Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File: PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier: otKtCgJRvBR9lM7jieIhL/D75UINH9T++kz9eTdiAbY=
Subject key identifier: 06:71:E5:51:11:F2:F6:6C:67:AD:61:35:07:C7:D1:69:86:CB:3F:0A
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer: /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial: 0196846D1189D50AEF2E75E587968A322DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number: 098E
Signing time: Wed 30 Apr 2025 02:01:02 +0000
Manifest this update: Wed 30 Apr 2025 02:01:02 +0000
Manifest next update: Thu 01 May 2025 02:01:02 +0000
Files and hashes: 1: 8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa (hash: scssOWu2Z8G04tK1VSokYhRpEIxnZd24NU6YQjvW3tc=)
2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: 2cLRiEJFb9vasfQ9yooZ359KgS/lnX71wsMn1ADi/WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:6d:11:89:d5:0a:ef:2e:75:e5:87:96:8a:32:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Validity
Not Before: Apr 30 02:01:02 2025 GMT
Not After : May 1 02:01:02 2025 GMT
Subject: CN=0671e55111f2f66c67ad613507c7d16986cb3f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:d8:dd:59:7a:15:4d:b1:a1:e0:ca:44:fd:
44:84:97:9d:6c:81:2b:57:af:6d:09:a0:98:f9:4b:
f6:3b:1e:ba:ba:e3:ff:fa:15:72:21:05:86:99:a2:
6f:39:1e:af:e3:d0:84:53:28:99:2b:7a:af:95:1f:
f0:82:9d:a5:72:f4:8a:4b:2b:b3:2e:67:fb:92:1f:
b9:10:e9:f9:9e:18:b1:eb:8b:26:03:75:43:c5:2f:
bc:64:0e:10:b5:03:ec:b1:51:e5:c8:1b:1f:cd:70:
52:00:c4:3e:6c:26:43:6d:a0:47:fc:8a:18:e1:d6:
04:34:ad:d4:ba:ad:ca:b8:8a:8f:29:c2:f3:7d:b3:
eb:84:58:21:13:66:ce:f7:a0:dc:47:b5:35:aa:63:
19:3f:aa:ff:11:8d:2b:1b:73:22:d6:af:93:0d:42:
02:7a:b2:b6:46:79:62:31:17:a3:3a:f2:92:11:10:
81:10:37:8c:d5:d8:83:fe:8b:f0:7b:51:d0:89:8a:
09:c2:17:a8:f7:ef:70:88:24:38:35:70:e5:63:8d:
41:ce:d2:44:6b:48:d4:81:63:3e:02:fb:9f:59:13:
81:d7:2a:78:6e:81:a5:69:db:36:f9:ae:0a:a4:13:
6f:42:9a:49:79:b1:5a:c5:69:95:4e:1c:a9:15:3c:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:E5:51:11:F2:F6:6C:67:AD:61:35:07:C7:D1:69:86:CB:3F:0A
X509v3 Authority Key Identifier:
keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:77:5a:ab:f9:ba:69:c5:12:95:d5:b6:ca:c7:11:15:09:cb:
14:46:99:20:93:e9:d9:57:12:50:0d:29:a1:8a:f8:24:7d:cb:
04:9d:71:92:50:58:ed:02:bf:dc:f0:a4:43:cf:99:2a:35:6f:
f1:a9:2e:32:91:32:7a:0d:fa:16:58:6c:23:5e:ae:7e:51:c4:
b0:95:d0:a4:63:da:ad:42:40:45:4f:a0:b2:46:8b:b5:66:56:
00:0e:62:0f:9f:f4:8f:73:85:de:8c:41:05:ae:96:e2:23:84:
90:ae:5f:7c:c0:46:01:54:30:00:ca:90:9a:22:9e:82:c5:18:
3f:93:d8:a2:ab:35:f2:7f:8a:48:82:ec:6f:ae:b1:ff:c2:ef:
ce:1b:46:b1:c2:3e:5a:2a:63:e5:78:a2:b6:c8:4f:73:33:43:
5e:4c:8e:d7:f6:4a:5b:6b:ee:d1:ac:dc:94:b9:9d:c3:c1:ed:
54:93:1f:a2:73:fe:d8:9a:bc:57:38:3d:e6:7a:b3:ee:44:82:
49:07:e7:56:eb:12:08:60:cc:bb:33:d3:ea:16:8b:b4:ca:1a:
02:7f:70:6b:41:d0:d8:22:41:36:36:30:ba:cb:c9:70:db:66:
3e:a6:5c:73:6f:98:ae:8f:c0:26:ac:c4:e6:16:99:bd:2c:26:
b4:7c:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:30:33 2025 by rpki-client