Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File: pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier: LIotd32mWRyXo+hIDWZrCFnBX7qijUkBr7BiyQNp3dE=
Subject key identifier: 2A:B1:E1:FA:72:CA:B4:09:C4:B0:9C:F3:6A:DC:B4:03:62:12:3D:C6
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer: /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial: 019847ADD723A64A52F23AD67504B7C4AB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 17:00:31 +0000
Manifest this update: Sat 26 Jul 2025 17:00:31 +0000
Manifest next update: Sun 27 Jul 2025 17:00:31 +0000
Files and hashes: 1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=)
2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: htekGxxKVmrA1CY2VSNfN2nJXCWhTPnJ+Ml6aGZQUCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:d7:23:a6:4a:52:f2:3a:d6:75:04:b7:c4:ab:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Validity
Not Before: Jul 26 17:00:31 2025 GMT
Not After : Jul 27 17:00:31 2025 GMT
Subject: CN=2ab1e1fa72cab409c4b09cf36adcb40362123dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:09:34:db:f4:f0:47:83:db:59:14:b6:22:
a4:6c:91:6d:49:19:5d:e0:a6:9e:5b:4b:5c:37:bf:
2e:64:c3:f3:7e:3c:23:72:69:52:d3:51:02:95:88:
64:4f:94:ec:f3:8f:f6:51:00:b3:8e:8d:01:ab:80:
91:20:c4:f4:ad:a1:d3:49:10:2c:bb:e3:af:b6:38:
fe:4b:f1:c1:40:be:77:f5:29:d3:86:cc:19:44:09:
20:92:f0:17:19:38:b5:96:08:3a:fb:cc:87:19:f5:
8f:cd:5c:9c:74:5a:5d:de:19:fc:3e:39:ca:dc:fa:
e8:3d:44:a4:3e:39:55:66:8d:33:57:c7:eb:88:b3:
d3:bf:c0:09:25:55:bf:13:2a:73:4e:44:4c:18:a9:
93:0e:d1:21:b7:5d:d7:2d:53:e0:9e:e6:6b:58:ee:
a6:aa:3a:ce:39:f1:c8:7c:55:fe:02:cd:a2:76:0e:
f1:ca:95:c5:ae:f7:47:69:43:8c:c6:a1:b5:71:af:
1a:c4:4a:d0:17:be:43:76:9d:fd:c1:65:45:83:20:
d3:60:0a:4d:26:fa:3f:df:02:48:12:0c:44:2b:60:
4a:ec:a5:f6:90:1a:4f:55:bb:ef:23:b0:b0:20:b7:
09:43:29:b3:ba:7f:58:3a:a7:ba:41:3f:47:24:67:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:E1:FA:72:CA:B4:09:C4:B0:9C:F3:6A:DC:B4:03:62:12:3D:C6
X509v3 Authority Key Identifier:
keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bc:77:07:3c:8f:59:d1:62:14:cb:ed:6a:06:d1:63:61:4a:
a0:f9:e5:b0:d1:60:17:e5:c9:73:48:97:d0:74:61:dd:08:eb:
af:84:26:3b:2d:12:94:71:79:30:86:dd:c0:ed:49:3f:cb:31:
2e:15:5c:9d:56:fd:ad:fd:13:76:41:4a:9d:35:9e:68:27:be:
c0:97:8b:75:64:38:26:ba:a5:48:37:44:a8:b2:b8:41:19:7e:
66:6d:60:a9:10:65:01:7f:19:2d:95:83:30:71:4f:4f:3f:49:
fc:9f:6d:37:c0:7a:26:8b:ef:d4:96:e1:be:1b:bf:e1:4e:43:
88:91:7f:d3:23:12:5c:0c:64:0a:85:94:2c:8d:40:78:ba:9b:
b0:20:ed:cf:e4:8e:dd:73:07:e5:9d:66:72:db:56:61:9a:46:
cb:6b:46:e5:8b:7e:e3:3e:d2:69:c9:87:8f:8f:1b:5b:f8:53:
64:17:f2:22:2d:90:b9:7e:03:84:a4:6d:e0:1e:ae:1e:38:a5:
e5:08:4a:e9:4b:ed:fe:46:f9:fd:1b:de:1a:51:41:27:ae:cc:
a3:aa:23:cb:99:13:fd:a2:e9:09:21:b4:21:80:8c:30:15:c7:
46:82:2a:67:75:0f:4e:45:32:35:d2:33:69:7a:67:0e:07:71:
0c:1c:fd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:08:50 2025 by rpki-client