Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: iCNGm7LT7KzrbrnqQF/IzUc6ts1Z5mVWIkiLCbM5Rfk=
Subject key identifier: 82:35:80:71:B4:D8:45:85:6E:EE:2E:D6:7C:98:DD:11:BE:84:EA:CA
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 0197BA7EA52EFDD324463A08E0F1D6C9B749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: DB
Signing time: Sun 29 Jun 2025 07:02:31 +0000
Manifest this update: Sun 29 Jun 2025 07:02:31 +0000
Manifest next update: Mon 30 Jun 2025 07:02:31 +0000
Files and hashes: 1: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: +LCxYbRqiO1ZwhQ76sJy2dTpB8RSZ70k7wXpyz/yffo=)
2: rEjgEhZzL4goWIA1kujfN_BwihE.roa (hash: j3AflFklIT5kR+h++zJX2Hgi1qkfo3rJgP91fSsoBso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:a5:2e:fd:d3:24:46:3a:08:e0:f1:d6:c9:b7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Jun 29 07:02:31 2025 GMT
Not After : Jun 30 07:02:31 2025 GMT
Subject: CN=82358071b4d845856eee2ed67c98dd11be84eaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:33:b7:81:35:2c:38:0f:a1:06:ce:b1:59:
b6:84:8e:b5:ca:d0:4d:d3:be:b7:33:78:82:c2:53:
fb:fd:a9:18:f9:eb:c3:f5:81:87:ba:d4:a7:4a:b8:
46:fd:3d:3f:19:62:3b:2e:3d:f9:c2:95:19:d9:65:
66:29:07:fd:0f:a6:4a:60:44:ff:1c:f6:ba:09:fb:
1d:fd:4f:e3:1b:30:d5:01:9e:bc:28:3e:d9:d9:8f:
33:90:f2:df:46:be:a1:64:fc:8b:20:7f:a7:43:c7:
53:82:51:41:d5:f6:95:34:76:9e:97:87:d4:05:87:
fc:f7:5e:44:fc:b3:ad:2f:9c:9f:06:6d:41:55:b3:
e0:f8:b8:fe:7d:4b:52:93:ec:9e:96:b9:df:9b:28:
ad:72:50:5e:05:ac:6d:6f:d6:b1:58:88:53:d3:83:
60:db:1b:88:62:b7:46:65:71:32:7b:47:37:80:e3:
e7:00:e7:24:e6:6b:9f:2b:f0:93:df:31:b8:c0:c4:
02:6d:0d:2a:ef:21:c4:ec:aa:b6:d2:be:6d:ed:7c:
59:5b:47:9b:38:1e:36:b6:4b:85:f0:41:ff:25:9a:
42:68:47:6d:9a:9b:7e:c4:3c:87:07:f7:63:dd:f7:
9c:de:2b:63:58:4a:e6:32:5d:7d:fe:5e:df:0b:59:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:80:71:B4:D8:45:85:6E:EE:2E:D6:7C:98:DD:11:BE:84:EA:CA
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:b7:0d:43:30:d5:04:3a:ee:ad:48:0a:5b:36:06:67:3d:
39:26:01:f1:f2:27:09:e1:9a:84:de:b9:2c:dc:29:ae:53:d1:
3f:ea:09:28:af:b9:4e:9f:4e:23:5c:c4:1d:7a:3b:1b:d6:2b:
ec:3a:aa:e9:cc:10:fe:32:aa:42:88:19:f5:76:42:b0:10:95:
ad:ab:e6:54:a6:4a:05:98:ed:a6:36:7f:a1:a7:e9:05:db:de:
63:ed:46:c1:c9:53:6b:c5:43:ba:1b:6e:be:f4:e0:d4:0c:4b:
f9:aa:1b:e6:d1:b6:45:24:8f:71:dd:6b:31:f5:1d:ca:0f:4e:
b7:d0:9e:50:40:37:8e:7f:16:dd:ab:fa:ef:05:9a:82:4d:cf:
a4:80:77:2d:b7:a2:f1:aa:1d:cb:96:b0:c1:1c:a1:ef:3f:25:
66:cf:11:1e:2c:90:d9:9f:a2:dd:c9:28:6a:af:26:d6:12:bb:
d0:30:b0:e1:60:02:cd:8f:72:11:24:52:79:77:5a:a5:7d:e9:
10:3b:5a:6a:1e:64:00:ff:dd:ab:ea:88:1c:05:09:0b:28:32:
d8:61:29:f5:7a:f4:31:3e:96:da:5f:67:86:c4:d2:34:a6:74:
39:5c:34:8e:62:e5:f1:17:cc:32:51:f6:c6:0b:f7:a1:62:45:
73:87:f5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fqUu/dMkRjoI4PHWybdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2
ZGI3YWEwHhcNMjUwNjI5MDcwMjMxWhcNMjUwNjMwMDcwMjMxWjAzMTEwLwYDVQQD
Eyg4MjM1ODA3MWI0ZDg0NTg1NmVlZTJlZDY3Yzk4ZGQxMWJlODRlYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qEzt4E1LDgPoQbOsVm2hI61ytBN
0763M3iCwlP7/akY+evD9YGHutSnSrhG/T0/GWI7Lj35wpUZ2WVmKQf9D6ZKYET/
HPa6Cfsd/U/jGzDVAZ68KD7Z2Y8zkPLfRr6hZPyLIH+nQ8dTglFB1faVNHael4fU
BYf8915E/LOtL5yfBm1BVbPg+Lj+fUtSk+yelrnfmyitclBeBaxtb9axWIhT04Ng
2xuIYrdGZXEye0c3gOPnAOck5mufK/CT3zG4wMQCbQ0q7yHE7Kq20r5t7XxZW0eb
OB42tkuF8EH/JZpCaEdtmpt+xDyHB/dj3fec3itjWErmMl19/l7fC1kgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII1gHG02EWFbu4u1nyY3RG+hOrKMB8GA1UdIwQY
MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt
OWNlZTc3YmM1MjIyLzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy
LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdO3DUMw
1QQ67q1ICls2Bmc9OSYB8fInCeGahN65LNwprlPRP+oJKK+5Tp9OI1zEHXo7G9Yr
7Dqq6cwQ/jKqQogZ9XZCsBCVravmVKZKBZjtpjZ/oafpBdveY+1GwclTa8VDuhtu
vvTg1AxL+aob5tG2RSSPcd1rMfUdyg9Ot9CeUEA3jn8W3av67wWagk3PpIB3Lbei
8aody5awwRyh7z8lZs8RHiyQ2Z+i3ckoaq8m1hK70DCw4WACzY9yESRSeXdapX3p
EDtaah5kAP/dq+qIHAUJCygy2GEp9Xr0MT6W2l9nhsTSNKZ0OVw0jmLl8RfMMlH2
xgv3oWJFc4f1jA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:39 2025 by rpki-client