Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File: PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier: DUUpc7wpUrDqnSgM6p5ERYQ3yb5xo3l0BMlxyc4JJi8=
Subject key identifier: 3D:CA:3B:CF:05:A9:01:7A:67:9B:18:F9:54:D6:54:16:C1:32:92:DE
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer: /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial: 019748FA9F8B2255210DCB4C501A3728E20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number: 0D73
Signing time: Sat 07 Jun 2025 06:01:13 +0000
Manifest this update: Sat 07 Jun 2025 06:01:13 +0000
Manifest next update: Sun 08 Jun 2025 06:01:13 +0000
Files and hashes: 1: 8CZZasv15ITHGJH10Ps_PRDQgPA.roa (hash: ChPUFc9NmhtK34OUC7Eaou9d/4NJyuFg8hJJ9aydum8=)
2: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: v9/Dx2RgIffZ+BvUlMT4pQv4asMYRt3a3R8Xyfwa7lU=)
3: hmC9MAuZ5kgPbA1CQDROjstXo9U.roa (hash: hinoRroZw08wfbaOxEPEaLrexGciPrDYQgu6xfF4boI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:9f:8b:22:55:21:0d:cb:4c:50:1a:37:28:e2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Validity
Not Before: Jun 7 06:01:13 2025 GMT
Not After : Jun 8 06:01:13 2025 GMT
Subject: CN=3dca3bcf05a9017a679b18f954d65416c13292de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f1:d4:ca:cb:ce:23:08:83:4f:8f:8a:30:99:
4b:d5:be:5f:ca:95:f2:4c:bb:ae:27:2b:f8:f9:42:
2b:48:12:0e:e6:06:4d:19:73:ff:84:05:74:44:c6:
3e:ba:1c:78:85:40:e6:69:1f:9b:3d:0b:c4:aa:43:
e7:21:70:34:04:23:90:b8:bc:d4:07:dd:e2:5f:e8:
06:d1:76:b1:6c:85:88:84:f2:f6:a5:e2:9f:b0:be:
9f:57:e6:b1:2b:17:8e:f2:59:9c:5b:2f:dd:76:1a:
64:fb:0f:95:81:64:08:1c:be:f5:10:8b:5b:fd:a2:
b9:9b:50:13:38:24:39:ef:7e:e5:af:58:71:ea:17:
e5:a8:6a:47:a3:d9:f7:21:01:54:2f:c9:76:37:8d:
6a:38:d3:48:01:1c:1e:59:11:41:72:b7:35:60:2b:
6c:05:38:bf:de:69:05:59:f7:9a:82:49:d5:af:ea:
94:a1:0a:bc:10:85:d7:9a:ab:be:4b:df:e6:c3:31:
e8:c0:7c:b1:8f:f3:bc:b3:bb:b9:eb:c8:c9:e3:5a:
8f:53:d2:b5:11:a7:73:c4:b9:06:32:7a:df:4d:66:
fc:92:d2:b0:74:ba:e1:34:0a:10:41:11:58:4b:2e:
21:ec:18:23:39:4f:46:e9:84:82:12:3e:fe:78:23:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CA:3B:CF:05:A9:01:7A:67:9B:18:F9:54:D6:54:16:C1:32:92:DE
X509v3 Authority Key Identifier:
keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:91:83:73:15:6f:55:0d:3c:67:ba:4e:39:6f:29:5e:48:1f:
12:6f:32:ee:3e:11:d2:96:61:41:5e:4b:63:2b:f0:f4:df:6c:
30:08:35:18:7e:1b:f5:ee:38:db:a1:e3:26:10:6c:69:7d:02:
94:45:b0:20:b6:ae:22:3d:68:90:2c:09:69:59:ee:0f:76:97:
8e:4c:13:0c:56:1a:c4:f4:b2:09:dc:93:b7:f3:69:d7:2f:3f:
a9:d7:22:d5:1d:8a:a7:45:89:df:1b:39:a4:79:1f:8c:6a:12:
ac:3f:6a:21:cc:ec:56:2b:87:f5:9a:76:02:c0:11:12:70:c1:
56:a9:54:58:ad:3f:fd:0a:a1:d8:c9:1e:c0:a0:3f:83:3b:61:
bd:f3:1e:66:fb:16:37:0c:0b:77:13:f6:07:47:fb:60:aa:87:
c7:49:7c:b4:03:3e:97:04:28:f5:b0:fd:73:a9:af:75:21:dd:
36:c9:63:af:e7:06:e0:5f:03:e5:24:3c:5b:3e:e7:86:7c:d5:
2b:5b:e8:5e:68:8f:48:bf:d3:88:d4:17:c7:e3:2e:30:4e:2f:
d7:ae:65:58:a3:12:7c:81:79:28:d7:e5:7c:11:c8:f6:dd:02:
5b:65:96:dc:1b:fd:a0:53:f5:5c:9f:3c:c6:55:4b:52:94:7f:
aa:40:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:49:49 2025 by rpki-client