Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File: phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier: hdOJec66q0pgxjvqVRsVFr0ecfoOVdTIGOwBYcRixwg=
Subject key identifier: 5C:30:17:CE:E9:2B:0C:94:33:B0:6B:D8:3C:7B:3F:E6:E8:8A:92:17
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial: 019748C35E0637048B1CDF6D7BD86B5C8501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 05:00:52 +0000
Manifest this update: Sat 07 Jun 2025 05:00:52 +0000
Manifest next update: Sun 08 Jun 2025 05:00:52 +0000
Files and hashes: 1: _6cfi2Dj44vxaZWzfEwd2jk1pu4.roa (hash: 0LoAOyQFdU27wEYvA4eRFUQBIfRX8L27NeM+jRnEJAQ=)
2: _TJtE7-5a5UX2DefIW3iB1z5iGY.roa (hash: PhkMKp+FPGv2w6bMrKJv4pkTot0QbsXs9wqx+PCqH+s=)
3: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: y1B9fIheLQTW4c7p81cOfgHEAZOM8vzFI+AwLc/6P5k=)
4: sZajNmManlPTaNoPcFuaAKck-nc.roa (hash: R4UFS0zdQGwYoD2q6eTRAVpHRYbKs3X1MYzT1lIbryU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:5e:06:37:04:8b:1c:df:6d:7b:d8:6b:5c:85:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
Validity
Not Before: Jun 7 05:00:52 2025 GMT
Not After : Jun 8 05:00:52 2025 GMT
Subject: CN=5c3017cee92b0c9433b06bd83c7b3fe6e88a9217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:b7:a9:e4:67:6a:cd:2d:29:b5:7b:f3:40:
24:c4:a3:fa:23:62:dc:34:ae:e3:8d:e1:03:5e:48:
fb:17:14:0f:39:d4:34:1f:3b:9c:d8:f1:06:96:68:
de:cb:55:c1:1e:17:02:46:dc:ac:60:3f:21:b1:9a:
67:17:5f:09:10:9a:dc:47:b0:fd:0e:55:4c:90:87:
42:0f:da:42:f2:0f:4d:1b:13:b5:b9:79:31:05:1c:
e9:9f:4c:5d:8f:13:60:8c:51:62:a7:3d:d3:da:ff:
f5:e9:ac:02:20:3f:e8:95:12:54:0d:98:c6:03:03:
a4:d1:b1:2b:01:36:59:b7:1c:15:46:54:88:79:6c:
12:5b:49:4e:de:5a:aa:b3:35:7a:44:4e:46:2a:20:
f1:ea:ff:63:de:f0:be:e3:57:88:34:fe:3b:8a:e7:
4b:dc:5c:21:b4:f5:1e:d6:b0:bb:fb:89:a8:ef:6e:
41:6f:4b:9a:6f:7f:bc:2a:be:95:9e:d4:0e:00:a5:
5e:ba:51:66:72:96:f2:d6:4b:3d:19:f3:80:ab:09:
64:39:50:9a:56:73:fc:c8:70:36:99:49:25:72:6e:
e7:fd:18:1e:99:67:1f:1f:29:cb:40:5a:1b:2e:67:
b8:e1:4f:af:65:6a:70:b8:2b:66:18:32:50:6b:51:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:30:17:CE:E9:2B:0C:94:33:B0:6B:D8:3C:7B:3F:E6:E8:8A:92:17
X509v3 Authority Key Identifier:
keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5d:5e:2f:7d:de:a6:fe:48:1d:84:1d:78:fa:3d:a7:cd:ff:
68:cc:17:6d:8c:7e:22:37:78:8b:d5:35:50:e8:56:83:a7:cc:
29:c9:aa:24:16:60:ca:2a:c0:0c:f6:6e:f4:20:01:00:37:46:
23:8e:ca:db:a9:19:16:17:2f:18:7f:87:ea:6b:ee:28:69:7a:
0d:57:db:b3:1f:c2:e2:ba:ea:9b:03:1c:6b:fb:99:92:08:56:
8c:56:e9:d8:b6:3c:d3:12:61:01:7c:9c:05:f0:b2:71:fc:03:
34:25:46:81:28:75:e1:be:c3:3d:9b:95:26:a8:5f:e8:56:23:
2f:f9:ec:33:52:4f:fd:29:98:29:4e:68:a7:3d:7a:93:b9:88:
11:13:28:39:af:a5:be:8b:4f:d8:ac:eb:36:68:f7:ae:39:7b:
04:db:0b:1d:08:22:99:10:96:c2:ac:69:39:cd:b9:74:fd:0a:
96:9c:41:93:72:8c:62:ba:92:91:8a:38:6a:5a:c5:bd:11:40:
70:8f:4a:11:5e:1a:97:a7:f8:c9:76:d4:f8:de:48:58:ec:69:
bf:d2:c9:52:91:28:21:9c:1d:ad:87:3c:63:ab:98:92:67:57:
1a:b9:f9:a8:86:f3:14:c1:1d:3a:3c:ae:32:1f:ad:a2:e8:70:
10:bd:08:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:32 2025 by rpki-client