Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
File: R-ph18wsJ4p8S8-8ITezlKImVK0.mft (raw, json)
Hash identifier: ta38S7yOUSZV2RZcRbupvp30hHDAKDodw6y+kK6LoOA=
Subject key identifier: EB:7D:BD:4A:25:20:BD:CA:06:DA:D5:67:2B:C3:F3:BD:FB:58:68:C5
Authority key identifier: 47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
Certificate issuer: /CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Certificate serial: 019A70A5194C82024EA73A27128C5DA08C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
Manifest number: 05EA
Signing time: Tue 11 Nov 2025 02:00:59 +0000
Manifest this update: Tue 11 Nov 2025 02:00:59 +0000
Manifest next update: Wed 12 Nov 2025 02:00:59 +0000
Files and hashes: 1: 2E-i-XVwWZd-hZzL5RDcxHIUK_w.roa (hash: kmE7612P7PDRz8jZU91zzdg87lpJGT1okogHYfmxmWk=)
2: R-ph18wsJ4p8S8-8ITezlKImVK0.crl (hash: BskYCg1TATHyRWM1uhiSLtSBlGb8beyJJctzEZDxfCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:19:4c:82:02:4e:a7:3a:27:12:8c:5d:a0:8c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ea61d7cc2c278a7c4bcfbc2137b394a22654ad
Validity
Not Before: Nov 11 02:00:59 2025 GMT
Not After : Nov 12 02:00:59 2025 GMT
Subject: CN=eb7dbd4a2520bdca06dad5672bc3f3bdfb5868c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:81:a9:54:1f:0c:32:06:b7:e8:45:71:e9:f9:
d5:ae:79:b9:26:bb:fd:31:d4:a4:1d:76:cd:97:8d:
a3:80:02:84:6d:df:56:be:dc:3e:a1:ed:6f:6b:3e:
43:36:d1:76:08:f8:bd:15:0c:83:69:88:81:5c:12:
f6:3f:40:03:4b:df:da:dc:92:0e:80:f5:5a:9c:ea:
ef:cf:97:3d:d4:4b:e3:9b:4a:02:d8:c6:5a:30:a3:
36:15:db:db:0e:5e:98:33:31:11:35:83:db:07:42:
e8:61:b5:14:8d:cd:6d:5a:9c:53:00:d7:5d:16:c4:
2c:71:27:c7:e9:0d:17:39:c8:7f:cf:d0:16:77:2b:
65:82:02:af:c3:92:f4:69:7f:be:81:d6:fb:c3:df:
c1:27:0e:37:61:e3:db:52:3d:02:f9:8f:aa:9a:a3:
ec:31:b9:77:57:19:06:69:1e:77:3c:76:6b:a8:1f:
9f:81:4d:d8:a1:5a:88:19:69:db:e3:9d:1c:89:59:
6f:9e:12:56:de:ec:0d:67:b2:ee:4d:a1:f4:c3:d8:
a7:8b:6c:7e:8a:6c:69:1b:14:3d:67:18:87:2a:4b:
b4:e5:f6:9c:81:87:ff:8e:66:0a:fc:99:ab:ba:94:
cf:5e:9a:84:42:9b:b3:7b:d6:66:f3:98:83:36:18:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7D:BD:4A:25:20:BD:CA:06:DA:D5:67:2B:C3:F3:BD:FB:58:68:C5
X509v3 Authority Key Identifier:
keyid:47:EA:61:D7:CC:2C:27:8A:7C:4B:CF:BC:21:37:B3:94:A2:26:54:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-ph18wsJ4p8S8-8ITezlKImVK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/115c44-bc4a-4e24-bf38-8c72609f2f02/1/R-ph18wsJ4p8S8-8ITezlKImVK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:84:59:8b:76:35:f4:c1:86:97:7c:65:fb:a1:5a:ec:a1:29:
38:a9:97:74:39:54:08:ef:46:25:c5:36:df:3c:81:6e:92:ec:
89:fc:ce:ff:70:fa:2b:40:3a:b2:4a:4b:c7:07:b7:c1:70:1b:
cb:e4:7a:dd:41:7f:1d:1a:2e:90:b7:55:42:50:46:46:9a:fb:
0f:af:45:e9:ac:d4:f6:00:2b:66:44:bb:26:58:c5:e3:30:e2:
8f:aa:ae:bc:ce:51:78:3f:3e:c1:c4:46:98:d7:f3:28:b6:ec:
a5:31:3f:25:e9:70:2b:10:f9:48:7a:ab:8b:b5:15:34:7e:27:
a2:67:01:f1:60:68:96:5e:a5:e0:6f:4f:b3:15:04:2a:db:07:
46:06:b9:de:67:cb:92:3a:b6:46:3f:ca:45:73:ec:a4:f0:91:
1a:fe:62:af:ff:20:9f:41:f3:03:85:5c:52:78:f7:e8:5e:f8:
96:74:be:e3:86:24:d8:df:1a:43:79:0b:05:3d:be:04:45:15:
ba:40:66:20:a0:42:19:69:a4:6d:52:8b:6d:64:c1:af:64:73:
b6:71:0a:48:94:4b:27:8a:1b:b2:aa:c8:0c:77:c4:00:77:b8:
eb:a7:2a:70:d3:2a:4c:a0:3e:d3:b8:61:5f:c6:23:9f:cf:34:
89:50:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:14 2025 by rpki-client