Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: aJQu8uGWH2sh2sJY7Gwyinl1nKUt8Loujze5bFSTLZQ=
Subject key identifier: 09:3B:92:B7:2A:FE:05:B5:63:5E:14:68:DF:DC:F9:25:BF:A3:40:92
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 01994F2E5692300FFA686450C3FE09BD9A3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0E9D
Signing time: Mon 15 Sep 2025 21:01:00 +0000
Manifest this update: Mon 15 Sep 2025 21:01:00 +0000
Manifest next update: Tue 16 Sep 2025 21:01:00 +0000
Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=)
2: IjLvJG0-M1KnBbBDVenkXKquV78.roa (hash: n27HZGX2v3aJZrtVUVhPUuskMFjClOmq43C+EIraFso=)
3: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: Q/u7Eg+1iXcGzFi580A3hPbpWs2fSl/I1XuMFuyuWEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 17:04:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4f:2e:56:92:30:0f:fa:68:64:50:c3:fe:09:bd:9a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Sep 15 21:01:00 2025 GMT
Not After : Sep 16 21:01:00 2025 GMT
Subject: CN=093b92b72afe05b5635e1468dfdcf925bfa34092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:7d:96:c3:8b:b5:da:67:3e:4e:e4:58:16:
23:82:6b:8c:05:b7:bd:7d:5e:9b:96:ed:23:e6:37:
d3:15:39:25:f1:d3:32:94:c7:93:0c:d2:48:eb:99:
92:5a:24:96:87:e1:dd:e7:27:ea:cd:5e:9d:d2:6c:
60:f4:e3:b6:89:46:d5:ba:ce:e2:e7:59:29:9a:4e:
2b:5f:62:93:8a:19:42:55:19:0c:d8:42:6b:bc:ca:
3d:36:5d:cc:f8:52:fe:df:9b:76:7e:09:e5:22:7a:
fb:38:99:06:60:95:d2:a4:27:ea:16:00:27:54:98:
96:54:54:62:8a:5c:10:14:47:2e:30:02:ca:8a:62:
ec:e1:73:3b:82:23:d3:c5:dd:60:88:27:32:65:2e:
33:fe:6f:ab:88:9b:1c:78:fc:8b:4d:93:31:b2:32:
eb:ce:35:47:04:c2:65:cd:67:fd:3f:56:78:ea:5a:
55:7f:a8:fd:76:a9:2e:c4:35:ee:a3:5a:f9:88:0c:
8b:25:5d:1d:fa:4e:6d:d0:b5:fa:fa:d7:dd:05:73:
47:2d:2c:f8:40:48:94:00:81:51:54:fe:7e:11:c0:
1a:73:bf:b5:b5:38:46:a1:a1:5e:1a:30:d8:b9:4a:
56:04:21:59:02:14:e3:43:e8:d4:eb:5d:3e:bb:51:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:92:B7:2A:FE:05:B5:63:5E:14:68:DF:DC:F9:25:BF:A3:40:92
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a7:9b:3b:58:49:82:a2:e4:c2:80:24:4d:50:99:20:e9:a1:
58:09:c1:fc:2d:f5:97:3a:48:62:97:92:c1:0c:c9:db:ad:2a:
05:02:2e:c3:cb:49:3d:03:45:8a:8c:e3:7b:0b:56:d7:c2:eb:
ec:4e:27:3c:5a:c9:19:8e:a2:33:6b:49:6e:04:66:5b:55:5c:
73:c1:65:02:00:fd:9e:e1:1e:62:48:5f:70:e7:c5:fc:9c:a5:
7d:7f:40:e5:78:0c:cb:49:7b:6b:86:14:41:de:a6:cb:15:9c:
e1:0b:0f:58:1a:27:9c:df:24:0a:b9:56:2f:c3:c0:00:75:fb:
e8:00:6f:71:d6:56:cb:0c:1a:5b:17:85:42:fc:77:46:1b:38:
69:8d:41:39:d4:60:59:f6:dd:c9:09:79:6c:25:06:06:f4:8d:
6c:d1:71:e3:1f:ef:9e:60:39:ba:42:45:2d:49:b6:e8:80:0b:
b2:25:04:1f:80:43:0d:14:8b:11:e3:c9:cf:11:d7:ee:52:e3:
eb:63:74:44:00:e4:91:2c:2c:e9:ec:8f:bb:48:6b:3e:ad:6e:
a8:90:8e:4c:86:47:4d:2a:76:65:2e:51:58:22:c1:52:6f:65:
40:7c:58:b5:09:11:1f:f6:78:ff:8e:cb:96:b9:54:09:d5:37:
19:03:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 01:13:14 2025 by rpki-client