Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: hHWrDl2x0N1kEcWh/oouVUif5rfv0f6m8D92+n//hQE=
Subject key identifier: 5D:8F:D8:DF:20:A1:93:1D:A6:C1:50:3A:29:AE:78:99:93:AD:D2:86
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 01985BD9CD6B3529A35CC3F5C47CC34FF9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0E1F
Signing time: Wed 30 Jul 2025 15:00:57 +0000
Manifest this update: Wed 30 Jul 2025 15:00:57 +0000
Manifest next update: Thu 31 Jul 2025 15:00:57 +0000
Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=)
2: IjLvJG0-M1KnBbBDVenkXKquV78.roa (hash: n27HZGX2v3aJZrtVUVhPUuskMFjClOmq43C+EIraFso=)
3: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: y0Vb1+L9ovXP6euveErADOlDmNDSyoh1IGFQxP8otfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:d9:cd:6b:35:29:a3:5c:c3:f5:c4:7c:c3:4f:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jul 30 15:00:57 2025 GMT
Not After : Jul 31 15:00:57 2025 GMT
Subject: CN=5d8fd8df20a1931da6c1503a29ae789993add286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:fa:30:24:9b:69:05:db:ca:44:2b:e9:66:
bc:e2:42:6b:d0:31:b1:bb:63:ab:d7:b4:18:f7:54:
f6:be:09:df:cd:9c:79:62:54:b1:1c:f1:83:4c:da:
ee:b5:91:e2:3a:8d:6b:16:a3:ab:79:3c:8e:26:5e:
5e:26:db:b5:aa:6f:2a:b8:33:64:45:c5:20:de:04:
0d:b8:f6:74:b1:00:f9:40:ff:9d:2e:ff:6b:c0:f0:
23:f6:ee:98:5b:e8:82:ae:9a:5c:4b:41:76:23:56:
ae:92:ef:0a:08:89:32:69:99:c2:fd:1c:e7:35:91:
9a:ef:a6:8c:a2:77:6b:ca:d6:4e:9f:e5:71:b2:f4:
3b:84:94:14:49:6d:f1:46:59:52:28:71:31:a9:85:
fd:0e:26:7a:da:8d:8b:38:4e:bb:eb:9f:9e:64:d7:
e2:fd:f4:f7:c6:7b:8c:5e:ac:6c:87:34:93:c2:24:
49:8d:78:16:95:17:2d:12:b5:3f:65:1d:99:d4:ff:
51:df:0b:a4:0a:9f:65:e8:8b:79:39:d3:e4:e7:6e:
7a:db:bc:c2:34:2e:82:31:25:f5:40:b0:5d:a3:bc:
f6:46:ef:25:cd:fc:c4:f4:93:cb:b0:3d:34:e8:31:
a1:33:74:5b:68:22:cf:49:ca:a9:68:ef:1f:34:e9:
1b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8F:D8:DF:20:A1:93:1D:A6:C1:50:3A:29:AE:78:99:93:AD:D2:86
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:82:cd:e0:33:8f:1c:30:fc:f5:2c:f7:68:06:01:2f:b6:cb:
ae:5b:c1:d6:6c:10:67:b1:9b:2b:df:31:30:44:d6:93:42:3f:
70:2b:02:32:00:42:4e:9c:55:9f:15:f4:f9:90:a1:e2:c8:69:
c3:8e:5a:1a:33:f2:4a:74:c9:68:6f:37:42:9c:64:4c:ba:fc:
3e:18:82:64:65:6b:88:0f:17:93:7a:f6:cf:32:d6:e4:21:d8:
43:e8:fe:26:04:2e:f5:9a:11:47:04:73:1d:d9:0c:9a:28:11:
a3:53:70:59:5d:4a:c5:5d:7f:da:40:d2:ca:f0:b6:6c:25:89:
43:c6:45:f6:e0:78:cd:74:e6:eb:28:cb:dc:ee:7d:3d:b0:07:
05:d9:e9:d9:14:60:7f:b6:7b:cb:96:20:13:1a:23:07:ad:a9:
23:22:ff:77:d0:ac:3d:19:8f:f2:41:1c:aa:39:9f:c3:ab:8c:
24:77:07:72:3a:7a:9c:a8:aa:7c:23:d0:86:3e:d7:a9:0a:56:
bd:a9:40:7e:c8:35:c7:7b:a3:b5:a3:9f:e7:64:f8:12:7a:24:
de:bb:c0:5c:e5:45:0f:c5:5b:73:e0:a2:bb:0f:88:c5:13:07:
e0:96:8f:4d:69:f8:a9:e7:ba:76:a3:f6:5f:43:f1:b5:5d:9d:
45:66:e1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 19:41:17 2025 by rpki-client