Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: 0sOdKIHiT5YupG/h8Nx4n9gJtssqM2B5+A8/gfiouCI=
Subject key identifier: A7:BF:25:E3:0F:A1:23:0C:97:31:63:1E:9F:AA:5E:BA:23:B6:14:37
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019849D3733F5BF7EE70FE16C87903CBA8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 0DF8
Signing time: Sun 27 Jul 2025 03:00:51 +0000
Manifest this update: Sun 27 Jul 2025 03:00:51 +0000
Manifest next update: Mon 28 Jul 2025 03:00:51 +0000
Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: Jz4q3r7UAa7RY0XFLb6Xp+0Jb3IMlV/oXvyu52qA5Yw=)
3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:73:3f:5b:f7:ee:70:fe:16:c8:79:03:cb:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jul 27 03:00:51 2025 GMT
Not After : Jul 28 03:00:51 2025 GMT
Subject: CN=a7bf25e30fa1230c9731631e9faa5eba23b61437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ab:9f:ff:44:ee:74:a5:b7:2f:ce:39:ea:98:
17:32:6e:95:6a:db:6d:15:59:c3:47:d4:a2:d1:54:
2e:e8:29:63:8e:b2:10:a8:3d:47:bf:08:fa:32:9f:
06:de:1d:40:ae:97:24:38:f2:1c:19:4a:02:44:10:
29:53:15:f1:7a:4f:30:58:70:52:e1:ff:4a:0a:25:
5b:d7:c3:79:be:0d:ea:db:70:b9:1f:9b:83:70:d5:
93:b6:78:5d:f2:22:77:c4:05:93:46:71:4b:e9:9b:
0d:b4:36:00:93:5b:59:79:8c:d8:57:f1:d9:c1:69:
a9:ee:6e:22:b8:e9:85:aa:25:a0:c4:ff:57:41:dd:
5e:a6:b0:eb:03:3f:0f:ae:d6:fa:df:e2:c9:42:58:
68:7d:bb:0f:08:0d:60:a1:c0:35:1f:b7:15:2a:6e:
cd:7a:20:ad:ad:6e:2d:75:de:4b:d8:5d:2e:f7:a4:
02:ba:0f:42:32:b5:8f:24:2f:9c:96:ec:d9:7a:8c:
ee:1b:76:b9:9b:8d:53:15:bc:db:bd:e1:0b:cf:86:
e9:cf:29:c1:c0:a6:c5:b1:4b:c3:97:be:89:fd:ce:
aa:8e:c2:25:74:e3:87:a4:37:10:4f:0b:3d:ef:4c:
6e:e1:be:d4:8c:bc:d9:7e:93:36:f3:1c:18:84:91:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:25:E3:0F:A1:23:0C:97:31:63:1E:9F:AA:5E:BA:23:B6:14:37
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:65:43:cb:1d:9d:aa:f5:4b:8f:f1:1d:c8:85:93:ad:4f:a4:
f4:12:21:0f:b0:fe:75:75:fd:de:17:65:1c:75:f2:4c:fa:6e:
0d:b7:56:ea:38:7b:c9:2f:33:53:ca:9a:61:7c:ab:24:f0:cb:
41:e9:b0:7f:7f:4b:e8:9a:0a:7d:91:c1:0a:3b:b8:2a:25:3a:
53:bb:74:22:9a:b0:d3:e1:0d:ee:05:0c:1a:0a:f8:d3:cd:04:
fe:fd:62:7b:62:07:89:26:87:fe:e7:98:e6:26:49:18:d6:c0:
ba:84:ef:c4:4a:82:e5:47:d7:54:0c:42:ac:38:f9:49:9a:44:
37:87:08:11:82:dc:59:e3:d9:73:96:cc:99:0d:0e:ef:e1:00:
85:d6:a0:4d:79:46:4a:b7:62:f6:91:ce:88:cc:b5:a3:5b:c1:
44:f3:53:4d:b1:20:6e:fa:90:be:18:18:8f:55:50:e3:7c:ff:
a9:8e:1c:a8:90:26:f8:a1:c3:13:c9:81:3b:1b:8e:63:4b:5f:
be:80:ae:af:40:b4:84:79:20:82:d8:b6:16:d8:0f:99:52:12:
4f:88:94:43:40:9a:74:36:f0:2c:6b:59:58:61:0a:46:97:f8:
c9:93:8f:10:27:bc:ee:f2:6a:09:47:19:9c:e5:ce:69:ce:f4:
c3:e3:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:58 2025 by rpki-client