Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: bw5sxnTfuCaki+yOLrNSJw+YAjiimIgvuwMlym0eGJw=
Subject key identifier: 21:29:B6:77:79:42:D0:07:21:74:F5:68:37:99:62:DB:E5:E3:68:60
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 019A7225B6C4D4658E0CEC4093486BB37A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:05 +0000
Manifest this update: Tue 11 Nov 2025 09:01:05 +0000
Manifest next update: Wed 12 Nov 2025 09:01:05 +0000
Files and hashes: 1: K8gb2IugzK8IgsCtvVgzoDUY6tM.roa (hash: wR8LR0jtRTOAWt2SjVhqd0hsllRe9a/OzBTCiGqDDfI=)
2: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: BOh3ajL4NPhdJ7Spt6aCIR0ZmUD4P7lfNDD42D7Krco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b6:c4:d4:65:8e:0c:ec:40:93:48:6b:b3:7a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Nov 11 09:01:05 2025 GMT
Not After : Nov 12 09:01:05 2025 GMT
Subject: CN=2129b6777942d0072174f568379962dbe5e36860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cf:c9:76:19:f3:42:93:5a:58:a0:f5:0c:10:
a1:52:7a:6c:49:4f:b1:87:c0:7b:f1:85:8a:bf:56:
a6:1e:12:e7:9c:40:fd:0e:40:fb:68:b1:d6:7b:e3:
8e:2e:ca:b8:3e:f1:b4:7b:2d:7d:3b:1e:c7:f0:d0:
89:60:91:1d:ab:8e:d1:66:16:31:5b:39:4b:15:51:
84:8e:3a:ad:a6:e9:44:c7:27:3e:93:22:22:d2:b7:
41:06:e9:b0:ec:b7:c4:dc:65:2f:26:84:aa:4b:e2:
13:43:91:a4:96:e8:e6:e6:f1:e1:c7:a5:c8:79:fd:
77:91:17:51:be:44:2a:49:e7:12:e8:2e:38:04:49:
e3:54:a9:f3:b9:2f:b6:da:70:81:98:1c:5f:42:7c:
f9:db:04:82:ac:af:6b:f7:37:ed:a0:ce:d6:2d:16:
e2:a1:5a:9b:a2:1f:9c:f9:8d:56:39:fb:b0:70:b7:
ca:07:00:48:72:a4:98:2e:f5:ac:a2:22:ec:85:77:
c1:5c:05:07:d6:d2:a1:81:e5:d3:3d:71:af:13:19:
ed:81:6c:a8:ca:a6:c8:2b:b3:a4:ca:51:ac:7a:fd:
ae:8e:89:e0:b9:59:48:aa:bc:22:66:09:7a:97:5b:
9f:66:2b:91:b2:88:ef:5f:7c:99:a9:c8:f6:1c:92:
6e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:29:B6:77:79:42:D0:07:21:74:F5:68:37:99:62:DB:E5:E3:68:60
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:03:45:06:3d:85:f9:e5:21:0b:3e:27:8b:5c:d7:99:81:1d:
0d:4f:2c:12:58:b8:1c:c8:b8:d9:e2:1d:5e:7e:f3:4c:8e:45:
59:55:ce:d0:17:30:c4:b7:4e:4c:43:09:2c:2e:0b:2c:dc:2d:
9f:06:e6:25:67:a1:36:1f:12:75:5f:b4:6d:44:59:aa:d8:1b:
66:97:c2:d3:4d:15:d0:39:cc:4d:24:89:31:13:f9:60:64:fc:
1d:b2:05:95:fb:fb:8c:35:66:b5:be:25:ed:c2:7c:5c:d1:f0:
43:c3:b5:a6:a4:d6:be:50:bd:21:ad:d9:c1:13:e5:9c:6d:46:
4d:be:2b:fa:e8:60:dd:ff:4b:32:9e:43:03:98:8e:59:96:ee:
ef:db:3b:a9:cd:b7:bd:86:0a:96:a3:a6:d1:d3:82:a3:81:f5:
c0:07:2d:96:7b:99:2e:38:48:f6:c8:83:27:83:a5:d2:31:05:
e8:22:45:be:f4:5b:a4:34:b8:4f:c9:a7:ce:3e:bd:af:4c:98:
f8:c4:b4:3d:42:12:44:85:db:f7:6e:c5:3e:c6:c1:cc:55:01:
1d:b4:02:28:7e:8b:b4:04:fb:a1:b1:78:ec:e6:89:8a:6d:18:
5a:35:48:81:86:a9:ee:bf:39:39:46:20:ed:6d:66:46:41:c4:
13:6b:6d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:05 2025 by rpki-client