Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File: phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier: 3/fOUYaZMeDvubFMnRZ5EjdvW9ix/Zk6JBmTisYgjIs=
Subject key identifier: 03:F7:0A:C9:D5:C4:76:1F:E0:2A:32:2B:C4:E8:B6:D1:69:6F:C7:78
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial: 019A41A63ECE6F0F6245BE9070D209D85827
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number: 1707
Signing time: Sat 01 Nov 2025 23:00:05 +0000
Manifest this update: Sat 01 Nov 2025 23:00:05 +0000
Manifest next update: Sun 02 Nov 2025 23:00:05 +0000
Files and hashes: 1: _6cfi2Dj44vxaZWzfEwd2jk1pu4.roa (hash: 0LoAOyQFdU27wEYvA4eRFUQBIfRX8L27NeM+jRnEJAQ=)
2: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (hash: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=)
3: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: Oy6sN65sJ+crJJZGKnZKcwxkaFwAuFEMGBAPi3sj3Os=)
4: sZajNmManlPTaNoPcFuaAKck-nc.roa (hash: R4UFS0zdQGwYoD2q6eTRAVpHRYbKs3X1MYzT1lIbryU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 23:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:41:a6:3e:ce:6f:0f:62:45:be:90:70:d2:09:d8:58:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
Validity
Not Before: Nov 1 23:00:05 2025 GMT
Not After : Nov 2 23:00:05 2025 GMT
Subject: CN=03f70ac9d5c4761fe02a322bc4e8b6d1696fc778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:d5:62:0b:f7:ee:15:b9:6d:54:7d:3b:37:
a8:2e:bb:9e:9c:3f:26:78:45:d4:85:07:13:d8:20:
da:50:26:2c:08:32:a5:fb:95:98:9f:c5:df:26:e1:
ec:81:a2:37:6c:23:4c:cd:4b:7a:42:1d:6d:67:fe:
35:72:09:2f:1e:b0:ea:19:a2:70:99:90:eb:a5:68:
57:25:a3:b0:4b:1d:fa:48:e2:60:51:2f:61:d6:02:
7b:4b:c2:f2:d8:0c:67:36:e0:66:3c:50:86:23:67:
29:14:2f:5d:8c:73:a2:df:7f:ae:07:95:3e:c4:56:
ac:90:0e:a6:0a:f8:ac:37:cc:ef:f0:2c:1d:0c:e1:
d9:c5:16:77:3e:56:f4:7e:62:51:69:9f:12:24:b3:
b6:7e:31:6f:15:d5:44:3a:3e:fc:61:bb:ba:fc:26:
74:c3:91:6a:b7:b5:7a:2d:dc:22:1e:01:2e:11:aa:
4c:cd:13:d0:1d:29:18:91:77:a0:62:2e:68:8c:2b:
00:d4:67:6a:d2:58:53:99:f1:f6:2f:f6:46:4c:4f:
b5:e4:bc:d9:e2:00:a4:c5:a4:16:e3:d7:fe:c3:68:
f3:31:21:e3:66:c9:e8:18:33:06:1b:0c:65:e3:e3:
62:dc:4c:ef:4c:f9:5b:66:31:50:54:03:1d:b8:08:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:0A:C9:D5:C4:76:1F:E0:2A:32:2B:C4:E8:B6:D1:69:6F:C7:78
X509v3 Authority Key Identifier:
keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:19:aa:01:60:4b:fd:91:f8:87:af:ba:ce:a1:a1:c5:5e:c1:
fe:7b:01:db:63:c2:02:06:72:04:09:20:69:4c:51:81:be:f1:
8d:81:c8:44:cb:66:18:ec:de:fe:55:ac:08:70:59:7f:0e:98:
64:91:0f:f7:8a:8a:30:26:fa:09:bb:0c:6d:43:41:96:b2:01:
7b:93:aa:31:5a:01:01:9d:5d:67:68:8c:d0:9f:34:d5:1a:e2:
63:4a:0f:de:ba:7f:01:9d:73:c7:02:56:ee:bd:38:fd:da:b2:
3d:5d:16:74:07:18:9a:f2:54:fe:07:8f:df:4c:2d:20:9c:01:
07:4a:12:ee:c0:d8:d4:f4:04:94:a2:69:6a:23:a5:53:40:74:
71:1a:f2:8b:30:aa:41:8e:b6:80:0c:38:3b:5c:e3:bd:de:30:
19:5f:fc:68:6b:b2:af:c2:7d:0a:c9:60:32:ff:05:ac:93:79:
09:98:31:6e:c7:7d:a5:97:cc:81:f4:18:ce:82:c9:19:91:ef:
7a:49:86:26:1f:0e:bd:5a:53:bb:23:98:95:e9:31:be:9e:0c:
3e:e8:69:b4:1e:09:4f:19:92:e9:13:39:1d:b9:c7:5d:ca:08:
bb:06:c9:db:8c:44:7a:66:09:1b:6a:99:8a:c0:a1:a4:5d:e4:
d3:d1:42:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpBpj7Obw9iRb6QcNIJ2FgnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MWFkYTYxMjAyNDEzY2Q4ZmNhMmY0OTc0MjUyN2FkMDIx
Zjk2NzYwHhcNMjUxMTAxMjMwMDA1WhcNMjUxMTAyMjMwMDA1WjAzMTEwLwYDVQQD
EygwM2Y3MGFjOWQ1YzQ3NjFmZTAyYTMyMmJjNGU4YjZkMTY5NmZjNzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I7VYgv37hW5bVR9OzeoLruenD8m
eEXUhQcT2CDaUCYsCDKl+5WYn8XfJuHsgaI3bCNMzUt6Qh1tZ/41cgkvHrDqGaJw
mZDrpWhXJaOwSx36SOJgUS9h1gJ7S8Ly2AxnNuBmPFCGI2cpFC9djHOi33+uB5U+
xFaskA6mCvisN8zv8CwdDOHZxRZ3Plb0fmJRaZ8SJLO2fjFvFdVEOj78Ybu6/CZ0
w5Fqt7V6LdwiHgEuEapMzRPQHSkYkXegYi5ojCsA1Gdq0lhTmfH2L/ZGTE+15LzZ
4gCkxaQW49f+w2jzMSHjZsnoGDMGGwxl4+Ni3EzvTPlbZjFQVAMduAjnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP3CsnVxHYf4CoyK8TottFpb8d4MB8GA1UdIwQY
MBaAFKYa2mEgJBPNj8ovSXQlJ60CH5Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWIt
YWVlYzdhODU5YzU5LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWItYWVlYzdhODU5YzU5
LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERmqAWBL
/ZH4h6+6zqGhxV7B/nsB22PCAgZyBAkgaUxRgb7xjYHIRMtmGOze/lWsCHBZfw6Y
ZJEP94qKMCb6CbsMbUNBlrIBe5OqMVoBAZ1dZ2iM0J801RriY0oP3rp/AZ1zxwJW
7r04/dqyPV0WdAcYmvJU/geP30wtIJwBB0oS7sDY1PQElKJpaiOlU0B0cRryizCq
QY62gAw4O1zjvd4wGV/8aGuyr8J9CslgMv8FrJN5CZgxbsd9pZfMgfQYzoLJGZHv
ekmGJh8OvVpTuyOYlekxvp4MPuhptB4JTxmS6RM5HbnHXcoIuwbJ24xEemYJG2qZ
isChpF3k09FCfQ==
-----END CERTIFICATE-----
Generated at Sun Nov 2 07:01:59 2025 by rpki-client