Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: kfaehJ3bG2n5rK3XEJ4LpXwqqD96M5Fp6xQGuZyHRg8=
Subject key identifier: 96:2D:6C:66:D5:00:53:C6:6B:46:1B:15:BE:CE:0C:84:AC:41:75:1C
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 01976DABBEC1AF92B738588CD32BD43D1804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 0D86
Signing time: Sat 14 Jun 2025 09:01:01 +0000
Manifest this update: Sat 14 Jun 2025 09:01:01 +0000
Manifest next update: Sun 15 Jun 2025 09:01:01 +0000
Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: CPRvPy4bk+MN64i7nXhc4On9JKNkgrDfCAOnO1rfpAM=)
3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:be:c1:af:92:b7:38:58:8c:d3:2b:d4:3d:18:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jun 14 09:01:01 2025 GMT
Not After : Jun 15 09:01:01 2025 GMT
Subject: CN=962d6c66d50053c66b461b15bece0c84ac41751c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:42:11:17:09:4b:19:94:5a:a1:c8:f8:ca:88:
38:50:5d:49:fe:a4:6e:7d:f7:75:bf:9c:42:28:c6:
c6:85:d5:fc:90:9f:63:56:0e:dd:de:aa:5e:e6:5b:
ba:7d:4c:6c:45:41:24:2c:5b:f9:bb:14:90:1a:f0:
08:fa:e0:06:a9:68:a0:61:23:bb:71:01:87:93:30:
c0:e9:d7:39:48:59:99:3c:02:a4:83:c1:9b:44:b6:
a1:1a:65:fa:9e:2c:39:84:df:37:b3:b9:9f:66:d2:
21:5c:c9:fc:28:cf:d3:01:54:19:e5:71:4a:75:b1:
14:0d:3d:3a:36:28:86:6c:b8:c0:b4:28:4c:e3:b3:
11:10:fa:ca:14:f3:96:b6:4c:61:8e:7a:21:65:fd:
06:5b:cb:57:4f:93:e8:62:b4:93:ef:1b:56:79:33:
1b:94:b1:54:8f:e1:21:b7:1b:da:c1:b3:9f:91:34:
70:d4:84:07:35:dc:5a:a9:b5:31:24:79:86:f4:44:
c7:65:70:70:b5:2f:72:ee:27:71:37:21:15:e6:d8:
f0:a4:ff:2e:20:8c:98:db:ad:ae:cb:f6:ed:a3:e2:
63:03:50:bc:fc:f3:bc:70:34:c7:e5:8d:e2:0d:68:
fc:2d:39:0b:76:cc:12:26:7f:81:54:12:1e:cd:04:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2D:6C:66:D5:00:53:C6:6B:46:1B:15:BE:CE:0C:84:AC:41:75:1C
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d8:f4:b0:8d:a8:8a:ce:8d:5d:1d:ea:41:7c:a0:a3:2d:dc:
20:49:d6:48:85:ce:04:df:9c:9e:05:8f:38:0f:cf:90:1d:49:
33:5e:a9:7c:ea:27:b8:da:a7:65:ea:f3:6b:83:ba:8c:06:8e:
89:12:cb:c3:2d:af:8c:f9:81:94:69:3c:5d:41:fe:72:64:ac:
bf:1f:f7:ec:cb:00:07:db:6f:7a:a1:f9:31:4a:5c:48:6a:3b:
8f:79:04:f7:83:0f:86:51:0e:e9:dd:f2:56:91:6b:b1:1c:43:
d5:03:36:20:1c:c0:3c:2f:03:94:58:6f:68:f8:8a:7e:76:10:
3e:4c:21:ea:13:5e:ee:46:01:03:5a:32:29:af:7a:a7:fe:81:
59:93:1a:10:c5:4a:fd:88:4b:5b:72:4f:26:2f:a4:b7:86:c1:
30:c0:4f:d0:ff:78:c3:c5:98:ee:bf:1b:1b:c2:f8:13:81:2d:
3b:ef:a9:cf:d6:e6:3b:f5:93:89:fe:6d:1d:c1:d0:ba:76:68:
0a:cc:32:4a:65:53:ff:18:63:b2:a8:16:b3:a3:a3:7d:1e:99:
98:35:d3:06:84:81:2d:d6:36:a8:cc:bb:1f:05:28:74:ab:4f:
a5:21:c3:41:33:5d:fb:92:3a:b7:56:39:c4:69:92:4b:73:1c:
1d:9e:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:47 2025 by rpki-client