Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
File: phFtBD5EtAQUTmpC0mqp2vU9BKc.mft (raw, json)
Hash identifier: /ef9kmPWuA0XGvfRUN8c195cu/nItcDdc4IosomnBFM=
Subject key identifier: AF:4B:03:2E:54:42:C9:F9:33:F6:77:84:64:FF:1B:39:8F:AC:78:DF
Authority key identifier: A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
Certificate issuer: /CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Certificate serial: 0196AE0D2D27ED9D4E9CFD5B800CF73EEF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
Manifest number: 124E
Signing time: Thu 08 May 2025 04:00:21 +0000
Manifest this update: Thu 08 May 2025 04:00:21 +0000
Manifest next update: Fri 09 May 2025 04:00:21 +0000
Files and hashes: 1: 697jToKu2XxRDQWnpoghgdx0sOU.roa (hash: xKX34cyzr+9M8J3R+2YiMwwAXU/hT9vjt9tsB/Y8oWQ=)
2: phFtBD5EtAQUTmpC0mqp2vU9BKc.crl (hash: J24E/rOX/1c9vU+JPFHWuXdsDDMA72FHkIb7pVr6AFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0d:2d:27:ed:9d:4e:9c:fd:5b:80:0c:f7:3e:ef:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6116d043e44b404144e6a42d26aa9daf53d04a7
Validity
Not Before: May 8 04:00:21 2025 GMT
Not After : May 9 04:00:21 2025 GMT
Subject: CN=af4b032e5442c9f933f6778464ff1b398fac78df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:49:35:aa:76:57:75:34:61:51:d4:c5:92:63:
a9:72:b4:22:6d:1e:ef:0f:20:8c:9f:07:37:ce:9b:
6e:1b:e3:e9:73:48:26:cc:48:2e:b5:c6:a1:8e:4a:
55:2d:23:40:2b:bd:53:37:c6:26:ac:c9:d4:6f:de:
93:11:f5:1b:b8:5b:dd:55:30:1e:69:02:eb:16:91:
b5:36:56:bd:30:73:3b:f4:2c:f9:05:02:dc:8c:b6:
bb:39:10:37:48:6b:b1:ff:e4:30:6b:dc:fd:b6:43:
c9:6e:3b:58:b5:ca:f8:2c:92:64:37:b2:af:3e:27:
cb:2e:1b:3b:8a:74:49:6c:86:d2:3e:75:75:16:e3:
ef:f0:f2:89:ec:2e:10:b7:f1:48:d3:26:eb:0e:04:
af:78:78:fb:a0:de:d7:ee:32:fc:7a:fc:07:64:8e:
4d:58:31:3e:dc:8d:2c:19:c2:14:6c:88:cf:01:bc:
cf:38:dd:23:5a:84:e0:ef:a0:43:29:f0:2d:7a:b1:
58:bd:c1:46:8f:79:e7:7d:84:9c:72:78:7e:c7:51:
71:a6:fd:91:1a:95:eb:92:dd:fc:f3:b5:bc:1b:cb:
8d:f9:5d:77:f6:15:f1:22:4e:e3:4e:a4:c2:3b:21:
84:a1:06:54:77:d1:17:70:f5:a3:79:6a:bc:16:bc:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:03:2E:54:42:C9:F9:33:F6:77:84:64:FF:1B:39:8F:AC:78:DF
X509v3 Authority Key Identifier:
keyid:A6:11:6D:04:3E:44:B4:04:14:4E:6A:42:D2:6A:A9:DA:F5:3D:04:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phFtBD5EtAQUTmpC0mqp2vU9BKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/250dc8-0701-427a-a89d-43f5bcf6775d/1/phFtBD5EtAQUTmpC0mqp2vU9BKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:60:10:99:6a:c3:7c:4a:4b:e2:20:70:aa:bf:b8:f1:07:cc:
db:15:6c:19:4b:2b:a1:47:88:8c:50:3b:d2:f6:2a:f3:18:6c:
6e:45:eb:b5:55:85:e9:1f:41:8f:38:a8:58:f0:bf:db:37:3c:
87:06:62:f8:64:ae:89:fa:9d:6f:1a:0c:de:ce:2f:b4:26:9a:
57:56:2d:c7:16:74:29:b6:be:83:3a:28:cd:8e:fe:ee:75:2b:
1f:91:b6:2c:ba:98:07:37:c1:85:71:ac:b6:5c:f0:9c:8a:fd:
22:4a:1f:ce:1e:66:9b:5b:08:dc:10:86:7b:11:21:d1:1b:46:
3c:99:e9:d7:09:0c:b2:a9:e6:e0:cc:8e:60:bc:bb:4f:51:df:
d7:04:51:0e:d8:22:28:c6:cb:26:c3:d6:71:c9:c2:0b:70:c0:
ac:ba:0a:e8:b9:9f:c0:68:d0:9a:54:45:ab:0f:d7:58:d3:4d:
96:5e:d1:f5:9c:5c:09:92:12:d1:df:52:81:da:b1:cf:ba:4b:
bc:93:a0:25:ff:e1:d8:40:de:ae:20:27:e9:60:a1:73:85:23:
3a:a0:2b:cd:7b:2e:fc:a2:a9:9f:2e:2a:2a:d5:2a:60:ce:ee:
2d:87:85:76:81:f3:04:b4:23:79:4b:e8:fc:d3:4b:e2:b6:82:
f2:ba:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:28:57 2025 by rpki-client