Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: l1NGG3X+Xe9W8NdeJCL75dBknPppqyPg4Hy1c+TMfaA=
Subject key identifier: CE:CE:DA:10:0F:C0:C1:A8:EA:E9:2C:33:A4:6C:80:CF:CB:E5:B2:B4
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 0197B6A23F7DCAC715DCBF8638879964B81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: 1UVKiNRMJ_HImWl4v8Xm_ov2alc.roa (hash: 5flJUckS677lE7riT489EDvVCL32yj3m5+tviIp0Aik=)
2: ZmD1TA5j_WUZpHewze6nukzZJsg.roa (hash: +71Vr/FTpakGGRIUTsx4iBEKymM4Qh918F7HPx6zt+Y=)
3: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: /Evp3oYVMGtCxjaJc/E6TlA6Nq7msyVuAPzI0Xkzk6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3f:7d:ca:c7:15:dc:bf:86:38:87:99:64:b8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=ceceda100fc0c1a8eae92c33a46c80cfcbe5b2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:61:04:97:28:aa:73:19:30:96:fa:f6:c1:
97:b0:b7:a4:f5:3f:1b:56:57:a3:f7:75:39:21:0a:
d4:c7:80:28:65:2c:9f:44:64:39:10:df:a5:81:63:
45:c5:91:5e:77:cb:33:70:56:de:2a:f3:7b:e8:1f:
1b:0b:3f:c1:c4:df:39:69:1a:38:84:c9:60:be:1c:
86:eb:34:3e:11:6a:b4:62:b1:c5:ef:71:49:23:86:
bc:b1:f1:cf:f4:a8:33:e0:53:fd:5d:68:b6:32:cb:
d7:2e:ae:ed:43:3b:1a:63:5f:fe:18:55:e9:54:77:
a7:aa:f8:bf:25:2e:fd:f5:ce:19:47:64:7c:93:19:
11:3d:06:d4:e5:39:59:52:85:e2:2a:e5:86:fb:f1:
e6:09:87:37:c0:21:f9:07:a3:d1:7f:9e:55:cf:69:
88:7c:a1:c0:13:6f:76:09:a5:11:c6:e0:d1:c3:ac:
8f:1c:5f:cc:26:ec:c7:a7:ba:83:77:d9:07:e1:8b:
b5:6e:da:1c:ea:de:10:c9:f9:23:48:4b:55:01:a0:
b5:cb:d0:c8:73:4d:e3:12:5a:2c:dd:f9:c4:dc:d3:
fe:9f:89:94:72:7f:d4:03:e8:3c:49:88:f3:97:71:
48:4d:40:a8:e6:08:35:79:42:71:7a:d5:bd:31:92:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:DA:10:0F:C0:C1:A8:EA:E9:2C:33:A4:6C:80:CF:CB:E5:B2:B4
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:78:23:fc:50:ad:2b:38:ce:dc:45:2f:76:3b:ca:c7:31:4d:
fc:dc:9d:56:92:ba:97:17:c3:df:84:ab:5b:9c:75:f0:0a:bc:
75:9b:45:b9:7e:6b:7c:df:b9:56:a6:3a:67:5e:50:d6:bd:18:
97:bf:e0:73:71:db:36:7c:7a:c3:e4:f4:03:37:c3:89:94:ab:
1b:c2:28:f6:b7:4e:01:4e:20:ab:a1:99:0d:62:28:0e:fa:8a:
1d:64:9f:7c:c4:37:d2:49:cb:80:c9:9c:69:4e:4a:ed:99:11:
c6:a9:9b:ff:ba:74:15:62:d9:47:71:37:26:80:70:97:87:54:
05:d0:e7:ca:a7:c2:73:c1:d0:76:2e:1e:e8:47:93:5d:16:b8:
40:df:36:2b:bb:18:19:1f:fb:d3:fc:9a:24:52:2f:64:03:78:
80:68:39:54:47:10:8a:44:fa:d7:fe:e4:41:b0:91:a1:a7:f6:
cf:a7:ee:b1:78:3d:ec:9b:91:f7:48:25:25:63:59:6e:b1:56:
b8:da:09:5f:da:6c:fe:56:80:9b:81:ce:4b:51:1e:84:93:f3:
fb:1e:64:05:cc:02:de:ef:93:d2:88:31:fd:79:34:e4:d9:76:
d8:5f:cd:44:02:f6:eb:77:ae:f9:6d:0b:45:c5:c0:30:c6:e5:
11:1b:9d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:23 2025 by rpki-client