Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
File: Ph_ROPEC19yxWDtElBAvD-WH5F0.mft (raw, json)
Hash identifier: YFJj10YOe/FeNGP7f0ibxI4uSlaWHB837+MylLI5E0c=
Subject key identifier: 1A:FA:86:EF:29:7C:8A:A4:A4:DA:03:1D:79:F7:71:09:E8:A4:E6:FD
Authority key identifier: 3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
Certificate issuer: /CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Certificate serial: 019511A296A5188069D8ED3E4BBDDEFFF07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
Manifest number: 1459
Signing time: Mon 17 Feb 2025 02:00:22 +0000
Manifest this update: Mon 17 Feb 2025 02:00:22 +0000
Manifest next update: Tue 18 Feb 2025 02:00:22 +0000
Files and hashes: 1: Ph_ROPEC19yxWDtElBAvD-WH5F0.crl (hash: PqDtumDspGXPT5MHDQz04XVT9l4TsyUa+SX9RSF0G1g=)
2: wBeey_3DAfmS3bVpXKczcJjM4cE.roa (hash: 0BXIC9Ywwqhs3eAEJFqVmWCSiRTOnC7ial/YIuKbIQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:96:a5:18:80:69:d8:ed:3e:4b:bd:de:ff:f0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1fd138f102d7dcb1583b4494102f0fe587e45d
Validity
Not Before: Feb 17 02:00:22 2025 GMT
Not After : Feb 18 02:00:22 2025 GMT
Subject: CN=1afa86ef297c8aa4a4da031d79f77109e8a4e6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:15:88:68:f3:6a:03:c9:d6:d2:61:28:36:
40:3c:89:62:46:08:bc:63:ab:93:be:72:36:d4:2a:
3c:72:01:f1:45:63:fd:d2:71:39:8a:8d:30:e0:7e:
f0:a4:36:3b:9b:a7:f5:bc:9a:b4:41:b5:58:5e:fe:
6d:72:9d:43:7b:c4:19:50:cf:7c:fb:a7:fd:d4:a5:
fd:ff:49:68:04:0b:0c:74:cb:e6:08:f3:ce:2a:59:
ba:2b:5f:7e:cc:94:1a:c9:c7:bc:6a:92:02:e1:b8:
d5:49:bf:73:48:29:8b:df:92:fa:18:40:e6:81:15:
02:7c:3d:b1:b4:9c:83:09:82:fc:e5:dc:cb:49:09:
2a:23:67:44:ae:ba:3e:5a:6d:db:73:7a:fe:74:75:
ea:e2:35:1e:7d:cf:fd:a8:8b:11:28:2f:a7:37:33:
f0:1a:91:ae:0b:9b:b9:16:02:b7:0a:b6:09:f5:f1:
c9:39:8f:e1:7e:f2:0a:90:13:ca:fe:b0:48:a9:8c:
a8:06:f9:e8:e5:37:a6:60:5a:cb:1d:d0:62:fe:bb:
10:2b:9f:c7:44:61:8d:b1:12:e7:38:da:29:b5:0a:
23:b8:ea:9f:e3:5c:fa:42:80:cb:c6:d7:05:68:1b:
05:d6:95:0f:dd:a8:38:37:22:8a:d0:22:4d:0a:fb:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FA:86:EF:29:7C:8A:A4:A4:DA:03:1D:79:F7:71:09:E8:A4:E6:FD
X509v3 Authority Key Identifier:
keyid:3E:1F:D1:38:F1:02:D7:DC:B1:58:3B:44:94:10:2F:0F:E5:87:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph_ROPEC19yxWDtElBAvD-WH5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/d0c3e5-99c5-4f12-9da2-c59e94bff743/1/Ph_ROPEC19yxWDtElBAvD-WH5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8b:12:18:7b:40:6b:75:ce:3d:46:b4:48:0a:97:85:fe:9a:
57:9f:97:c1:b0:19:34:07:8a:b2:a4:a9:bc:77:e4:98:56:2c:
e2:3c:c1:d5:3a:90:29:62:83:64:27:36:b6:37:ae:d2:b1:a2:
1b:35:9c:c0:66:8c:3a:84:b9:5a:84:69:3b:8a:0b:36:35:34:
be:9f:14:95:7f:98:d1:69:54:ae:1c:2c:07:56:bb:23:fe:29:
3f:9c:35:75:82:9f:b6:25:68:1b:ca:5b:de:87:2b:bc:a7:30:
b6:41:aa:60:4c:65:ce:ec:9e:ac:cf:0b:bc:d2:69:b0:b9:e1:
ec:3e:e3:d6:a0:c7:fa:ad:a6:9c:10:82:e1:01:4d:17:68:3a:
3b:02:0d:62:1a:41:03:8b:60:30:de:84:97:b4:3e:b5:da:b5:
ea:27:69:f4:4f:2c:1b:e3:99:51:5f:59:a9:43:cd:54:f3:00:
15:d9:51:25:1c:9d:ea:6d:c1:cf:12:77:90:ed:5c:08:a2:d8:
40:ab:9b:0b:85:02:f8:59:76:82:61:26:bd:03:4b:47:03:d3:
8a:e8:4a:fe:c5:31:34:0f:e6:f8:18:6c:f7:60:da:45:c9:42:
f8:dc:7f:c6:c3:66:54:c5:04:cf:de:9b:a9:78:a2:13:f5:ef:
70:69:20:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:37 2025 by rpki-client