Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
File: h4q7KZd6ZbFAystucqskzt3U6MU.mft (raw, json)
Hash identifier: B/ELRV1v2IWLLpQTzcci3oCx+NysqC4vmveImKwVqm8=
Subject key identifier: 1C:A8:F7:9F:13:A3:AE:58:BD:74:7B:05:24:17:C6:2E:D8:46:A6:FC
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019658A6B7C27AEA686F4706A22AFCBC8AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
Manifest number: 0180
Signing time: Mon 21 Apr 2025 14:00:43 +0000
Manifest this update: Mon 21 Apr 2025 14:00:43 +0000
Manifest next update: Tue 22 Apr 2025 14:00:43 +0000
Files and hashes: 1: 2pti9pBmz4atvNZhpCWITb53-xY.roa (hash: 0r7is1hWfeXO9VX604GYHWtiKXbqtiLGFrPkk9l13E8=)
2: CR8YJspwxomYpmDyzYM2dLoc98I.roa (hash: iJ3gsU4zydGrCTb03TaGmqam+0fxWdzK3zynKtfQSFo=)
3: h4q7KZd6ZbFAystucqskzt3U6MU.crl (hash: s++VQFAJh3XzAmrL/eL6vTHI4ewdN2ycYAuAY75AK2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:b7:c2:7a:ea:68:6f:47:06:a2:2a:fc:bc:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Apr 21 14:00:43 2025 GMT
Not After : Apr 22 14:00:43 2025 GMT
Subject: CN=1ca8f79f13a3ae58bd747b052417c62ed846a6fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:68:18:02:13:af:88:4b:2b:61:4b:63:8d:7b:
fc:7b:b7:47:f3:c5:21:aa:ee:2a:c5:6f:35:81:c3:
98:d9:6e:e1:93:02:db:96:bc:62:80:db:7f:de:72:
bc:8b:4e:ff:d3:80:8a:17:48:85:72:a2:f6:a3:ea:
e8:92:bb:08:df:eb:bd:d5:ba:38:32:3b:8f:d8:3b:
da:37:72:a6:43:bc:17:d0:8a:1e:4b:e7:18:c1:66:
7f:20:5e:21:3d:b5:f9:81:de:b1:25:d2:81:3f:26:
51:09:4b:a1:99:78:47:45:e6:a2:7c:f6:f0:4a:53:
09:8d:8a:b2:59:51:01:19:3e:10:67:a7:6d:eb:f5:
a0:d4:ab:e3:c2:ff:e9:01:85:09:20:9f:87:1d:fb:
86:8f:21:11:2d:22:27:ea:44:a8:48:9a:86:ba:9d:
9a:85:66:af:3a:e7:c5:96:8a:f6:d9:e7:d2:2f:b5:
38:ec:2c:e6:38:69:5b:f2:1c:0f:99:92:6a:34:80:
b6:74:c5:5c:c2:62:46:24:78:3e:4b:ba:f7:b1:22:
13:86:92:36:f0:64:c7:36:a9:c1:61:4c:3e:0f:d2:
94:12:c4:67:24:9e:f2:36:46:86:5b:cc:d8:c8:cb:
d2:d9:fa:6f:33:dd:2e:2f:31:03:fa:31:a5:5e:39:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:F7:9F:13:A3:AE:58:BD:74:7B:05:24:17:C6:2E:D8:46:A6:FC
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:f4:d8:24:26:9a:52:91:01:d5:bc:0b:9a:b3:13:69:00:81:
b5:4c:4d:d9:ed:3c:f0:a3:02:54:b4:5e:4e:0f:26:14:9b:c7:
78:b8:77:1e:36:94:ad:93:92:7f:df:14:a6:79:fa:ed:7b:c0:
a8:9a:de:07:44:f8:0f:fa:21:3d:6f:f6:13:96:09:03:56:ad:
bd:f3:11:ac:1e:8e:76:36:fb:8a:59:e3:c2:4f:28:82:58:2c:
db:e0:5a:e2:ad:61:41:05:26:f5:29:cf:fe:11:30:7e:76:07:
32:08:8d:43:57:20:d5:d8:af:d1:98:ca:c3:d8:9f:c7:aa:c0:
be:41:ac:43:24:22:c2:ee:00:40:3e:bd:88:b7:88:a6:36:3e:
97:a9:35:50:6a:8d:1a:ed:81:9e:ea:22:81:22:ea:1e:10:25:
91:af:b9:82:c1:5f:9d:4f:49:21:16:48:18:d0:18:78:62:b0:
3b:82:89:f2:60:fe:cd:a8:9a:3e:3e:3b:fd:56:3f:01:ef:51:
3a:e9:91:22:d5:b9:a9:16:85:94:99:57:92:48:ed:89:c7:1a:
24:cd:7d:5d:07:1d:75:1e:85:55:b9:c2:c0:44:c5:e4:de:40:
b6:65:c6:9a:88:b2:06:18:be:74:4f:14:3f:89:20:ab:f7:85:
a4:05:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:07 2025 by rpki-client