Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: PObKBWrYW4g8iAhuUmHjQMhSJgM5EbtEDwosLRaxzRI=
Subject key identifier: 29:64:18:41:6A:57:4A:3E:14:04:C2:3C:C8:7E:B9:7D:AD:48:F7:E9
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 0194C3F5AB9187A1A26EB48FB0691C268119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 0C25
Signing time: Sun 02 Feb 2025 00:00:44 +0000
Manifest this update: Sun 02 Feb 2025 00:00:44 +0000
Manifest next update: Mon 03 Feb 2025 00:00:44 +0000
Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: R4oBo28ncg2RkgMcXK7tN1ZSXtGVfGPNT+gaJggGVOI=)
3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:f5:ab:91:87:a1:a2:6e:b4:8f:b0:69:1c:26:81:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Feb 2 00:00:44 2025 GMT
Not After : Feb 3 00:00:44 2025 GMT
Subject: CN=296418416a574a3e1404c23cc87eb97dad48f7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:d3:d9:8f:bd:44:2f:11:ed:ae:0b:a8:8b:
21:1c:b3:9c:7d:49:34:4b:6e:d2:37:3c:36:27:2a:
72:c5:43:68:a1:c8:ea:0e:c7:6e:a5:06:e9:d1:67:
90:70:f7:eb:dd:f3:7a:71:b5:7b:78:49:10:60:48:
c3:c4:b9:e1:7a:4f:d0:61:88:44:91:8a:6d:9e:ab:
52:ca:67:ee:51:21:f7:e7:c7:2b:55:64:c5:9f:12:
3c:f6:a1:03:2b:f7:10:63:b3:56:84:27:e8:c3:48:
0f:9f:1d:69:ae:e2:bd:78:e6:a8:0a:19:a7:61:d0:
27:e7:f4:00:e6:a1:49:ac:19:0f:e2:9b:4e:c0:fe:
53:04:af:4b:e0:2e:57:88:d8:61:7c:40:bf:10:e6:
be:e6:e7:36:e0:db:8b:f1:e6:64:89:e3:42:26:2c:
a6:df:6c:a2:c6:31:27:c9:f8:fe:bb:10:8a:48:38:
71:7e:9e:f5:04:9d:1e:50:af:b1:3a:21:80:4e:dc:
3e:af:bb:5a:12:dc:dd:c0:95:3a:6f:da:13:53:e3:
b2:36:a7:83:e0:0a:91:54:eb:b4:82:54:a3:5f:45:
46:2f:d5:5c:9e:e4:75:e0:e5:67:3f:cd:39:8a:0e:
83:85:51:42:73:d8:2d:01:fc:a6:2a:21:41:9f:6c:
11:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:18:41:6A:57:4A:3E:14:04:C2:3C:C8:7E:B9:7D:AD:48:F7:E9
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:34:d7:64:ca:74:5e:61:69:7c:80:a0:91:4c:72:4f:0b:
12:fc:3f:ca:76:bf:02:aa:ee:db:9b:87:26:7c:1b:57:d9:db:
d6:77:e0:a3:40:c3:e9:32:cb:43:69:32:77:51:7c:e6:ea:0b:
6b:41:f6:92:d6:d8:19:5e:d1:c4:de:db:02:65:31:20:7e:d8:
98:a3:85:1d:63:59:ed:d3:8f:47:dd:d3:11:71:05:82:83:92:
43:d4:e9:37:49:11:01:bb:b6:af:33:80:15:68:6f:f6:69:68:
df:3d:d5:84:2e:ce:67:ef:cd:bf:f9:92:2d:ab:1d:bd:54:f0:
d9:95:9a:fd:f6:1e:f1:f3:e0:39:85:8b:b8:48:62:12:f5:8a:
47:9d:a3:4e:d8:03:d7:11:29:d0:6a:03:14:7c:43:ba:04:df:
71:8f:e3:33:86:86:6b:e7:9b:0f:97:ae:95:93:17:bc:7d:e6:
34:7e:95:f7:86:3f:e9:a9:07:7d:67:4c:76:2e:7a:61:66:61:
2c:91:8f:39:c6:35:2a:38:01:59:cd:4a:7a:76:d8:c6:9e:72:
ff:00:6b:47:ca:45:d4:a7:ba:d4:4e:dd:cd:03:6e:ea:0d:9d:
fe:e4:91:6f:29:67:94:e2:6e:0b:89:66:9f:b3:96:34:df:39:
c2:b8:af:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:10 2025 by rpki-client