Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: cWkNfyhZBnAQ39wWxbNX8b1KBCC8y6bvlLkCCihykbA=
Subject key identifier: EC:F6:8A:0B:AF:B5:22:AA:03:63:42:18:8B:F1:9D:3C:57:A1:E1:0E
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 0198CA5B77E1CDC7F40B06F3DDDA76DCDFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 1645
Signing time: Thu 21 Aug 2025 02:00:48 +0000
Manifest this update: Thu 21 Aug 2025 02:00:48 +0000
Manifest next update: Fri 22 Aug 2025 02:00:48 +0000
Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: sUt4CmhnQ+a1nggMAUSQBItD29bSbQTTKXJH2BNlLUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:5b:77:e1:cd:c7:f4:0b:06:f3:dd:da:76:dc:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Aug 21 02:00:48 2025 GMT
Not After : Aug 22 02:00:48 2025 GMT
Subject: CN=ecf68a0bafb522aa036342188bf19d3c57a1e10e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:c2:1e:ed:8a:30:f5:6b:b6:98:0b:55:cc:
4b:28:7a:38:0d:ce:89:b0:60:cb:f9:88:81:ff:8c:
6b:9f:65:4d:45:78:ca:f7:97:4b:96:38:d8:be:58:
5b:f5:ad:32:5c:69:23:a4:b4:4c:11:6f:2f:cd:46:
ad:f3:ad:21:f1:1b:b6:a4:8f:83:a8:bc:36:91:ee:
f0:08:52:43:ff:b0:e9:ba:6c:c5:0c:4f:11:e1:66:
8b:48:63:8d:8f:d6:1c:20:ba:19:1b:cc:3f:56:e6:
26:d0:e2:30:f6:e5:6e:9c:74:24:01:4c:27:77:03:
91:44:4d:3f:d7:92:b2:ca:09:79:c6:0e:69:d2:60:
f2:c0:d1:48:d4:0f:9d:d4:07:45:f4:a0:9c:17:10:
6e:cc:1b:9c:0b:10:d5:c5:75:7b:21:33:f7:c8:d9:
43:10:a8:39:f4:bf:1b:89:94:4f:5c:bb:02:22:08:
46:8a:aa:d3:28:6c:f8:f0:eb:86:6c:32:e7:2f:7a:
a1:29:3b:58:13:ab:d2:a0:f0:cb:68:02:24:8d:7a:
13:c4:08:00:11:b2:16:a2:31:f0:f5:0e:b9:d5:9c:
b8:02:fb:49:6d:38:1b:d5:b8:8c:a7:0f:5c:7e:e4:
41:94:0a:2a:d1:a0:d2:59:0f:1a:cb:27:5a:22:61:
ed:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:8A:0B:AF:B5:22:AA:03:63:42:18:8B:F1:9D:3C:57:A1:E1:0E
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:22:85:ba:24:1d:0d:33:8d:2d:35:68:f1:3d:a0:d1:b9:77:
7f:ce:fc:0c:1f:91:99:57:28:4e:22:c4:e9:2e:81:62:ea:8e:
ec:05:ca:5c:79:df:73:e0:f6:e2:d1:5f:89:d3:38:2a:ba:60:
9b:7d:be:80:18:86:97:5d:26:2a:34:3a:22:9e:12:26:f2:83:
0b:d0:91:e3:bb:4b:0c:24:7e:7d:9d:03:01:9f:20:b8:07:50:
c4:bd:c3:f3:9f:0a:8d:46:c0:10:63:66:a0:06:a5:f7:c4:9a:
8e:ed:9c:7e:29:0b:6d:e6:99:4e:e4:93:0d:b1:7c:dc:5a:c7:
ca:36:6b:d6:fd:8d:d3:a1:e4:ea:e2:e9:74:bf:de:9e:85:d4:
21:87:1b:47:08:6d:11:59:58:28:35:80:9e:3a:03:db:d6:4e:
70:3f:48:25:1c:b1:21:db:f4:ca:30:30:bc:66:be:22:17:cb:
09:70:31:a5:77:e8:59:ff:c4:a7:2c:67:2d:e6:21:b3:4b:0b:
8e:48:55:57:06:73:b5:ef:50:3f:b7:c1:01:50:d0:b2:66:c2:
e1:1b:ea:cf:74:29:d2:e9:28:93:51:9c:6a:6d:6d:59:7a:74:
fd:ba:44:46:b0:96:c1:32:4e:02:db:a1:a8:9c:36:fa:94:0a:
c6:ce:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:15:16 2025 by rpki-client