d:56:94:
ff:91:e8:c1:4c:72:a0:e9:06:1c:21:f6:61:62:a8:
8e:73:03:7d:92:97:75:fd:ce:3b:e6:9e:64:76:e9:
1b:a2:54:d7:2b:3b:94:93:3c:b7:4b:61:a2:aa:5a:
09:64:31:c3:8d:64:7a:42:78:05:fb:7d:08:84:9e:
9d:0c:3d:1e:58:7d:4d:4c:39:ec:00:7a:aa:c9:42:
43:ba:fe:a1:00:65:36:8f:69:30:a4:32:19:c5:c9:
40:ba:14:ac:fe:f3:7f:b9:00:84:4b:19:6b:c1:dd:
d5:0f:86:ca:23:84:81:f8:a8:86:6a:3c:fc:67:94:
57:43:07:6a:40:d3:be:42:b3:bd:bd:0e:d6:59:fe:
1f:5a:15:a7:a4:29:8c:28:67:7d:07:41:2d:36:f4:
6a:59:c0:7b:c4:d3:7e:45:46:35:b1:ce:03:5a:0b:
31:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:29:91:22:FA:23:D6:FB:21:9C:84:17:8A:6A:46:35:FC:F6:91
X509v3 Authority Key Identifier:
keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6a:a2:bf:18:b4:6e:5a:e1:5e:64:51:3a:c3:56:45:e4:88:
2f:77:5b:77:15:a7:ac:22:ba:34:14:e5:e4:a9:33:40:13:74:
15:9f:48:71:ae:94:16:4a:61:96:d8:de:b7:6f:9a:e7:aa:50:
08:02:ec:ad:f4:fd:ad:74:53:e8:8a:55:2b:16:3a:cc:34:da:
9d:aa:b7:e3:a6:34:c8:b8:9b:84:30:02:d2:4f:14:44:1d:35:
e3:95:88:65:33:3c:72:5d:8d:32:89:81:11:11:54:cf:46:e9:
b5:39:28:29:4b:a0:53:a6:e8:6c:af:56:a6:68:e4:71:67:be:
6c:c9:f6:05:9d:e7:b5:b5:43:b9:8d:27:1a:8e:dc:68:79:fb:
81:38:41:af:d2:63:c4:fc:63:fa:f6:c4:e6:53:fe:ef:49:ce:
e0:1a:4f:01:8f:f1:8b:da:b5:17:88:e8:7f:1d:26:fb:52:6b:
1a:a9:65:bf:73:c9:fc:9a:1a:72:83:0e:55:24:d5:1a:76:68:
aa:fa:da:38:41:7d:2a:41:ac:30:b8:0a:14:e1:12:d3:f9:af:
9d:14:e9:3e:ae:12:a7:3c:80:3f:28:88:fd:21:81:9a:3c:57:
6d:e3:8c:b7:d0:ba:00:e7:61:16:dc:e6:47:4a:d8:66:cb:5a:
a2:09:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:23 2025 by rpki-client