Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: NCESIH+HLrcVBFjkfaofhaDWE7ZJCUjwwwAaxXH2EwU=
Subject key identifier: D5:29:5E:48:2B:98:22:D9:EE:8F:A2:7B:8F:70:04:26:CF:93:9E:E1
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 0199FC5850F46F6B75833549550057532565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: K8gb2IugzK8IgsCtvVgzoDUY6tM.roa (hash: wR8LR0jtRTOAWt2SjVhqd0hsllRe9a/OzBTCiGqDDfI=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: atpk0kgjfB1L8WrP435AikIiklrSvteZavgsaOpz8yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:50:f4:6f:6b:75:83:35:49:55:00:57:53:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=d5295e482b9822d9ee8fa27b8f700426cf939ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:b5:bb:ae:67:bf:12:83:39:2b:69:f6:1a:
4d:48:9f:bb:33:7a:92:89:11:4f:47:d9:31:e0:cb:
92:af:ce:27:64:09:68:70:7d:6e:bb:35:d5:ce:66:
94:be:22:50:19:64:0d:88:6e:33:9c:07:4f:35:36:
66:c9:2c:a3:91:d3:14:33:22:9a:08:03:8f:19:06:
54:42:36:29:cb:01:2c:c3:1e:7f:fb:c6:a2:aa:82:
df:c1:f1:5d:16:41:3d:90:a1:56:f0:43:00:fa:ad:
dd:28:3e:31:ec:6d:f3:66:5f:1b:cf:c8:06:82:6b:
2e:a6:29:9b:4d:4d:7c:7f:7f:bb:4a:63:28:d6:8b:
61:4d:a4:83:bd:0c:6a:17:e9:78:c6:ad:a3:b6:11:
60:a4:b7:2f:40:7e:dd:38:75:dd:8c:c9:ed:c7:f1:
75:4e:b2:8f:c3:d7:af:32:23:c9:25:ab:a4:dd:69:
f2:64:9f:06:02:df:2c:27:cf:89:6e:d0:18:a1:47:
9c:2f:5a:86:d2:0d:c8:3f:53:9c:30:c3:92:b8:98:
89:75:d8:67:bf:b8:7d:a0:51:11:da:49:00:10:94:
54:63:da:a3:38:bb:98:33:c8:3a:ff:8b:ff:d3:97:
9e:8a:52:b5:f1:f3:05:91:63:28:bb:67:84:0c:e4:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:5E:48:2B:98:22:D9:EE:8F:A2:7B:8F:70:04:26:CF:93:9E:E1
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:14:1c:cd:b8:0a:89:bb:5c:38:2c:25:4f:35:0a:40:bc:
00:a5:95:dd:38:77:a5:ba:27:41:67:a6:e2:5b:02:93:c8:c4:
3a:ce:ae:c3:cb:7c:45:d0:63:ac:f5:22:40:fa:42:15:74:11:
e7:54:42:c9:54:36:52:3f:3f:ee:0a:32:c9:48:1e:7c:25:4b:
13:8a:8c:1f:50:5e:e1:13:05:34:17:dd:c4:b8:ed:07:d8:a5:
c2:29:39:29:25:ae:f6:5a:35:86:35:8e:a5:4d:2b:6a:7d:69:
00:4e:27:00:83:5c:18:bb:84:2f:31:9a:ec:8e:e6:54:e4:75:
6d:b5:48:f2:36:09:a3:1d:40:69:c6:29:3b:10:7c:c4:92:df:
8a:53:70:1e:6a:a9:0b:52:7e:86:cf:e5:c4:dc:ca:4b:40:78:
00:f5:40:bd:81:87:22:2e:1b:73:9d:40:2d:6d:42:1e:6f:f5:
8a:70:17:71:02:a7:dd:8c:b9:bd:03:99:05:1b:34:4f:9f:b3:
0a:c1:e2:98:f7:47:f9:e1:bd:78:2a:d2:09:6f:b8:6e:6e:e5:
43:5e:25:a9:cc:ac:79:52:01:7f:69:30:20:a0:5f:76:c8:b4:
27:a8:c2:24:c3:9c:28:d0:cb:6b:2a:7c:2a:1b:90:92:c2:7e:
33:bf:9d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:13 2025 by rpki-client