
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: l4ZWQvwn1bCYL8XwudQWDbhz8vohvQIcTcB39ukmLh8=
Subject key identifier: 2C:12:65:10:08:25:67:59:F5:5C:58:09:F6:C5:F0:A7:72:96:CB:CC
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 01974C68F761158EA35909137DBF905B0D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 12A0
Signing time: Sat 07 Jun 2025 22:00:36 +0000
Manifest this update: Sat 07 Jun 2025 22:00:36 +0000
Manifest next update: Sun 08 Jun 2025 22:00:36 +0000
Files and hashes: 1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: nNJ1C8ZuNE3ohQLOgHIl4x4SyUGcoqHqp+qHUAgk7bI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:68:f7:61:15:8e:a3:59:09:13:7d:bf:90:5b:0d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Jun 7 22:00:36 2025 GMT
Not After : Jun 8 22:00:36 2025 GMT
Subject: CN=2c12651008256759f55c5809f6c5f0a77296cbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a4:fb:65:c1:56:e2:aa:74:1c:22:cf:47:6c:
06:74:76:07:5a:9e:0f:b0:7a:73:be:e7:76:99:7d:
e4:05:9a:57:57:15:9b:d2:76:a8:dd:3f:49:8d:b0:
a9:2e:18:59:2d:5e:6c:46:c2:46:10:b7:ab:f2:4c:
f7:22:86:fc:a1:b2:38:ef:80:3f:90:4c:df:e4:fc:
3d:5c:d8:5f:dd:b6:e9:67:40:fa:d7:e2:06:7e:fc:
fe:63:67:b0:35:dd:d2:3c:80:12:3e:1c:17:cf:b6:
66:01:82:71:43:e8:ef:aa:75:fe:17:40:ce:ac:8f:
96:04:e4:90:49:d0:5f:d2:ab:f6:44:eb:ee:7c:f5:
da:68:31:50:00:fa:1a:2e:94:ab:1c:f2:e9:ea:c0:
a0:f4:e2:ba:cf:98:e2:79:7c:2f:1a:b0:ed:c6:d9:
fd:55:d4:22:7a:8c:e5:e3:95:4a:79:9b:2b:e0:4a:
ae:ec:85:f4:8f:74:36:8c:bd:79:54:16:cc:0c:75:
13:d9:7b:4d:c4:09:ad:57:eb:bd:1d:29:c3:d9:e2:
13:94:29:96:48:a7:29:49:96:36:d2:53:19:4f:dc:
19:e9:81:0d:6b:88:ec:95:35:05:b5:ca:40:82:97:
6f:dc:7d:61:2c:24:fb:fe:8d:16:ae:f5:5a:1e:5f:
a6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:65:10:08:25:67:59:F5:5C:58:09:F6:C5:F0:A7:72:96:CB:CC
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:39:0f:31:23:85:12:68:90:c4:fb:98:6f:86:39:17:af:8c:
89:21:12:3c:19:8b:48:7a:40:19:ee:36:f8:c3:76:56:d4:e3:
1d:e9:74:95:75:cf:9a:a0:05:35:12:f0:42:4c:33:b3:97:eb:
0c:c2:d5:f9:a6:8c:ef:5b:c5:9e:58:56:44:61:f1:49:5e:60:
d5:57:e7:ba:19:10:53:fb:8f:54:a0:c7:55:18:8f:28:dc:54:
06:30:ae:ab:3c:b6:a6:ac:98:95:f4:02:c6:28:18:49:7c:b5:
fd:49:46:d2:d4:bb:ad:53:08:17:bd:77:5d:f2:56:3a:ca:00:
70:98:27:4d:bf:78:06:6f:33:45:47:9f:91:87:0a:75:bc:75:
8c:0b:20:ae:98:6c:03:83:c8:5d:af:12:70:9f:4a:f3:d7:d4:
b3:fe:9f:a7:fc:fc:fb:50:1e:02:65:53:58:de:fc:85:7b:e7:
fc:4b:88:19:e4:3b:5a:91:51:3e:af:6e:75:d4:1a:00:11:2e:
5e:4f:04:2a:40:c2:6e:c5:58:69:d2:75:82:ee:80:ae:60:99:
2a:8a:fa:43:94:86:f4:f6:0b:31:13:c0:91:81:5e:aa:8a:69:
06:56:25:95:15:f0:4b:fd:fe:5e:a5:65:a0:af:da:a6:f5:d2:
50:ac:64:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:48 2025 by rpki-client