Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
File: PheDehDbHT3XPiDfC0eeQNsiNv4.mft (raw, json)
Hash identifier: 94kXTBHmuf8ppNW6TVewK0rNnC2Dh23GiWnG0c0hYsY=
Subject key identifier: 09:C4:B8:90:6B:E3:4F:97:7B:21:FB:57:2F:18:5A:A2:48:4D:E6:C7
Authority key identifier: 3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
Certificate issuer: /CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Certificate serial: 019A54BF74EEFA1CEDD6351BE11CFE2CAAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
Manifest number: 0F25
Signing time: Wed 05 Nov 2025 16:00:24 +0000
Manifest this update: Wed 05 Nov 2025 16:00:24 +0000
Manifest next update: Thu 06 Nov 2025 16:00:24 +0000
Files and hashes: 1: CZQAZEvMh_XTxw7BOmbx2zwgX-k.roa (hash: Ire9dW7Oeexx5f9et2qGgWkDs4AnuBBZcM9DwhOcJAg=)
2: PheDehDbHT3XPiDfC0eeQNsiNv4.crl (hash: eAqjqLaxBYPsCNpFpa20PUIzJ9Fp2ApOpVVxtvBuGqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:74:ee:fa:1c:ed:d6:35:1b:e1:1c:fe:2c:aa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e17837a10db1d3dd73e20df0b479e40db2236fe
Validity
Not Before: Nov 5 16:00:24 2025 GMT
Not After : Nov 6 16:00:24 2025 GMT
Subject: CN=09c4b8906be34f977b21fb572f185aa2484de6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:e9:72:49:a9:7e:18:02:3b:b2:a8:8b:90:
66:46:09:e8:aa:6b:72:fb:7d:4c:91:47:05:e2:35:
2c:8b:1c:1b:82:ab:d1:6e:42:60:c1:ff:8c:33:1d:
1a:db:34:a0:4b:dc:d6:6d:70:79:dc:04:b1:31:5d:
45:2d:86:cf:9a:79:21:73:e0:5d:05:65:76:fe:1c:
b3:b0:ca:2a:f3:c5:ff:8d:14:5e:0c:af:cc:f0:51:
34:09:90:38:1c:c4:44:e5:60:c6:92:40:99:1c:85:
b7:4a:10:ca:4a:ec:cc:b5:20:f5:79:bf:7d:7c:58:
9c:8e:1f:e6:69:3c:ff:f1:e0:a2:46:05:f1:93:aa:
5a:2d:d5:5d:4b:05:ae:46:43:3c:a8:69:6a:4b:c6:
d3:c6:e7:11:0f:f0:01:ef:3e:55:5d:1f:5b:f9:48:
7f:2c:d3:66:18:7d:a3:98:88:e8:8d:92:42:08:9f:
00:fc:df:d5:3f:10:e1:e0:4c:2c:d2:6b:df:59:11:
26:28:f8:cb:b3:5d:2c:83:14:90:1b:81:d9:02:d1:
f7:c8:b3:9f:e7:93:1c:cb:a2:11:27:67:c3:0a:09:
be:f4:32:92:6d:3c:b5:72:a6:02:8f:7f:53:50:b1:
6c:9d:6a:5a:40:cd:3e:01:e3:51:22:f2:03:7a:f3:
44:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C4:B8:90:6B:E3:4F:97:7B:21:FB:57:2F:18:5A:A2:48:4D:E6:C7
X509v3 Authority Key Identifier:
keyid:3E:17:83:7A:10:DB:1D:3D:D7:3E:20:DF:0B:47:9E:40:DB:22:36:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PheDehDbHT3XPiDfC0eeQNsiNv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/4c043c-5fcd-48cb-bd50-c596af2a42ba/1/PheDehDbHT3XPiDfC0eeQNsiNv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:74:49:a1:e1:41:d1:bf:3f:ba:7c:33:c5:cf:8e:8d:51:52:
b2:1f:8e:f2:e5:06:22:46:79:6a:51:9f:36:27:2c:45:8f:e9:
3e:93:92:09:6a:ed:89:f9:13:f6:59:22:de:12:33:e7:4d:65:
7b:11:26:eb:4d:af:a4:6b:13:f7:57:d0:33:78:c5:63:ea:f5:
49:02:5f:92:1d:cc:f7:8c:29:61:d0:1a:d6:d7:52:d7:5f:14:
c7:9d:94:93:82:9a:77:b4:ac:c9:63:3a:28:2a:dc:bf:a9:df:
01:62:21:fd:60:59:30:29:64:83:bb:50:3a:7d:52:21:7e:3b:
5f:c9:66:d6:b9:1d:0e:a6:35:71:cf:96:ce:54:af:84:75:eb:
e4:69:a0:dd:67:22:60:45:54:91:a3:7d:0d:09:d1:4e:0a:fb:
14:53:40:8f:7e:26:68:e1:5e:14:8b:dd:a4:ad:b9:11:60:a8:
3d:68:2c:57:bd:bd:90:d7:b8:40:a9:7d:50:be:91:23:cb:2d:
99:d3:14:5a:aa:f5:39:8a:f7:8d:81:98:30:43:4a:24:bd:e0:
c6:5a:2e:3e:07:5a:ca:c1:29:f9:0e:9e:d9:c8:c8:8a:64:3a:
18:2e:ee:a0:5a:8a:ec:17:68:61:4f:fe:29:a0:4e:24:65:39:
6d:63:e0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:23:06 2025 by rpki-client