Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: Szvv0FFvvuE5f7oWhhfbAjfvCzaJNph5RD02CmSgJKY=
Subject key identifier: 10:06:C2:14:1A:F9:8A:F1:0C:79:A3:F0:EA:B5:AC:AE:3F:CF:F2:B0
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 01974742831E7E31C645638D57BC43B1E788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0D8F
Signing time: Fri 06 Jun 2025 22:00:30 +0000
Manifest this update: Fri 06 Jun 2025 22:00:30 +0000
Manifest next update: Sat 07 Jun 2025 22:00:30 +0000
Files and hashes: 1: IjLvJG0-M1KnBbBDVenkXKquV78.roa (hash: n27HZGX2v3aJZrtVUVhPUuskMFjClOmq43C+EIraFso=)
2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: 3pooQ75SxhICuA+mb8mVrdEws2YZzUOUYVWStyTYxtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:83:1e:7e:31:c6:45:63:8d:57:bc:43:b1:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Jun 6 22:00:30 2025 GMT
Not After : Jun 7 22:00:30 2025 GMT
Subject: CN=1006c2141af98af10c79a3f0eab5acae3fcff2b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:62:ab:71:6e:46:eb:5e:5d:f0:14:15:a0:
eb:c3:14:72:2a:b7:75:72:b2:ee:ad:ee:04:d8:38:
92:79:86:4e:e9:65:d5:86:dc:bc:6c:65:65:d6:07:
91:02:4a:e6:53:c8:27:60:16:01:a4:a5:b1:0e:fc:
5a:35:6c:e1:d8:8d:ed:c2:cc:7d:b5:a0:e8:8b:86:
13:17:09:1e:01:f0:20:e0:ef:66:aa:8c:bd:16:9f:
4c:4c:84:a1:6b:56:5b:b6:24:25:ab:a5:d6:04:f1:
a8:1f:f8:75:09:81:53:09:5a:2d:32:b5:e7:d6:4b:
55:b7:a1:8c:a6:fd:5d:88:48:eb:cb:cf:5d:b8:0b:
e4:dc:4a:b6:53:87:c7:a9:1b:b3:d6:60:1e:12:4c:
b0:12:f5:b4:4f:1d:26:b2:d5:a0:1d:58:02:bc:06:
5b:3d:a7:bd:3b:9b:f1:02:a5:cc:87:9f:d8:64:ae:
c6:73:4d:55:2d:14:fe:6f:42:7a:36:46:b0:a4:f7:
4d:25:81:32:4e:9b:0a:7d:c6:b9:1f:16:64:27:4c:
9d:69:c9:d2:fa:d3:79:5f:7d:84:11:87:e2:c4:ca:
55:8a:f4:f6:a9:33:d6:72:98:69:99:a9:ff:4f:da:
bf:39:1a:1a:5e:51:68:68:d1:07:d0:7e:79:ef:37:
22:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:C2:14:1A:F9:8A:F1:0C:79:A3:F0:EA:B5:AC:AE:3F:CF:F2:B0
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ac:4c:c3:ab:87:f0:b8:8e:20:c1:08:3b:34:08:b7:7d:ef:
1e:12:a0:57:57:d7:a0:ac:81:7a:b5:6d:c2:5b:e4:ca:67:65:
93:b3:3d:50:1a:14:1f:7e:d8:51:50:39:f6:fa:c3:4d:cc:a7:
09:e7:15:29:32:0d:f9:bb:d8:5b:2c:86:c7:f4:39:6a:54:a5:
9d:77:5d:ec:e5:6b:13:55:32:5f:ac:74:6c:70:91:41:d0:75:
cb:5d:be:23:90:3f:8f:3a:ed:2b:84:1f:dc:7e:80:dc:de:a3:
fa:22:86:ed:63:95:4d:18:43:79:be:a6:82:9d:a0:af:e5:eb:
ec:8d:b8:23:c4:f8:15:b0:3c:92:16:47:05:3f:35:f8:e4:6d:
30:17:0a:88:8a:28:20:b1:7b:8a:85:5d:b7:c8:6d:08:fd:41:
72:fe:f6:e1:a4:cc:10:e8:46:22:8d:ba:25:c5:a3:3a:8f:b6:
b8:1c:a4:a9:c1:b1:e1:35:69:e7:40:84:c2:57:58:98:86:48:
b0:40:2b:ae:4d:e9:8e:18:0a:6e:1b:1a:70:e6:ec:01:d0:9e:
ed:0e:0e:67:2c:ae:7d:c9:b1:32:d2:bf:2e:20:7b:ac:df:e2:
4b:77:92:f0:39:bb:66:bd:6c:5f:53:a4:04:84:6e:f1:a7:0c:
51:35:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:04 2025 by rpki-client