Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
File: phqPZno93b1KNSMY2PBgbEbp8GM.mft (raw, json)
Hash identifier: smDl+JoIyHj0zfZe4gTyVONsjl1KRkHhj5Z1b9GW7CM=
Subject key identifier: CE:76:9A:47:84:A0:04:97:91:16:CE:76:22:72:13:36:83:7B:0E:75
Authority key identifier: A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
Certificate issuer: /CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Certificate serial: 01965537E7A13402414766D07AE4D102F13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 22:00:49 +0000
Manifest this update: Sun 20 Apr 2025 22:00:49 +0000
Manifest next update: Mon 21 Apr 2025 22:00:49 +0000
Files and hashes: 1: 1UVKiNRMJ_HImWl4v8Xm_ov2alc.roa (hash: 5flJUckS677lE7riT489EDvVCL32yj3m5+tviIp0Aik=)
2: ZmD1TA5j_WUZpHewze6nukzZJsg.roa (hash: +71Vr/FTpakGGRIUTsx4iBEKymM4Qh918F7HPx6zt+Y=)
3: phqPZno93b1KNSMY2PBgbEbp8GM.crl (hash: Z/6SyuBACNXPhSj+VmOqRmFT/5joxr9enmb9ldpHkr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:e7:a1:34:02:41:47:66:d0:7a:e4:d1:02:f1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61a8f667a3dddbd4a352318d8f0606c46e9f063
Validity
Not Before: Apr 20 22:00:49 2025 GMT
Not After : Apr 21 22:00:49 2025 GMT
Subject: CN=ce769a4784a004979116ce7622721336837b0e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:d2:c9:e9:f3:47:ae:50:b6:db:85:bc:88:
ab:de:2c:ee:d1:45:ab:1d:3d:a1:a1:2c:60:03:ac:
ec:cd:68:f0:6b:67:28:56:c3:5d:d1:ef:78:de:cc:
9b:5c:33:b6:6f:06:c7:9b:bc:d7:4d:a6:ee:d0:b3:
09:8b:3a:9e:74:bd:4f:82:f5:65:b2:e9:c7:7d:c8:
93:e1:a2:4a:a8:4c:9a:0e:99:25:19:b7:3a:ce:96:
17:3c:b8:d5:2d:64:3d:5e:a8:86:d4:35:75:2f:a7:
68:23:89:fb:78:c0:4d:a1:9e:3c:e0:b5:c0:80:1d:
04:f0:0d:5b:f1:87:d8:f7:0d:e8:75:87:72:26:41:
c9:4e:e0:c8:75:5d:af:94:16:ca:fe:76:f6:39:36:
3d:6d:47:9f:2c:89:15:7f:64:7b:b2:e6:ee:0c:c3:
cc:92:9e:b8:99:59:ea:70:5f:69:52:ca:e9:3c:aa:
e3:84:31:d6:40:e3:5d:f6:b2:25:c6:8d:d5:92:59:
e6:81:20:ab:ea:ae:88:49:51:3c:24:8a:7e:13:bc:
20:6d:ff:95:b2:7a:d5:e8:21:fa:27:c9:49:56:27:
c2:b2:98:1b:a3:8e:02:8c:4e:2c:7d:61:63:f3:1f:
60:0f:58:d8:89:a4:80:11:73:81:06:ce:02:c1:85:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:9A:47:84:A0:04:97:91:16:CE:76:22:72:13:36:83:7B:0E:75
X509v3 Authority Key Identifier:
keyid:A6:1A:8F:66:7A:3D:DD:BD:4A:35:23:18:D8:F0:60:6C:46:E9:F0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phqPZno93b1KNSMY2PBgbEbp8GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/ce88a2-eb87-42a5-916d-b56bb0647868/1/phqPZno93b1KNSMY2PBgbEbp8GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:12:57:85:3a:85:c3:61:65:0e:af:be:90:42:15:17:6b:48:
60:91:7e:3a:20:9d:2d:e0:a8:84:0f:7a:f5:7d:86:37:91:a4:
6f:6b:ae:fd:48:08:95:31:ac:91:c5:1c:32:8d:6b:85:f7:c0:
d0:49:91:19:bf:7f:0b:3b:35:36:4b:64:d9:d9:62:1a:af:ce:
01:9d:0b:e0:33:49:4b:44:69:92:81:84:59:13:84:6b:b0:66:
7b:4a:6a:6f:99:aa:f3:25:aa:6f:7d:b2:07:ad:1a:94:ad:23:
c9:35:bb:d0:80:f4:12:5d:31:5c:02:53:0b:0a:2b:25:6c:c0:
1c:c0:cc:71:c2:4e:d1:73:5f:63:a3:85:65:26:58:d1:e4:ea:
b8:90:f9:fd:c9:f1:9f:e9:ea:b3:a6:0b:42:31:93:eb:c7:15:
cf:f8:5d:f8:c5:55:11:62:4c:9c:c4:1e:2b:17:37:c0:5f:60:
f9:20:03:b9:aa:74:6f:3d:9d:23:7a:9e:5e:7f:94:34:16:03:
e0:f2:df:25:f8:46:a4:67:73:22:88:e6:7f:ae:c1:5a:7a:7e:
b0:2e:51:ea:f8:e1:44:ff:00:14:92:bd:e2:6b:b4:40:43:7a:
be:89:e9:70:5d:bd:8c:40:fb:5b:3e:8d:49:09:dc:d4:ec:99:
ad:c9:64:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:51:11 2025 by rpki-client