Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: X4TKdyo60PdlDtAPjVdAA8Y4QeOod5Hb9jyLNUyBd/c=
Subject key identifier: 90:65:E8:30:8F:1F:B9:F8:25:3E:75:A9:41:D1:22:DD:16:02:C7:B2
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 0196515B7DDF795A1996D080343270A93CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 115B
Signing time: Sun 20 Apr 2025 04:01:12 +0000
Manifest this update: Sun 20 Apr 2025 04:01:12 +0000
Manifest next update: Mon 21 Apr 2025 04:01:12 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: aD3xJQcC8XoL9V56MJmoAEzGJmX+8o3xAWBO8o4o8RI=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:7d:df:79:5a:19:96:d0:80:34:32:70:a9:3c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Apr 20 04:01:12 2025 GMT
Not After : Apr 21 04:01:12 2025 GMT
Subject: CN=9065e8308f1fb9f8253e75a941d122dd1602c7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:40:53:ab:64:5d:a2:7e:52:9f:d6:ea:1c:
7d:de:d2:ea:88:ff:4c:a9:c4:c2:9c:f6:37:58:e6:
ae:6c:9d:da:e3:fe:ed:8a:6c:20:f2:19:3c:a3:0b:
18:69:df:af:3a:a6:8a:dd:bd:49:84:b7:ea:ec:02:
02:bf:b8:51:4e:2d:e9:08:f2:72:c8:83:ee:f1:15:
16:36:67:2e:5f:5a:67:bb:0c:52:db:d7:c7:50:76:
b0:a8:9e:1d:80:cd:f1:31:95:2f:3d:0a:f3:b1:fd:
55:b7:2e:05:ea:58:f6:18:03:d4:8a:b7:93:6a:68:
96:2c:98:60:8e:a6:ce:1c:11:48:1e:95:af:65:20:
e1:df:5f:9a:7d:8e:d5:92:9c:cf:37:6d:a4:73:65:
47:83:9c:1f:1c:f5:81:a3:2b:cc:d2:17:3e:ea:65:
f5:40:5a:92:cd:a5:ab:17:e0:2a:22:59:9e:f8:d6:
69:29:21:1f:e2:b1:d5:16:0a:0c:d3:f6:01:ed:29:
3c:8f:ed:71:5e:c1:10:41:fc:92:98:f1:dd:a5:5c:
f2:e6:2e:d1:45:dd:84:cc:2f:91:ed:1c:a8:40:3e:
cd:7d:2c:06:8b:bd:a8:b4:1d:da:8d:cb:40:04:f8:
1c:d1:9c:00:0d:79:16:11:f7:4e:96:d8:d8:d1:20:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:65:E8:30:8F:1F:B9:F8:25:3E:75:A9:41:D1:22:DD:16:02:C7:B2
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:77:e0:6f:d9:e3:44:dd:9d:02:39:86:f3:b9:92:34:58:39:
e5:9c:ee:75:a5:bc:b0:3d:7e:c2:10:06:a6:fe:45:05:40:6a:
57:cc:d8:2e:a6:29:f1:26:ee:a1:f4:4d:f3:93:64:6b:bc:71:
82:b8:87:69:b9:0e:be:43:85:0a:f9:c5:f8:0a:6a:37:d6:c2:
f1:96:9d:a2:90:b7:80:18:8d:1e:64:97:42:33:22:1c:9b:3f:
b2:4a:4d:34:a0:84:59:25:1d:a0:98:1d:11:6a:58:e8:90:58:
8f:e2:2d:44:63:e0:28:74:de:78:07:b3:40:84:9f:d2:d3:5d:
cd:59:27:dd:ff:e1:3d:b7:4c:ff:78:2b:e4:30:bf:e3:a2:9d:
72:5e:a1:38:84:f8:2c:19:d8:8f:75:f8:52:6f:1b:90:6d:7f:
33:99:ee:be:dc:c5:c4:4a:c6:ce:c8:39:65:db:5e:30:6a:6c:
63:82:d9:bf:dd:17:90:d1:f6:b1:ab:30:c7:a4:d7:5c:6d:3f:
3f:75:40:10:8c:96:ad:0f:43:1f:99:5f:82:64:dc:d8:0d:74:
e1:06:8c:f4:24:5c:34:ee:8f:28:36:43:89:c5:96:38:6f:47:
f5:43:33:28:9d:70:f0:91:c8:94:24:8e:0c:7f:d3:be:95:ae:
54:79:36:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRW33feVoZltCANDJwqTzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMWFiNWY4OGIxY2Q3NzI4ZjE3N2NjODZlMzNiY2ViOWUy
MjE0YjIwHhcNMjUwNDIwMDQwMTEyWhcNMjUwNDIxMDQwMTEyWjAzMTEwLwYDVQQD
Eyg5MDY1ZTgzMDhmMWZiOWY4MjUzZTc1YTk0MWQxMjJkZDE2MDJjN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZNAU6tkXaJ+Up/W6hx93tLqiP9M
qcTCnPY3WOaubJ3a4/7timwg8hk8owsYad+vOqaK3b1JhLfq7AICv7hRTi3pCPJy
yIPu8RUWNmcuX1pnuwxS29fHUHawqJ4dgM3xMZUvPQrzsf1Vty4F6lj2GAPUireT
amiWLJhgjqbOHBFIHpWvZSDh31+afY7VkpzPN22kc2VHg5wfHPWBoyvM0hc+6mX1
QFqSzaWrF+AqIlme+NZpKSEf4rHVFgoM0/YB7Sk8j+1xXsEQQfySmPHdpVzy5i7R
Rd2EzC+R7RyoQD7NfSwGi72otB3ajctABPgc0ZwADXkWEfdOltjY0SB1PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBl6DCPH7n4JT51qUHRIt0WAseyMB8GA1UdIwQY
MBaAFD4atfiLHNdyjxd8yG4zvOueIhSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWIt
ZmQ5OGZkNzBmMzRmLzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy84YjJhYWYtMzQ1Yi00MGJiLWEzMWItZmQ5OGZkNzBmMzRm
LzEvUGhxMS1Jc2MxM0tQRjN6SWJqTzg2NTRpRkxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArnfgb9nj
RN2dAjmG87mSNFg55ZzudaW8sD1+whAGpv5FBUBqV8zYLqYp8SbuofRN85Nka7xx
griHabkOvkOFCvnF+ApqN9bC8ZadopC3gBiNHmSXQjMiHJs/skpNNKCEWSUdoJgd
EWpY6JBYj+ItRGPgKHTeeAezQISf0tNdzVkn3f/hPbdM/3gr5DC/46Kdcl6hOIT4
LBnYj3X4Um8bkG1/M5nuvtzFxErGzsg5ZdteMGpsY4LZv90XkNH2saswx6TXXG0/
P3VAEIyWrQ9DH5lfgmTc2A104QaM9CRcNO6PKDZDicWWOG9H9UMzKJ1w8JHIlCSO
DH/TvpWuVHk2CQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:28 2025 by rpki-client