Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: C+r4vz+tlAQIFWPZfY5pfBzpP2IhYUsU55neOLVOYTI=
Subject key identifier: EE:94:10:E2:59:5F:AD:C5:C2:FF:DD:0B:C8:DA:38:44:C5:58:38:3C
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 01987B9D6A91AC4A3C7EBA1F1BF629E3E46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 127A
Signing time: Tue 05 Aug 2025 19:02:50 +0000
Manifest this update: Tue 05 Aug 2025 19:02:50 +0000
Manifest next update: Wed 06 Aug 2025 19:02:50 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: 7qnnTO2wSp+eist8zONZbE1XYKXT29UQkYz5qM3zTIQ=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:6a:91:ac:4a:3c:7e:ba:1f:1b:f6:29:e3:e4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Aug 5 19:02:50 2025 GMT
Not After : Aug 6 19:02:50 2025 GMT
Subject: CN=ee9410e2595fadc5c2ffdd0bc8da3844c558383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:bd:f8:09:37:9e:5b:0f:4e:c1:92:97:bc:
21:a2:2c:ce:bf:e6:93:a9:4b:31:ad:2b:c2:11:25:
dc:c5:ae:96:90:04:25:88:33:0c:07:6a:9d:ba:91:
97:79:95:29:57:97:36:a1:c0:8e:97:18:1f:49:88:
e1:e8:2a:eb:a1:f8:14:37:36:2c:34:74:71:34:7c:
ef:1f:3c:84:b2:be:93:98:59:67:1e:e6:3b:9c:83:
56:02:df:3e:6d:0c:d0:3d:1d:2d:8e:82:ad:c5:0e:
c4:8b:fd:25:6c:7d:fd:6d:d6:e5:e7:ce:69:14:e6:
83:64:61:a7:03:b7:1d:72:14:ec:4e:2a:2c:46:11:
7e:e5:dd:e7:95:f0:bc:b6:50:e9:94:7c:ba:df:2c:
c3:6f:b2:6f:d0:f1:50:e2:d6:cc:eb:68:dc:93:a8:
7b:ab:38:98:ad:e9:14:ec:6d:d4:94:11:64:7e:86:
2f:0e:70:09:81:54:f5:ef:2f:bc:29:3c:ef:ab:e0:
ff:e0:12:e9:91:f9:01:90:69:98:0f:64:4d:41:1f:
2b:56:19:0f:f5:69:18:9b:d7:1d:52:2d:66:e3:30:
58:82:52:02:72:6b:72:d1:6f:02:5e:90:5a:7b:f6:
f1:a1:bb:03:12:9e:07:81:7b:8d:d3:3f:56:53:2f:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:94:10:E2:59:5F:AD:C5:C2:FF:DD:0B:C8:DA:38:44:C5:58:38:3C
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:78:97:95:cc:bf:9b:f7:0a:af:f4:ba:a4:3e:05:5a:12:85:
f5:c4:20:81:ef:66:57:e8:ae:0b:05:23:26:3c:ac:b8:90:99:
c6:82:1d:b7:83:93:dd:66:56:ea:a8:ce:03:d7:a5:da:5e:5c:
24:b0:a0:8e:a2:0f:8e:74:d0:cb:77:99:b3:87:07:dd:b4:25:
38:a9:58:1c:26:2c:6f:27:31:d9:0d:d9:7b:e4:e4:db:2c:b4:
e5:97:05:3e:bc:d8:64:c8:03:9d:c1:75:83:8f:db:8d:c0:9e:
76:f9:fa:a2:fd:14:ad:90:7e:29:66:41:b8:26:37:ec:52:64:
14:a0:d6:06:04:ad:8b:1f:ad:b0:d6:cb:49:3a:e4:e9:63:22:
94:5c:49:de:32:9c:63:f5:e5:f0:ab:50:11:dc:0e:ec:43:88:
fa:5f:ea:08:03:25:43:a3:60:28:f3:b2:33:43:fe:30:3c:d9:
d6:3e:01:3f:a5:6b:3b:62:07:39:01:9c:10:d2:be:60:57:7a:
e0:ed:e3:f7:97:a7:b9:af:41:03:a7:d6:95:ba:b9:b7:87:64:
ba:1e:a4:3d:a2:2f:75:8b:5a:cf:cb:1e:d5:8f:e6:15:99:64:
4b:ef:8e:0b:ed:fd:d2:48:4b:6b:62:db:41:e9:ba:e4:f7:fb:
7a:d1:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:11:57 2025 by rpki-client