Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier: EOCyHQq5HretsNfLOL7kcjn6YphnemyulAsoA0b/zus=
Subject key identifier: 08:C6:CA:CE:42:18:E3:0C:73:6A:AB:B1:17:AD:40:BF:99:F0:0B:45
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer: /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial: 01961ADA77782EF6EA88A560146BED37BB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number: 14E1
Signing time: Wed 09 Apr 2025 14:00:47 +0000
Manifest this update: Wed 09 Apr 2025 14:00:47 +0000
Manifest next update: Thu 10 Apr 2025 14:00:47 +0000
Files and hashes: 1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: qhG3Y0MBvd+JMdqlGjsukHq1RZN7u72b0ugA2wnm7k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:da:77:78:2e:f6:ea:88:a5:60:14:6b:ed:37:bb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Validity
Not Before: Apr 9 14:00:47 2025 GMT
Not After : Apr 10 14:00:47 2025 GMT
Subject: CN=08c6cace4218e30c736aabb117ad40bf99f00b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:75:f8:aa:4c:b3:97:12:c5:34:89:98:0f:
db:d9:9a:5a:16:71:94:56:a9:f3:46:ce:fa:b7:59:
e4:41:0d:77:18:7e:d3:88:ac:4d:7b:6e:07:44:fc:
59:bb:2d:88:ff:e1:cb:62:18:dc:3f:e8:d3:ca:e4:
94:4e:71:de:75:a5:68:00:ee:2a:d4:c8:cc:64:78:
b3:d6:e4:eb:9e:6b:b8:16:f1:4d:51:11:82:38:19:
65:28:c3:4e:d9:57:1b:a1:f4:93:97:80:2f:9f:10:
a8:00:94:ab:73:15:bf:6a:27:00:51:40:af:81:b4:
3f:7e:dd:54:94:99:18:6b:4f:e0:02:16:8d:0e:7f:
7f:1f:8a:2a:5c:8f:9f:ae:43:92:42:46:20:6e:63:
e1:69:c3:42:cf:76:2d:eb:27:cd:44:34:50:75:2c:
60:12:d2:da:b9:29:09:6b:aa:7f:2a:f0:b0:2c:b0:
ef:16:18:85:fd:2b:3d:c0:36:1e:c8:91:04:4f:12:
df:80:38:05:db:01:f1:66:d4:fd:3d:5c:76:a3:97:
1f:b0:74:ce:c9:f8:ec:23:42:1e:d8:07:98:c5:8f:
79:7b:2e:e7:55:57:27:6f:18:d4:b4:00:35:4b:93:
19:1d:89:fa:03:32:52:be:20:e8:a1:1b:8f:64:7f:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C6:CA:CE:42:18:E3:0C:73:6A:AB:B1:17:AD:40:BF:99:F0:0B:45
X509v3 Authority Key Identifier:
keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:fd:f4:a8:ce:5b:78:98:94:94:96:3c:a3:72:92:03:36:
df:a8:40:9a:c5:d2:cb:92:4a:72:1a:a9:6a:8a:f1:8b:76:a8:
8f:c1:9c:91:0f:02:7b:f5:9e:08:69:ca:ec:6a:f0:d2:d3:a3:
00:67:93:7b:3e:2f:53:67:37:30:ca:17:41:8a:0c:c8:9c:87:
39:73:71:dd:9a:f2:d3:95:5f:e8:bd:37:99:c2:6f:5b:c3:9c:
72:37:50:fa:6a:67:63:56:09:cb:6b:39:a2:33:36:0c:c7:df:
12:22:3f:73:c2:3e:9a:2c:29:1f:0d:ae:6b:52:34:d4:35:e8:
4c:fd:0f:c7:8b:78:76:86:ae:f6:ad:e3:d8:a5:09:bb:4c:03:
92:5e:8b:6b:b1:1a:52:6e:f9:db:b4:a3:23:b5:f0:c8:0a:2d:
cb:e3:89:7f:82:21:ee:89:02:5d:dc:c0:fe:ce:10:2d:5a:b6:
8e:f2:6e:4b:a4:5f:cd:94:54:4e:89:a0:2b:5c:27:34:f3:56:
53:9d:12:58:de:a4:62:78:fb:6b:d0:d5:60:57:2c:03:a1:41:
ac:be:93:e8:07:f9:6c:0d:06:01:0d:c0:0e:a3:1c:00:15:e7:
bd:ec:a4:20:c7:96:50:97:41:2e:3b:6c:98:5d:d9:cd:d9:a3:
8b:0d:d0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYa2nd4LvbqiKVgFGvtN7thMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMTkwNDgzNDhkN2VjYjlmMTE5MTA4MDU1NWJmNDQ1OGEx
YTU0ZTcwHhcNMjUwNDA5MTQwMDQ3WhcNMjUwNDEwMTQwMDQ3WjAzMTEwLwYDVQQD
EygwOGM2Y2FjZTQyMThlMzBjNzM2YWFiYjExN2FkNDBiZjk5ZjAwYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ht1+KpMs5cSxTSJmA/b2ZpaFnGU
VqnzRs76t1nkQQ13GH7TiKxNe24HRPxZuy2I/+HLYhjcP+jTyuSUTnHedaVoAO4q
1MjMZHiz1uTrnmu4FvFNURGCOBllKMNO2VcbofSTl4AvnxCoAJSrcxW/aicAUUCv
gbQ/ft1UlJkYa0/gAhaNDn9/H4oqXI+frkOSQkYgbmPhacNCz3Yt6yfNRDRQdSxg
EtLauSkJa6p/KvCwLLDvFhiF/Ss9wDYeyJEETxLfgDgF2wHxZtT9PVx2o5cfsHTO
yfjsI0Ie2AeYxY95ey7nVVcnbxjUtAA1S5MZHYn6AzJSviDooRuPZH8v/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjGys5CGOMMc2qrsRetQL+Z8AtFMB8GA1UdIwQY
MBaAFD4ZBINI1+y58RkQgFVb9EWKGlTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYt
MDJmMzVhZDg3N2YzLzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hZjI2MmMtZTJjZC00ODQxLTg1MGYtMDJmMzVhZDg3N2Yz
LzEvUGhrRWcwalg3TG54R1JDQVZWdjBSWW9hVk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZST99KjO
W3iYlJSWPKNykgM236hAmsXSy5JKchqpaorxi3aoj8GckQ8Ce/WeCGnK7Grw0tOj
AGeTez4vU2c3MMoXQYoMyJyHOXNx3Zry05Vf6L03mcJvW8OccjdQ+mpnY1YJy2s5
ojM2DMffEiI/c8I+miwpHw2ua1I01DXoTP0Px4t4doau9q3j2KUJu0wDkl6La7Ea
Um7527SjI7XwyAoty+OJf4Ih7okCXdzA/s4QLVq2jvJuS6RfzZRUTomgK1wnNPNW
U50SWN6kYnj7a9DVYFcsA6FBrL6T6Af5bA0GAQ3ADqMcABXnveykIMeWUJdBLjts
mF3Zzdmjiw3Qsw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:13:30 2025 by rpki-client