Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: QlDVn8/UAIIj2+Rx0Q+74KjjlN0zZ5TRBC+pSUeHGms=
Subject key identifier: 5C:7F:23:EF:A2:26:91:00:50:F5:24:CA:EB:E7:DE:C9:70:DA:72:7E
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 0197462FDA83621C5722487F841495B45CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 17:00:30 +0000
Manifest this update: Fri 06 Jun 2025 17:00:30 +0000
Manifest next update: Sat 07 Jun 2025 17:00:30 +0000
Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: HcvCyBfgS8M8mUcGmljqBNeZAh5dJ1pAlER02yln7gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:da:83:62:1c:57:22:48:7f:84:14:95:b4:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Jun 6 17:00:30 2025 GMT
Not After : Jun 7 17:00:30 2025 GMT
Subject: CN=5c7f23efa226910050f524caebe7dec970da727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:ef:1f:84:72:61:ef:93:f9:fc:e6:aa:40:
86:7c:38:82:9e:7f:02:a1:20:f6:bf:e2:7c:b8:8c:
4b:fb:06:2d:a9:57:19:38:39:bd:bd:f6:10:52:9c:
da:ed:7b:a3:87:a4:39:27:40:83:9d:4b:25:c6:d9:
82:3d:21:09:27:24:29:4b:1a:86:18:97:3b:a8:3e:
72:e5:13:1a:8a:87:f5:7f:23:5a:f6:8d:9a:b6:fd:
a5:32:1c:cb:93:8a:1e:7e:63:dd:dc:7f:f3:23:91:
67:12:d7:9f:04:d2:49:12:97:33:d7:9c:04:c1:75:
7b:5c:77:22:64:74:48:a3:1f:d3:4b:2c:e3:98:a0:
58:83:15:44:e9:a3:db:2a:9b:5d:db:a0:69:9c:b6:
66:4e:fa:80:3f:d5:c4:bb:e7:9a:e2:48:a9:09:a9:
21:15:68:38:f6:ce:a1:a5:09:19:81:ce:95:d9:1a:
86:db:8b:ed:85:4a:50:30:89:d0:4e:e8:fb:af:9e:
d1:ad:15:d3:8a:80:f8:52:0c:35:7f:2f:3b:f9:e8:
34:c7:1b:6c:f5:5f:57:f7:eb:86:78:70:11:a4:a1:
bb:3e:ce:c2:b5:98:71:92:88:e3:96:46:97:ee:1a:
a4:76:99:f2:3c:47:c1:db:f7:e5:a2:0b:24:43:be:
64:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7F:23:EF:A2:26:91:00:50:F5:24:CA:EB:E7:DE:C9:70:DA:72:7E
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:74:9d:b2:7a:dd:61:66:1c:f8:76:c5:3a:ba:c2:40:d0:5d:
88:18:e7:78:e8:82:11:93:a7:f4:ad:f3:4e:a0:7a:a9:6b:3f:
ba:c6:57:3f:ed:77:cd:90:38:8a:3a:0b:a2:1b:65:52:52:31:
f3:f6:70:9e:62:db:55:21:7f:b8:84:4f:aa:2a:d6:95:2e:53:
78:d8:46:e5:f2:5f:ea:bc:a7:46:43:aa:e7:9a:f4:7e:8c:6e:
89:af:ef:85:ad:eb:20:48:a2:dc:cf:44:ea:ed:29:f4:24:a5:
f1:de:0e:be:8b:c6:f1:cb:e7:b2:27:c5:15:1a:92:56:dc:7c:
2d:c9:a7:67:25:24:44:69:16:0f:f3:7c:78:9d:b9:c2:e0:4a:
f1:a2:6f:4a:7a:7c:6f:fb:03:a0:4d:23:9c:6c:56:03:03:ae:
24:c8:eb:c7:00:16:4f:da:cd:dd:58:f5:13:26:28:11:51:1a:
69:78:1f:e2:8a:68:81:1b:b6:c4:1f:26:c6:e6:92:39:16:2c:
ff:da:aa:c6:83:c5:11:43:33:9f:fd:e8:3c:fe:b4:ed:57:4c:
b4:a7:b2:e3:c2:9c:e9:5b:49:67:11:d2:60:d3:b5:f3:1b:db:
50:7b:a7:2a:69:8e:be:64:2c:a0:c4:eb:f7:18:fa:4e:f2:c1:
fa:82:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:39 2025 by rpki-client