Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File: phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier: KG12gh0IEMngYb7Gz8FjRQBhZsiK44ISekTj5YW3JTI=
Subject key identifier: D7:22:D3:6A:7A:C6:F4:EA:65:42:CE:91:BB:C8:4B:BB:6D:0D:26:CB
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer: /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial: 019A0B25AA9A0E4048EE0D21BB351CC12523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number: 0210
Signing time: Wed 22 Oct 2025 09:00:08 +0000
Manifest this update: Wed 22 Oct 2025 09:00:08 +0000
Manifest next update: Thu 23 Oct 2025 09:00:08 +0000
Files and hashes: 1: TOxCM6S_arlfToUA479zh5nkrJo.roa (hash: vJ1XssSgRtqMk/Uwgd5Thnwzm2ARorFtzVtt1LqNVUg=)
2: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: EnJsI2dz11OpPw6IG3iw/dKzANOP7GAEahnzgcgCqBU=)
3: vnrJw0_RXF_3eNlI4J759GvRvbQ.roa (hash: Eb6f4bJUmWLqH0E5jlnZq5oby6oYj5i5BTlzMbxWrPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 09:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:25:aa:9a:0e:40:48:ee:0d:21:bb:35:1c:c1:25:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Validity
Not Before: Oct 22 09:00:08 2025 GMT
Not After : Oct 23 09:00:08 2025 GMT
Subject: CN=d722d36a7ac6f4ea6542ce91bbc84bbb6d0d26cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:b0:8d:a4:eb:d8:db:1d:47:34:46:12:5a:
0d:80:3f:8b:0a:e0:6e:4d:52:29:f0:4d:6d:1a:f6:
9a:87:80:f6:5c:f0:a8:92:d6:77:3b:43:af:54:21:
72:3e:cb:25:88:49:e8:24:9b:95:29:13:89:96:f1:
1d:cf:b6:c8:05:6c:da:82:d0:9a:bc:90:5c:94:a4:
59:38:6d:59:17:d6:e0:be:91:3d:7d:c8:7d:8a:95:
7c:51:b1:4c:87:65:a6:1c:b4:83:90:e2:78:e0:f2:
57:a2:8a:9b:df:05:20:01:70:5c:db:d4:ec:eb:47:
a5:f7:12:7f:40:0c:eb:dc:b5:ef:76:f7:e7:8f:5a:
0d:43:2b:e1:2c:59:34:1c:8a:54:52:70:27:a0:fd:
e2:3f:29:e0:a3:68:ca:72:d9:9e:83:6b:6c:d3:1b:
f4:be:94:72:82:11:0a:11:d0:f9:ab:79:01:ad:a5:
eb:bf:80:2d:68:33:d6:66:aa:d0:78:9b:34:8a:64:
ca:61:d8:71:cd:9c:42:3a:f4:0f:ba:f0:34:29:ab:
50:b2:b6:10:e3:72:c3:ad:76:c1:2a:f0:a9:f1:cb:
4d:fc:38:eb:08:dd:ab:83:35:37:9a:fc:e2:54:9e:
1a:c6:5f:c6:a3:b8:ce:77:3d:10:fc:82:4b:dc:65:
93:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:D3:6A:7A:C6:F4:EA:65:42:CE:91:BB:C8:4B:BB:6D:0D:26:CB
X509v3 Authority Key Identifier:
keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f7:a5:69:4f:30:26:02:60:89:96:81:97:e8:8b:d2:30:9b:
7d:e4:69:b5:88:88:b1:8c:24:0a:a3:cc:31:dc:8a:68:0f:48:
ba:64:95:45:1b:37:77:31:9e:50:20:cd:5d:7d:5c:f7:0a:0c:
9b:df:24:a5:82:d4:8c:09:26:fc:70:2d:68:f1:f5:b4:fc:6d:
c2:32:59:b5:15:1b:08:ee:05:32:b8:9e:94:dc:ec:39:39:93:
bb:06:ed:af:3c:74:d3:80:96:d3:b8:66:26:6d:d6:a1:46:ca:
10:e7:0d:36:0f:a3:8b:af:27:f8:9b:b4:16:ec:22:79:81:27:
18:fa:8f:01:e7:fe:43:43:d6:8e:28:40:ee:7b:75:13:52:73:
f7:35:53:43:10:6a:e5:26:a4:9f:19:c4:d8:aa:ce:90:fb:3d:
89:d1:13:01:42:ec:53:f0:3c:76:7d:f2:d2:ee:43:b7:e7:c0:
ab:02:49:c2:03:1d:ef:6a:d4:51:bf:c8:88:3d:25:e7:44:48:
ed:b5:2f:af:eb:b1:02:05:3d:30:6d:29:9d:c0:36:55:61:b3:
ef:b0:46:3e:54:08:af:aa:2c:c5:9a:71:3d:b2:66:c3:a2:f7:
9d:62:ee:56:aa:e9:61:51:85:da:d4:23:a9:84:d2:ff:4b:72:
1a:33:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:38:44 2025 by rpki-client