Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: wTGiL7XEwy3yx6BUGQoIfdv6GTaS4FAsI97qXRlocK4=
Subject key identifier: 61:61:A5:5D:60:BA:EE:3E:4A:C8:4B:47:11:E9:11:EC:72:EE:56:F2
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 01976F2C400DBA74E9D3366B78DE5F55BEC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 11EF
Signing time: Sat 14 Jun 2025 16:01:00 +0000
Manifest this update: Sat 14 Jun 2025 16:01:00 +0000
Manifest next update: Sun 15 Jun 2025 16:01:00 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: NAak1JdcSB/KceG5bnFIfWkMWEIVxGA0CtyYhK9JNHA=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:40:0d:ba:74:e9:d3:36:6b:78:de:5f:55:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jun 14 16:01:00 2025 GMT
Not After : Jun 15 16:01:00 2025 GMT
Subject: CN=6161a55d60baee3e4ac84b4711e911ec72ee56f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:3a:2b:a8:85:3a:4a:96:7a:46:1c:d2:70:
d0:93:c4:ab:26:86:fa:32:b8:dd:59:8a:4f:6b:8f:
ba:be:f4:45:c5:78:54:47:d3:5f:40:b6:3d:f4:a7:
64:7a:6c:65:72:f0:e5:79:c7:f1:f4:b9:ad:e8:db:
7c:3b:14:63:d2:0c:53:d6:39:0b:6b:e5:1f:2c:d5:
d2:de:9a:f0:47:10:56:a2:b0:75:d7:bf:4a:aa:79:
4f:fc:29:8e:8b:2f:a5:25:ad:6b:e2:28:30:ff:56:
c3:22:d0:c2:ff:99:c6:d3:c1:b3:48:0f:c3:c4:78:
41:1a:cf:b4:fe:c3:ee:d5:ff:bb:1a:82:26:03:aa:
eb:bd:98:18:8b:8a:b4:cc:89:79:d6:c4:de:01:de:
2e:69:9e:dc:61:1a:cf:9b:98:6b:19:e5:f4:ac:63:
48:94:c0:a0:ce:c5:4c:69:80:c5:c1:3b:dd:cd:27:
3e:0f:56:49:e4:a2:52:45:a0:10:1f:5a:79:c0:05:
84:ae:c6:60:66:6c:5b:0e:04:02:93:d1:8d:76:94:
55:af:e1:c6:32:03:14:a7:ca:01:91:49:0b:32:bc:
ca:60:0b:3e:37:10:23:19:eb:11:04:9f:af:22:91:
81:0b:4b:a4:90:0f:fa:32:9a:15:ac:0f:b3:1b:a8:
3d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:61:A5:5D:60:BA:EE:3E:4A:C8:4B:47:11:E9:11:EC:72:EE:56:F2
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:09:7e:49:45:8d:9d:42:9c:9e:cc:f0:9b:5a:9c:f3:1b:2e:
62:13:1e:5d:90:dc:44:19:cb:ea:b7:11:49:1a:c7:ab:4b:33:
d5:0a:4b:d6:13:a4:32:d0:2d:67:fb:8f:df:ce:d8:d1:2f:41:
02:c1:d0:a2:e9:6f:40:57:c4:85:ef:dc:8d:7d:77:34:88:75:
47:1a:35:e6:16:73:00:96:c5:fe:29:5c:75:23:88:25:47:56:
43:6a:8b:e8:ba:4d:86:e6:06:dc:eb:4f:b9:1c:6a:ae:e3:c1:
2b:92:7c:1f:0a:e5:b3:2f:a7:4e:25:de:77:8a:7c:b3:e5:4e:
d2:ea:cb:22:3f:69:8f:90:ac:3d:99:8d:4d:62:19:2c:59:59:
e7:ee:a8:6a:34:91:3d:86:43:d1:d2:d0:be:7e:75:ce:0b:18:
67:54:aa:18:cd:c7:b8:ff:00:96:cc:a7:76:ed:61:59:41:21:
a9:e2:9f:d3:7a:d7:18:b6:cd:3f:ca:1b:1e:f7:34:26:85:69:
49:07:af:f2:87:64:c3:4c:e1:eb:ec:24:a4:0a:e9:e0:0a:2b:
90:ee:a2:8b:1b:57:3e:1c:f9:89:4d:3d:1f:f5:47:59:f9:af:
a4:1c:14:91:12:50:96:9b:6f:08:de:4b:f3:f1:ab:a7:73:0c:
11:59:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:27 2025 by rpki-client