Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: tR4Nr8cuqyyp0vLX2bO37AxYfDyMnACLd9NRarv5y10=
Subject key identifier: A6:4F:3A:59:F7:47:99:5F:04:B8:9B:1D:0F:DF:F1:2B:B1:B3:9F:32
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 019A706E8B2D7019C5A323C5F6F2F143865C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 0B96
Signing time: Tue 11 Nov 2025 01:01:23 +0000
Manifest this update: Tue 11 Nov 2025 01:01:23 +0000
Manifest next update: Wed 12 Nov 2025 01:01:23 +0000
Files and hashes: 1: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: kw/I+/m82K1K6fUytBkKCm+A3a3iWE1oV3Y2YTxlpm0=)
2: _BTZQ0zK_fvKReKxFaBu1-Vwvm8.roa (hash: IbkaaN1eobNCsZcNskJYmH0crzqKNoH6G8sKqEsCFhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:8b:2d:70:19:c5:a3:23:c5:f6:f2:f1:43:86:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Nov 11 01:01:23 2025 GMT
Not After : Nov 12 01:01:23 2025 GMT
Subject: CN=a64f3a59f747995f04b89b1d0fdff12bb1b39f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ae:f7:ab:ef:84:3d:72:a4:73:82:ae:bd:7a:
e5:b6:93:9f:cd:87:6d:d0:58:22:bd:05:98:12:96:
c4:b8:2d:f5:3a:30:b6:85:ce:53:34:c5:35:6a:cb:
ed:2c:58:c9:35:58:3d:6e:19:c3:f6:9a:94:d1:c3:
cf:7e:32:0f:5a:ec:cd:cd:27:c7:e1:70:49:00:9c:
01:ee:14:ba:9c:67:6f:77:63:c8:7e:0f:2a:f3:11:
41:c3:03:14:10:53:84:4d:dc:7f:5f:8c:ea:48:cc:
81:9c:04:47:34:58:9e:21:43:a9:28:b1:22:08:e6:
70:0b:db:31:33:f3:87:f4:45:1d:67:f2:68:84:8e:
8b:6b:a9:93:cb:1c:f2:d3:b3:34:e3:fe:58:17:be:
57:9c:14:91:2c:cd:55:e9:2e:59:e4:8d:33:dc:b2:
0e:0b:cf:06:75:f7:12:ea:0f:6d:5e:20:3d:4d:c5:
f4:86:6e:f6:22:cd:b9:ac:4f:5d:af:68:c8:1b:c1:
de:08:84:3e:a1:ca:b8:40:ea:d2:03:19:9e:02:76:
a5:05:dd:7c:ce:3a:73:22:7a:63:c8:04:2d:34:0c:
4e:81:c4:73:1b:37:7b:88:65:31:e4:3f:f2:18:2f:
9f:ca:67:84:c8:09:1e:7e:97:fa:d6:69:fa:62:27:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4F:3A:59:F7:47:99:5F:04:B8:9B:1D:0F:DF:F1:2B:B1:B3:9F:32
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a6:d7:b6:ad:94:bf:62:99:27:df:56:93:11:15:af:0e:65:
7d:09:aa:0a:37:87:f1:bd:18:6e:03:d0:bd:a6:dd:cb:ce:14:
69:4c:af:d8:2d:72:a1:25:53:06:38:6f:5d:17:ce:83:c5:fe:
4b:59:ce:11:7c:68:0c:5d:9e:3f:0b:29:b2:57:79:3f:75:7a:
ff:44:15:79:02:0c:33:8b:31:f9:fa:b9:81:59:e3:b1:d1:64:
f7:c2:2c:ca:88:7a:63:92:dc:de:bc:1e:ea:c4:9c:5e:06:ce:
3c:15:34:a5:7e:14:9b:6f:14:17:8e:76:65:e2:8c:5b:f5:56:
5a:9b:b6:db:ec:23:2c:cc:88:a4:0b:7e:8f:92:bc:7d:73:86:
c4:17:e5:8c:77:d9:43:c9:dc:e8:43:31:10:bb:54:50:ea:28:
f6:6d:22:39:d3:80:37:bd:38:5a:e6:88:70:7a:a1:48:20:e8:
f8:09:f2:54:c6:b5:6f:e9:61:1d:99:6d:bf:45:22:29:85:80:
b7:d4:5c:b2:36:f8:5c:b5:60:cb:6b:bc:f5:46:6d:75:ea:17:
9a:bb:63:4a:ea:f3:a4:df:ad:78:21:88:e9:c5:db:e9:89:5c:
a3:99:12:bf:a3:55:74:96:a7:92:c2:00:97:ee:bf:89:ef:12:
8b:a8:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:13 2025 by rpki-client