Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
File: Phq1-Isc13KPF3zIbjO8654iFLI.mft (raw, json)
Hash identifier: 17OqjbsG929+UI1tun8BV20yTkQd8b5pg2oIheqqRjY=
Subject key identifier: A7:EE:33:0B:00:D6:A1:13:7D:29:F3:8F:20:65:6B:9B:9C:87:F8:BB
Authority key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Certificate issuer: /CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Certificate serial: 0197B6A1B4B94E9E6DC336AD3DAC3486ECFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
Manifest number: 1214
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: Phq1-Isc13KPF3zIbjO8654iFLI.crl (hash: 5kNNgV54oJ4yh5MwONqyPoa+3W2+mLkBksKzWzvYsDs=)
2: bx8_btKMe43qSHo68HgBXwRlGoI.roa (hash: pN8gbOnQ5UYX8AYzqj7a2sSCOKJvWlSuPCK8Fk0dgE0=)
3: py8Xp3ZpBIK97blq7xFJULbGTm4.roa (hash: DKAaoIesnSnsaGeSYQPo4HMqtcREs+GQ8Vs9Wa1cfK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b4:b9:4e:9e:6d:c3:36:ad:3d:ac:34:86:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=a7ee330b00d6a1137d29f38f20656b9b9c87f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:10:73:c6:9b:77:2d:73:4f:2d:43:19:7c:
3c:75:c4:83:34:f9:a9:fd:6f:ca:1b:f0:a7:a1:f3:
2c:8a:18:8f:0c:b8:94:50:00:55:e9:bd:95:ab:9b:
ff:3e:a1:37:ad:7f:73:35:11:a3:a1:90:22:7b:e3:
b9:45:ca:d7:32:f5:8e:f8:d8:d6:c9:15:60:ef:1f:
56:c9:50:67:73:37:8b:8e:7e:b6:fb:4b:de:cb:3c:
87:2a:bd:ed:85:80:6f:44:d7:55:cb:73:99:81:e3:
99:5e:d1:e4:4a:b8:28:36:bc:b3:44:4e:be:b5:f0:
a3:ee:7d:35:53:d2:26:b4:5c:cb:04:b5:a4:89:ae:
9f:e1:b0:ef:a3:c4:cb:1d:a3:d3:c7:14:a4:5b:68:
6c:37:c3:fa:4a:c4:bd:64:08:e4:c6:66:38:dc:b5:
4d:e9:55:c5:40:6f:f3:df:32:ba:f6:ef:d6:53:43:
92:85:2c:fa:71:71:27:1d:54:d0:a7:4a:ce:4f:54:
3c:f6:42:e0:a7:07:4c:69:05:f3:61:a0:af:02:77:
0b:fa:a8:b1:1c:fa:a0:1a:25:ce:67:f7:40:63:f1:
43:98:11:a9:e1:7c:86:d1:68:c8:f7:2d:70:9c:a5:
59:4e:81:d1:bf:ec:b6:44:ac:00:30:93:a0:e1:3f:
b9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:33:0B:00:D6:A1:13:7D:29:F3:8F:20:65:6B:9B:9C:87:F8:BB
X509v3 Authority Key Identifier:
keyid:3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b7:ce:6e:fc:85:5f:81:22:eb:c8:27:0f:c3:8b:99:d5:44:
01:c9:f4:49:c3:3a:d2:be:0d:f6:8d:c4:4c:e8:43:7c:7e:f5:
09:7b:8e:85:e0:ef:0d:12:50:fa:07:cb:d3:62:c3:7e:af:16:
69:7c:b2:9a:9e:4b:99:1a:f9:c2:76:8d:6e:62:a9:af:96:11:
e8:56:6f:9a:8d:a4:a0:04:d9:bc:c4:6f:a7:94:1c:dd:36:86:
9d:04:89:ec:b8:55:a9:6d:40:9b:4d:a2:a2:83:89:0a:b2:f5:
16:22:3c:22:fa:ca:79:61:77:1e:eb:59:c2:31:95:1d:52:d9:
73:e4:b7:f0:68:e4:ef:92:fb:42:92:4a:78:14:09:e9:2f:61:
23:9f:cc:e2:f2:53:cf:87:67:53:5c:c0:d2:c9:85:fa:ba:7c:
17:fc:23:dc:75:b9:f8:e0:ae:fc:cb:bb:46:ed:20:fe:84:4f:
97:16:80:af:a7:96:bd:1f:2b:fc:21:da:7d:75:cd:e2:56:0e:
5f:4a:f9:58:21:31:4b:f0:cf:12:62:23:6f:c7:43:55:35:f9:
35:01:6c:80:18:4f:1a:2d:36:50:03:cb:91:6f:ee:87:fb:77:
13:80:93:36:35:ee:c6:76:01:02:3d:ed:91:18:f7:ed:de:db:
dc:cf:e5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:34 2025 by rpki-client