Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: aiK7I5MAViGaxMiWhKFmy85NmvNBwGqlhvoc5qWVuVI=
Subject key identifier: 06:B3:A9:4E:D4:DE:E0:2F:A5:DB:CF:D1:37:31:EF:E3:5C:C7:82:49
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019A0FA74C7562702916A517DC1BC1FAACC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 0EE3
Signing time: Thu 23 Oct 2025 06:00:13 +0000
Manifest this update: Thu 23 Oct 2025 06:00:13 +0000
Manifest next update: Fri 24 Oct 2025 06:00:13 +0000
Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: awbareV6aDrHlgec5Vj4s5hE4BzMSewicLOJD93BYHQ=)
3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:4c:75:62:70:29:16:a5:17:dc:1b:c1:fa:ac:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Oct 23 06:00:13 2025 GMT
Not After : Oct 24 06:00:13 2025 GMT
Subject: CN=06b3a94ed4dee02fa5dbcfd13731efe35cc78249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:37:dc:9b:d0:13:68:ae:de:e9:3c:ca:32:57:
a3:b2:b3:b4:e3:2b:56:0f:b0:a9:59:71:3f:e8:67:
9e:44:97:8a:22:4d:c6:4e:b9:cd:cf:f8:2c:13:27:
87:1b:08:84:8d:c6:30:60:40:ac:9a:0c:dd:8f:fa:
7f:24:e3:3c:06:3f:94:2e:c8:02:c6:0f:1f:af:eb:
e3:9e:c5:10:0c:56:fb:98:bd:6d:20:da:df:8f:e8:
f6:9b:d8:97:83:6e:57:3a:2c:8e:67:06:3c:3e:1d:
5b:21:a3:8e:a8:d3:94:f0:a3:30:29:42:25:42:e2:
74:2a:c5:ee:fa:a2:fa:90:e7:d1:a3:fb:d2:c8:72:
c3:a4:a3:9a:e0:37:ac:4f:30:26:53:84:5e:c5:8e:
ba:bd:76:03:39:ee:b9:8f:f1:9b:58:3c:08:99:0f:
a1:cf:3d:45:e2:dd:b0:13:96:b4:2b:0a:2c:e7:bd:
44:7d:9f:01:32:26:ab:a7:6c:25:c6:cf:3d:61:4b:
ba:b7:19:06:36:9c:82:4f:52:b3:f3:9f:59:d8:0f:
6c:45:1f:b6:c0:7e:52:25:0a:65:11:fd:d4:d2:f1:
9a:5f:80:28:86:46:61:0d:86:f0:12:cc:41:c2:92:
9f:64:fe:f7:52:a3:8f:3f:08:bc:bb:fa:a3:24:9d:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B3:A9:4E:D4:DE:E0:2F:A5:DB:CF:D1:37:31:EF:E3:5C:C7:82:49
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:31:18:ab:b1:a8:9a:1c:92:94:7c:b7:bb:21:f8:e8:75:be:
47:d4:e4:6c:93:53:4b:cb:c7:b0:07:76:6a:6e:65:8c:ae:3d:
dd:32:e8:69:06:dd:d3:e7:d3:5f:e4:73:9a:7b:26:39:81:f8:
a4:ba:2e:5d:ec:81:74:85:85:ff:db:13:cd:cd:d6:c3:50:58:
91:fe:7f:6a:f0:70:49:56:e5:38:55:6b:a6:45:a6:fc:3d:10:
c8:39:63:75:31:7b:41:50:e2:8d:90:0c:ef:09:d9:20:d7:99:
df:a1:21:71:be:9b:43:bd:cd:31:f5:9e:6b:79:33:3e:71:ce:
d4:ea:92:e9:ee:08:cc:36:cc:47:6e:b7:f2:92:f3:d0:2b:a7:
55:3a:0f:0c:e2:df:32:a3:d5:08:cd:35:96:cb:ba:8e:df:16:
b5:4c:7a:b9:6e:7a:e9:36:bb:14:a4:bf:28:2b:3e:d6:40:43:
0b:71:ec:54:f2:03:63:d3:db:88:16:80:a4:25:d4:dd:50:0e:
3d:c5:cf:ef:4b:02:ea:6b:99:ac:67:79:91:40:03:a1:b7:0d:
5c:aa:d6:76:48:dc:64:c9:48:6b:63:64:96:0e:87:95:f4:06:
26:bb:b6:2d:5f:4a:23:4c:69:a2:26:14:38:ed:7f:54:f5:1d:
09:64:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 10:58:25 2025 by rpki-client