Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: Y5+CzbS1pThqk3c34ImhUI6sl0KH6lj9dwc2nGEvGXg=
Subject key identifier: 3C:0F:54:C2:5A:5F:BD:C6:A9:E7:0E:14:2C:CD:41:34:2C:BB:53:43
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 01974E584C86629668DE62168B603D1C6224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: A3
Signing time: Sun 08 Jun 2025 07:01:38 +0000
Manifest this update: Sun 08 Jun 2025 07:01:38 +0000
Manifest next update: Mon 09 Jun 2025 07:01:38 +0000
Files and hashes: 1: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: vKDNSEAeFQr6LeJ8kNHjudeRgPnacMZQ9aW1JB9kcQM=)
2: rEjgEhZzL4goWIA1kujfN_BwihE.roa (hash: j3AflFklIT5kR+h++zJX2Hgi1qkfo3rJgP91fSsoBso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:4c:86:62:96:68:de:62:16:8b:60:3d:1c:62:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Jun 8 07:01:38 2025 GMT
Not After : Jun 9 07:01:38 2025 GMT
Subject: CN=3c0f54c25a5fbdc6a9e70e142ccd41342cbb5343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:5b:63:04:44:a6:ff:02:ed:18:47:43:ea:
a7:88:88:b3:c5:d3:b6:da:db:09:ce:38:a0:bd:07:
e9:a0:58:f0:2c:22:21:d5:55:76:64:a0:99:95:51:
21:58:74:e1:a6:ec:74:21:c5:0e:24:5f:8f:d0:4e:
9b:16:87:20:fb:6c:b7:bc:35:1f:b8:0e:2f:f4:f3:
0e:af:1a:68:e6:53:27:cd:a5:ec:27:ea:fb:88:eb:
ce:67:c3:eb:a9:49:59:ce:f7:6b:e7:0b:a4:73:ba:
ef:dc:5b:a1:e8:64:b3:ac:b5:c3:c4:cd:89:87:b4:
be:81:e5:c9:cd:a3:21:df:18:54:93:ae:88:dd:45:
28:66:c0:16:50:3c:ed:f5:18:61:60:d4:7a:34:4b:
19:a2:07:d6:6f:da:cd:52:a5:21:b4:7a:68:3b:99:
bc:e5:be:96:11:11:6d:67:cd:97:7d:63:a6:51:2f:
af:84:e7:9d:a9:0e:8d:c7:50:72:c5:39:9a:e1:05:
d7:42:5f:8b:84:f8:4e:d5:1c:57:3a:ed:d3:ae:85:
62:27:5b:4b:e8:e6:95:35:bc:70:ef:af:d3:43:25:
09:bb:32:da:97:ac:53:78:43:b3:97:52:72:6a:80:
e7:e0:c2:fb:e3:d2:2b:73:93:21:75:90:23:fb:fa:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0F:54:C2:5A:5F:BD:C6:A9:E7:0E:14:2C:CD:41:34:2C:BB:53:43
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6c:e1:d0:dc:da:f7:88:d2:63:db:4e:be:84:9c:e2:6b:cf:
df:29:c7:71:38:7a:04:56:8a:22:72:d6:21:d9:50:50:71:65:
72:81:6b:6b:3d:ad:29:c6:d2:4e:18:a9:9c:bb:c5:fc:49:6e:
35:20:db:53:5d:8a:d8:dd:c0:73:98:3a:b5:24:de:c8:fe:c1:
aa:46:a5:b7:b0:ca:72:75:42:a1:53:1b:60:e6:88:c4:0b:76:
02:ff:7a:bc:43:56:92:cd:e1:6b:46:e8:67:68:01:8f:3b:55:
39:92:3c:a2:b8:8a:88:0e:42:50:69:64:b7:f1:6d:a7:61:cd:
70:4a:d1:fe:7d:6c:92:ae:7e:3d:6d:fd:fb:80:9d:4f:90:69:
a9:c7:53:9a:88:b3:e6:b9:91:01:94:78:36:87:db:13:83:5d:
a0:56:68:b3:cc:4f:af:47:5a:56:61:54:6e:ff:b4:ad:a4:5a:
f6:55:2b:1f:bf:ee:a1:4d:53:38:5f:85:4d:b2:19:1a:29:a7:
28:2a:6f:72:66:15:46:ec:97:a3:1e:31:bc:8a:ab:82:78:c7:
0c:03:f9:c5:32:cf:08:24:60:db:c8:1c:91:ec:79:0a:bc:d1:
0d:f8:65:10:d5:3f:3b:94:18:23:cc:82:60:5b:56:bd:65:e8:
ef:e8:01:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWEyGYpZo3mIWi2A9HGIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MTYyMTAyZTVhM2MwYWVlYWI2M2MyMWVkOTJhODA1ODI2
ZGI3YWEwHhcNMjUwNjA4MDcwMTM4WhcNMjUwNjA5MDcwMTM4WjAzMTEwLwYDVQQD
EygzYzBmNTRjMjVhNWZiZGM2YTllNzBlMTQyY2NkNDEzNDJjYmI1MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv9bYwREpv8C7RhHQ+qniIizxdO2
2tsJzjigvQfpoFjwLCIh1VV2ZKCZlVEhWHThpux0IcUOJF+P0E6bFocg+2y3vDUf
uA4v9PMOrxpo5lMnzaXsJ+r7iOvOZ8PrqUlZzvdr5wukc7rv3Fuh6GSzrLXDxM2J
h7S+geXJzaMh3xhUk66I3UUoZsAWUDzt9RhhYNR6NEsZogfWb9rNUqUhtHpoO5m8
5b6WERFtZ82XfWOmUS+vhOedqQ6Nx1ByxTma4QXXQl+LhPhO1RxXOu3TroViJ1tL
6OaVNbxw76/TQyUJuzLal6xTeEOzl1JyaoDn4ML749Irc5MhdZAj+/rk7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwPVMJaX73GqecOFCzNQTQsu1NDMB8GA1UdIwQY
MBaAFKYWIQLlo8Cu6rY8Ie2SqAWCbbeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGIt
OWNlZTc3YmM1MjIyLzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83ZGQyNWQtYTUyMS00NzljLTk4OGItOWNlZTc3YmM1MjIy
LzEvcGhZaEF1V2p3SzdxdGp3aDdaS29CWUp0dDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGzh0Nza
94jSY9tOvoSc4mvP3ynHcTh6BFaKInLWIdlQUHFlcoFraz2tKcbSThipnLvF/Elu
NSDbU12K2N3Ac5g6tSTeyP7Bqkalt7DKcnVCoVMbYOaIxAt2Av96vENWks3ha0bo
Z2gBjztVOZI8oriKiA5CUGlkt/Ftp2HNcErR/n1skq5+PW39+4CdT5BpqcdTmoiz
5rmRAZR4NofbE4NdoFZos8xPr0daVmFUbv+0raRa9lUrH7/uoU1TOF+FTbIZGimn
KCpvcmYVRuyXox4xvIqrgnjHDAP5xTLPCCRg28gckex5CrzRDfhlENU/O5QYI8yC
YFtWvWXo7+gB4Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:15:14 2025 by rpki-client