Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: yCzF4Jo30KxxWPCYHUFmwYUIkjooLpusvDxQ+p2xowM=
Subject key identifier: CF:9D:63:E7:F0:D6:F6:C5:54:0B:D6:F6:19:F1:1F:AF:D5:98:BE:04
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 019A0F3A92555EEB63A69F2B49921A83EE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 140E
Signing time: Thu 23 Oct 2025 04:01:28 +0000
Manifest this update: Thu 23 Oct 2025 04:01:28 +0000
Manifest next update: Fri 24 Oct 2025 04:01:28 +0000
Files and hashes: 1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: FlzG9mrFhK0c41ksMYYrx97z6ksPUc1yQovYR3XTZV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:3a:92:55:5e:eb:63:a6:9f:2b:49:92:1a:83:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Oct 23 04:01:28 2025 GMT
Not After : Oct 24 04:01:28 2025 GMT
Subject: CN=cf9d63e7f0d6f6c5540bd6f619f11fafd598be04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:72:96:1c:9b:a3:88:36:4c:4f:c7:56:c9:
a8:00:e8:9a:83:a4:d2:28:eb:48:3a:7e:60:39:11:
65:9b:a9:9c:0d:ab:87:37:2d:a2:34:9c:49:ac:9c:
73:cb:0a:27:1f:0e:ce:14:c3:cd:2f:0d:c3:58:38:
66:28:1e:ec:b0:57:ce:98:b9:9d:4c:27:67:14:03:
b5:95:84:72:74:2b:d6:71:bd:cf:a8:96:8b:c3:7c:
be:48:c9:56:b6:a3:6b:7c:29:6c:62:63:98:f0:63:
40:26:41:66:a9:d2:6c:94:e4:24:93:79:1d:60:04:
17:6a:49:93:03:7c:ff:05:8e:8d:b3:ed:ec:a3:c7:
0b:94:9e:7a:68:72:34:48:41:ef:44:07:4f:d0:b5:
23:48:02:f0:88:1f:23:12:eb:d8:f6:17:f2:02:86:
18:86:ad:7f:04:f8:ec:7a:18:ca:9c:64:37:9b:bc:
fc:ea:4a:5b:90:bd:16:43:2a:54:38:e0:c5:90:5a:
6f:ca:2a:b9:c2:7e:5a:21:27:c7:44:46:8b:28:02:
29:e1:4f:83:b9:0a:5a:43:22:75:11:f2:d9:a4:0c:
6c:c4:ae:3c:75:b5:ae:f4:b8:83:ab:0f:8e:d4:42:
7e:ec:ef:2d:e6:f4:b9:21:c4:c4:a9:a1:7b:7b:10:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9D:63:E7:F0:D6:F6:C5:54:0B:D6:F6:19:F1:1F:AF:D5:98:BE:04
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e5:d1:8e:89:fa:f6:82:da:fb:ff:92:86:26:38:0d:00:75:
15:05:ac:8b:bb:46:d3:3c:59:71:6e:96:13:47:57:76:a0:22:
33:09:d4:d1:a5:d0:32:9b:b2:34:75:05:70:1d:fc:af:ca:d0:
c7:08:6d:a3:4b:a9:40:fe:6c:cb:b3:21:28:6f:11:ba:40:b3:
49:40:1f:84:ea:18:a9:1a:4b:35:a7:ea:8a:f8:8e:e4:22:77:
3c:9f:79:25:e2:fd:08:de:e1:72:0f:04:dd:52:80:b0:41:ef:
0b:3c:90:0a:6e:d2:4f:4b:b6:c0:11:d1:86:73:42:22:91:07:
38:fc:1c:04:b6:04:3f:63:fc:cc:32:e8:c0:21:98:88:d6:57:
7b:a2:64:9c:50:ff:06:ed:f9:a6:92:50:62:7c:f4:8f:87:ef:
85:fe:b2:81:ae:39:8f:11:83:9a:30:85:0c:ac:ea:61:0c:e6:
e8:e2:5b:b4:c3:2a:53:ef:ec:8e:e3:69:aa:30:84:1a:2f:e9:
5f:40:d9:bb:9d:aa:d1:02:3e:9a:bd:ea:3b:1f:4f:a8:aa:4a:
00:ba:54:1f:fb:85:fc:52:70:1a:22:b7:50:a4:82:4c:80:f4:
86:a7:51:be:39:6d:b3:08:b3:89:c8:81:17:da:30:ca:38:b0:
74:41:1f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:18:10 2025 by rpki-client