Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: 9NNPgDLhiY6sb/qmQzxC/3EekmXVFbcmYlT1fumUX/I=
Subject key identifier: 40:F7:6C:82:10:7B:D5:68:F6:21:27:3A:40:CF:29:9F:40:D1:9E:E6
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 0196876D7C8DA16E01BEE4A65BDA8CCD04F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 123A
Signing time: Wed 30 Apr 2025 16:00:21 +0000
Manifest this update: Wed 30 Apr 2025 16:00:21 +0000
Manifest next update: Thu 01 May 2025 16:00:21 +0000
Files and hashes: 1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: JSoIkK6DIboy8zcdC6qzkt5fPIjRYjXo1bObnrXMM8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:7c:8d:a1:6e:01:be:e4:a6:5b:da:8c:cd:04:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: Apr 30 16:00:21 2025 GMT
Not After : May 1 16:00:21 2025 GMT
Subject: CN=40f76c82107bd568f621273a40cf299f40d19ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:97:b8:06:30:63:ed:8a:75:ad:c9:87:ed:
3f:74:54:8c:f4:51:44:01:3a:c7:3b:1a:f2:6e:1f:
c3:6d:ea:81:e0:47:7f:ee:d6:74:62:16:ef:d0:64:
0a:4d:cb:62:45:98:77:d4:bf:11:83:6c:00:96:54:
cd:c0:b2:d8:56:23:77:de:cc:4b:5e:e1:c2:18:ee:
d2:5b:63:51:ab:33:67:47:e7:91:2e:ed:30:69:bc:
c9:ea:43:66:53:8c:fb:81:cd:69:61:84:d4:4e:63:
67:54:bc:07:bc:ee:3f:0b:41:f4:a8:88:99:5c:12:
d6:62:26:39:01:95:f1:da:e8:2b:76:dc:cf:fc:c0:
f6:dc:f1:61:a9:f6:84:5a:da:01:c4:5f:20:bb:d4:
27:b7:c0:86:8a:8b:72:a1:cb:8f:ec:e5:dc:62:fc:
4b:15:bd:6e:e3:9d:68:0a:fd:12:43:6c:c1:96:34:
dc:34:9d:63:d9:52:89:e8:2b:70:a6:cb:ca:c6:57:
80:a1:eb:67:3c:b1:bb:65:b7:7b:ef:13:04:da:b6:
40:36:62:97:e3:3e:90:19:09:52:14:32:70:73:ff:
2c:34:49:c1:45:20:b6:04:f1:fe:62:c7:ea:4f:dd:
dc:60:22:8b:ef:df:04:34:a4:c7:b9:3c:a1:ca:72:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F7:6C:82:10:7B:D5:68:F6:21:27:3A:40:CF:29:9F:40:D1:9E:E6
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b9:f8:0d:79:3b:cb:49:67:bf:89:53:21:ca:ec:80:fd:06:
60:8c:ea:64:6c:23:87:66:60:b5:64:eb:07:52:f6:ca:e6:98:
47:aa:87:89:02:6c:a4:ba:1d:ec:8a:b9:61:f5:ec:5c:f0:dd:
35:32:e4:97:b6:85:4d:4a:0c:f7:e2:94:4c:38:e7:dc:d1:79:
a7:ff:01:67:50:99:45:f4:13:50:2b:36:11:90:e5:de:aa:4d:
72:3d:d5:cc:47:08:75:08:b9:3c:a6:d8:10:68:76:99:49:51:
c9:1e:24:9c:08:73:66:1b:b9:34:bd:3c:01:95:f1:5a:35:35:
d6:5f:c3:db:f9:83:b4:91:d8:71:c7:ca:e8:0e:09:e3:0e:c9:
f2:3b:57:9c:f7:43:b0:dc:ef:56:53:a1:86:ae:20:cf:77:2b:
e5:1f:84:34:5f:8e:01:d0:74:d2:f1:f2:00:6d:9b:67:1c:90:
f6:1d:0f:c1:c9:8a:ed:86:89:18:4a:c2:ad:fd:b2:29:37:8f:
60:7b:99:3e:be:02:99:e2:4c:eb:c9:73:88:e9:f3:60:21:6e:
8c:04:da:43:32:5e:9f:ec:4c:77:79:6e:71:e5:92:77:42:34:
4b:e2:10:5a:9c:94:c7:33:ef:ba:b6:29:1d:64:2b:d5:8d:eb:
33:47:59:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:08:22 2025 by rpki-client