Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File: PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier: kRYZmM+alyz6LGeaCVeJO4dA9OCJweId+S7eXBkn77s=
Subject key identifier: D0:09:22:B4:57:95:93:25:E2:42:06:E9:16:80:27:D6:83:4D:57:92
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer: /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial: 0196CEE29E5D6DCFDB9CE5F9996B91CE7451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number: 0949
Signing time: Wed 14 May 2025 13:01:20 +0000
Manifest this update: Wed 14 May 2025 13:01:20 +0000
Manifest next update: Thu 15 May 2025 13:01:20 +0000
Files and hashes: 1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: YbSlYqpxblqrFjfQrw7QAMhdzzkbtA+NDVOOU4c382Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:9e:5d:6d:cf:db:9c:e5:f9:99:6b:91:ce:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Validity
Not Before: May 14 13:01:20 2025 GMT
Not After : May 15 13:01:20 2025 GMT
Subject: CN=d00922b457959325e24206e9168027d6834d5792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:59:4e:75:0e:3c:38:fb:d5:00:07:1e:19:
da:3e:8c:f3:ed:10:ea:f0:12:22:75:2f:66:d4:38:
9e:a3:fe:99:24:ef:e3:ee:38:22:de:41:c4:c8:ce:
56:cf:71:4a:c0:6f:ce:34:af:c1:52:7c:61:f8:49:
00:17:d4:f1:b6:ad:55:21:f7:58:85:dc:3d:0d:b5:
20:a7:ae:23:56:e8:5d:4b:28:a2:fc:c6:4b:f6:dc:
af:10:35:6b:a6:84:02:ff:35:ea:38:c0:06:2f:6f:
5a:cb:86:69:32:1e:1c:70:d3:f1:60:67:dc:64:4e:
3c:ed:5c:f3:0f:a4:1e:34:62:39:cd:f5:84:7e:0c:
2c:3e:2c:77:29:17:15:25:0b:28:7b:8b:10:f9:84:
8e:6a:b7:6d:88:a7:e5:0a:11:66:6e:ae:7e:41:45:
83:05:1d:7e:ee:0c:91:76:a8:05:40:f3:af:ee:68:
96:59:60:c2:57:9a:38:92:e2:07:ff:5b:77:15:7d:
c6:5d:5f:c1:1d:20:d8:9c:7a:8b:30:d8:57:bd:c6:
d7:4a:4b:90:88:8a:2d:86:bf:09:80:3d:20:ee:00:
73:8f:42:41:2f:fa:48:90:7b:c4:66:7a:de:0b:a6:
54:7f:b8:13:21:6b:8d:a0:8b:f0:96:33:86:c9:82:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:22:B4:57:95:93:25:E2:42:06:E9:16:80:27:D6:83:4D:57:92
X509v3 Authority Key Identifier:
keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:bc:5f:c9:af:44:86:23:66:a3:09:b4:83:20:94:61:4f:
ab:59:b7:6a:1e:b9:aa:f5:a2:d0:4d:d3:14:02:80:71:56:53:
e9:8b:00:a2:38:ea:7a:67:86:1e:32:2f:df:9a:39:08:7e:fb:
4d:9f:95:98:cc:e3:36:b7:36:f5:58:cd:8d:62:dd:87:bf:57:
cf:45:37:90:02:f7:76:30:b4:d6:42:ce:d1:eb:74:5b:0b:f2:
61:ee:cf:b8:9b:29:6d:d6:d8:38:c7:23:fc:42:af:9a:81:b1:
45:4d:ad:a5:50:f0:95:2d:9a:24:ad:82:f0:df:d9:8d:70:a2:
93:6f:03:d0:4a:53:88:24:32:f6:9b:27:1e:2a:ff:61:47:f6:
82:f5:74:0f:c6:f0:4a:3c:c6:93:ff:a7:6a:3c:33:68:0f:85:
f2:a3:95:cb:d1:97:5d:06:59:96:16:84:1a:8a:5f:6e:38:73:
de:b1:ea:5e:c3:b2:d9:00:21:73:ff:55:1a:04:69:4f:93:a3:
bc:f1:f9:10:e4:e0:47:21:4a:59:a0:d3:e8:a1:f7:8e:9b:7c:
d2:2b:49:ef:ce:5a:ac:a3:0d:ab:47:5d:4e:04:db:6b:cb:36:
66:b1:ed:59:e1:e4:08:17:1a:0a:2e:1e:6b:07:58:01:b9:3f:
e2:95:36:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbO4p5dbc/bnOX5mWuRznRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjN2ZhYzllYjcyNTJkZDQ2YWYwMWE0ZDcyODI2YzlkOTdi
MzI1ZjQwHhcNMjUwNTE0MTMwMTIwWhcNMjUwNTE1MTMwMTIwWjAzMTEwLwYDVQQD
EyhkMDA5MjJiNDU3OTU5MzI1ZTI0MjA2ZTkxNjgwMjdkNjgzNGQ1NzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH1ZTnUOPDj71QAHHhnaPozz7RDq
8BIidS9m1Dieo/6ZJO/j7jgi3kHEyM5Wz3FKwG/ONK/BUnxh+EkAF9Txtq1VIfdY
hdw9DbUgp64jVuhdSyii/MZL9tyvEDVrpoQC/zXqOMAGL29ay4ZpMh4ccNPxYGfc
ZE487VzzD6QeNGI5zfWEfgwsPix3KRcVJQsoe4sQ+YSOardtiKflChFmbq5+QUWD
BR1+7gyRdqgFQPOv7miWWWDCV5o4kuIH/1t3FX3GXV/BHSDYnHqLMNhXvcbXSkuQ
iIothr8JgD0g7gBzj0JBL/pIkHvEZnreC6ZUf7gTIWuNoIvwljOGyYLv5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAJIrRXlZMl4kIG6RaAJ9aDTVeSMB8GA1UdIwQY
MBaAFDx/rJ63JS3UavAaTXKCbJ2XsyX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAt
ZWFiYWMxNmVhNTg0LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi84MjAwZWItMGZiZC00ODgxLTg0ODAtZWFiYWMxNmVhNTg0
LzEvUEgtc25yY2xMZFJxOEJwTmNvSnNuWmV6SmZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgu8X8mv
RIYjZqMJtIMglGFPq1m3ah65qvWi0E3TFAKAcVZT6YsAojjqemeGHjIv35o5CH77
TZ+VmMzjNrc29VjNjWLdh79Xz0U3kAL3djC01kLO0et0WwvyYe7PuJspbdbYOMcj
/EKvmoGxRU2tpVDwlS2aJK2C8N/ZjXCik28D0EpTiCQy9psnHir/YUf2gvV0D8bw
SjzGk/+najwzaA+F8qOVy9GXXQZZlhaEGopfbjhz3rHqXsOy2QAhc/9VGgRpT5Oj
vPH5EOTgRyFKWaDT6KH3jpt80itJ785arKMNq0ddTgTba8s2ZrHtWeHkCBcaCi4e
awdYAbk/4pU2Iw==
-----END CERTIFICATE-----
Generated at Wed May 14 18:29:19 2025 by rpki-client