Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: IJEnLTnkIw780zgdamxQGA6gcNNNVB7JknOTNG9gN20=
Subject key identifier: 28:0B:BB:6D:3F:1E:A6:FF:DD:BA:35:4E:12:7E:B1:26:36:24:50:BF
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 01984965B05548DE3D18865C4C3CEF9D20CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:57 +0000
Manifest this update: Sun 27 Jul 2025 01:00:57 +0000
Manifest next update: Mon 28 Jul 2025 01:00:57 +0000
Files and hashes: 1: 1UVKiNRMJ_HImWl4v8Xm_ov2alc.roa (hash: 5flJUckS677lE7riT489EDvVCL32yj3m5+tviIp0Aik=)
2: ZmD1TA5j_WUZpHewze6nukzZJsg.roa (hash: +71Vr/FTpakGGRIUTsx4iBEKymM4Qh918F7HPx6zt+Y=)
3: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: +yy4uv4u7ewBJoGhHRRbVaQGVSm+2K3VRk6TCXKPnTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:b0:55:48:de:3d:18:86:5c:4c:3c:ef:9d:20:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Jul 27 01:00:57 2025 GMT
Not After : Jul 28 01:00:57 2025 GMT
Subject: CN=280bbb6d3f1ea6ffddba354e127eb126362450bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:57:a9:93:2c:4f:8b:10:ec:5f:31:04:1e:c3:
fd:df:36:61:3b:7a:b4:7b:8e:7e:16:ae:29:a7:90:
e0:35:b7:78:96:48:09:1c:2b:30:df:bc:b3:f4:f3:
42:b3:d2:87:56:fc:ee:61:22:87:f3:76:d2:a5:a2:
80:eb:f8:82:64:a8:62:fc:77:16:50:fc:19:cf:44:
b3:be:ab:80:82:0a:03:9e:3d:b0:4f:fb:c0:14:90:
3c:48:9b:22:19:3f:4c:c6:ba:5a:e1:f9:a0:43:0e:
79:06:3d:55:fa:c0:f5:13:9f:74:f8:0e:f8:fb:35:
88:e6:48:46:f8:5b:93:46:1d:b3:74:05:88:6f:98:
fc:bd:da:71:f7:62:20:69:0f:73:5a:a1:ef:e1:4a:
53:f4:77:41:1a:a1:bd:be:b2:0f:41:8d:d4:bc:d8:
1b:8e:01:a9:e1:49:12:d3:15:fc:31:d7:c7:f1:09:
8c:5e:9b:8c:0d:0c:c8:67:72:9c:e3:58:7a:a3:44:
e9:62:8a:f9:93:3d:0b:8e:89:0d:a8:a4:c6:3c:68:
87:b5:56:44:48:ff:40:e2:1b:21:b2:5b:6a:81:ec:
7d:a5:f1:6e:bb:86:83:3d:e7:f1:d4:ba:dc:ac:91:
f7:74:c3:9b:b3:0e:de:a7:de:f3:e9:31:ac:f0:ef:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0B:BB:6D:3F:1E:A6:FF:DD:BA:35:4E:12:7E:B1:26:36:24:50:BF
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:4f:3b:f8:e1:f4:bc:cb:48:7d:8c:40:c1:bc:bb:8e:bd:02:
f6:9d:30:fc:3d:0f:aa:a9:16:6b:58:40:e3:28:26:d7:45:7d:
31:28:6a:98:c5:57:76:63:33:02:7f:bd:e3:38:0a:4d:15:8a:
58:e4:8e:aa:7e:5a:d0:f1:d7:00:46:2e:3a:46:38:64:d5:d1:
b4:4b:b5:ad:fe:81:c1:f7:50:aa:b8:d5:59:75:f2:01:45:ae:
8d:3f:22:34:c0:ae:ad:87:ec:5c:d7:6c:08:74:54:89:2c:f1:
9d:d0:be:a8:41:36:5b:f9:36:d2:e9:ad:ff:32:0e:67:9a:a4:
ab:12:82:d9:4f:62:c2:a7:30:1c:dc:4a:c5:82:06:a6:f1:90:
17:ba:27:85:02:db:81:41:14:41:b7:d6:d6:1b:2d:bb:7b:67:
4e:5a:a5:97:5c:fe:70:75:97:88:82:df:3b:ef:60:38:47:74:
62:13:ac:de:d0:ae:16:35:4f:1d:a6:e5:4b:b1:0d:de:67:e9:
45:a9:05:47:79:a2:2a:c0:1f:c1:5a:ec:1d:b9:d4:ca:ec:bd:
ac:78:c6:7c:a6:d8:e6:11:0d:0d:d2:de:64:90:09:89:7c:68:
74:2b:18:27:4b:ad:7e:31:c2:87:2b:28:f8:46:f1:cd:13:08:
5c:5f:91:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZbBVSN49GIZcTDzvnSDPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWE4ZjY2N2EzZGRkYmQ0YTM1MjMxOGQ4ZjA2MDZjNDZl
OWYwNjMwHhcNMjUwNzI3MDEwMDU3WhcNMjUwNzI4MDEwMDU3WjAzMTEwLwYDVQQD
EygyODBiYmI2ZDNmMWVhNmZmZGRiYTM1NGUxMjdlYjEyNjM2MjQ1MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulepkyxPixDsXzEEHsP93zZhO3q0
e45+Fq4pp5DgNbd4lkgJHCsw37yz9PNCs9KHVvzuYSKH83bSpaKA6/iCZKhi/HcW
UPwZz0SzvquAggoDnj2wT/vAFJA8SJsiGT9Mxrpa4fmgQw55Bj1V+sD1E590+A74
+zWI5khG+FuTRh2zdAWIb5j8vdpx92IgaQ9zWqHv4UpT9HdBGqG9vrIPQY3UvNgb
jgGp4UkS0xX8MdfH8QmMXpuMDQzIZ3Kc41h6o0TpYor5kz0LjokNqKTGPGiHtVZE
SP9A4hshsltqgex9pfFuu4aDPefx1LrcrJH3dMObsw7ep97z6TGs8O9D0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgLu20/Hqb/3bo1ThJ+sSY2JFC/MB8GA1UdIwQY
MBaAFKYaj2Z6Pd29SjUjGNjwYGxG6fBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQt
YjU2YmIwNjQ3ODY4LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jZTg4YTItZWI4Ny00MmE1LTkxNmQtYjU2YmIwNjQ3ODY4
LzEvcGhxUFpubzkzYjFLTlNNWTJQQmdiRWJwOEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuk87+OH0
vMtIfYxAwby7jr0C9p0w/D0PqqkWa1hA4ygm10V9MShqmMVXdmMzAn+94zgKTRWK
WOSOqn5a0PHXAEYuOkY4ZNXRtEu1rf6BwfdQqrjVWXXyAUWujT8iNMCurYfsXNds
CHRUiSzxndC+qEE2W/k20umt/zIOZ5qkqxKC2U9iwqcwHNxKxYIGpvGQF7onhQLb
gUEUQbfW1hstu3tnTlqll1z+cHWXiILfO+9gOEd0YhOs3tCuFjVPHablS7EN3mfp
RakFR3miKsAfwVrsHbnUyuy9rHjGfKbY5hENDdLeZJAJiXxodCsYJ0utfjHChyso
+EbxzRMIXF+Rew==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:35:21 2025 by rpki-client