Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: 0/MXm7IYWHEtVli84NcaCGY9cGP2afsc4+ajLrieeRo=
Subject key identifier: 8B:03:AD:75:EE:45:55:FA:89:2D:E4:03:9C:3A:1C:01:FA:B7:49:52
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 01983FBDDEA3B5A33BE35DC4D1970CBD2A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 125B
Signing time: Fri 25 Jul 2025 04:01:04 +0000
Manifest this update: Fri 25 Jul 2025 04:01:04 +0000
Manifest next update: Sat 26 Jul 2025 04:01:04 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: bSEopVhfXT6i3dyag2ADB1OyLU06sr/9xp3rImvQ6Mo=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:de:a3:b5:a3:3b:e3:5d:c4:d1:97:0c:bd:2a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jul 25 04:01:04 2025 GMT
Not After : Jul 26 04:01:04 2025 GMT
Subject: CN=8b03ad75ee4555fa892de4039c3a1c01fab74952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:7b:c4:90:19:9f:bf:e0:f6:ec:e0:9c:c4:
d7:f9:2a:47:1d:cc:a3:cb:d5:18:50:a9:27:c3:ca:
b8:c6:16:51:dc:3a:81:cf:88:0e:02:fb:62:6f:a5:
a2:06:84:26:c9:45:ee:96:a5:f3:7e:c4:f8:c8:17:
15:88:7a:31:45:7a:a0:52:38:6e:c2:8c:86:42:d6:
31:55:61:a2:3e:1c:87:1e:bd:0a:74:16:e2:69:94:
85:1e:93:9b:ad:a2:ef:3c:b6:52:3e:19:e4:b5:86:
04:5c:46:87:d1:02:87:cc:5a:af:3c:47:a8:d0:8b:
c3:39:7d:20:29:f0:4d:3f:87:61:43:e8:35:25:12:
6a:3f:aa:71:7a:63:68:c7:99:6f:14:3b:6d:48:fa:
d9:1f:2b:71:eb:5a:1a:1c:8c:83:a2:c9:c2:88:d2:
ad:84:68:bf:78:4f:f8:e1:94:f3:71:c2:be:b8:39:
97:64:f7:e8:93:d3:73:43:c5:c0:95:c5:28:e3:04:
b2:d9:8a:de:15:ca:36:91:8e:05:e3:a3:11:ad:9e:
62:01:3d:0c:5c:0a:a7:b4:4c:22:87:72:bd:11:58:
06:53:79:80:9d:0d:c4:db:64:88:0a:67:4d:7b:8d:
a8:9c:71:c6:9d:8e:32:66:22:be:4d:1d:7e:fc:b4:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:03:AD:75:EE:45:55:FA:89:2D:E4:03:9C:3A:1C:01:FA:B7:49:52
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:45:3c:2c:6b:5b:fc:2b:5f:8b:81:07:8c:64:29:03:c5:b0:
b5:b0:d3:dc:b7:c9:74:7e:5e:f6:59:7a:99:10:9d:52:50:b5:
6b:0a:55:d3:51:43:b4:67:fa:3b:76:fe:4b:d5:b0:0b:0d:9b:
45:fb:5c:cd:7b:0b:47:5f:ac:73:d5:ac:54:f8:c9:01:2b:dc:
13:f9:27:90:69:5a:ca:67:c0:10:71:a8:59:74:8d:e9:5e:8f:
a2:8c:ea:49:72:23:f7:90:74:01:bd:4a:ec:c9:e1:31:37:31:
35:2b:7a:a4:9c:26:1e:dd:3e:4b:a7:35:b7:b5:a0:bf:58:40:
55:f0:ae:ba:b5:e0:1e:0f:70:85:af:75:3e:96:6d:e1:97:4c:
59:47:9e:f2:35:e6:b5:ea:fc:1f:18:d7:0c:32:78:f5:cc:23:
a9:2f:87:da:97:61:ce:82:8d:c6:99:ed:f8:ca:dd:9e:02:0b:
59:a5:bd:9c:3b:3e:6d:44:39:fe:67:4c:d4:ea:27:09:da:b0:
a1:87:e3:a2:f8:f9:ca:f9:d3:0e:3a:ae:d5:89:2d:a3:1d:28:
04:7e:a7:e4:5b:a7:a2:33:dc:a9:c7:56:d2:08:f9:87:ff:47:
83:9f:28:7f:a8:40:d1:ec:5c:30:29:35:8e:4f:12:aa:62:19:
2b:b0:af:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:12 2025 by rpki-client