Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: em55R4T+WmmrCYrulP+xYRQkl1dXnAMJcOa9ag2EvLY=
Subject key identifier: D3:91:EC:2D:17:C1:BA:DC:75:21:3C:FF:68:D0:AF:E3:2C:DB:B9:E9
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 019654C9D54DD0823D247C70B0BF5B32D0DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 20:00:35 +0000
Manifest this update: Sun 20 Apr 2025 20:00:35 +0000
Manifest next update: Mon 21 Apr 2025 20:00:35 +0000
Files and hashes: 1: 72XzTn7rpHovI8hKbF-XuNhiqpk.roa (hash: meAQIU9WXZ6ZgwY3KNsha4oJxSUE/USL+RvW40fZUXI=)
2: 9a42cuWC_BNDA4DIJ7JykE7wjb4.roa (hash: qRT9zf7xfXIljPHzFl0mxSNGtfeCmpUyqkEyE4RnCGQ=)
3: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (hash: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=)
4: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: 1QcZ3IUI3h6UhgEId8ulsEbdFMIhpBv0RyL/xjeEr5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:d5:4d:d0:82:3d:24:7c:70:b0:bf:5b:32:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Apr 20 20:00:35 2025 GMT
Not After : Apr 21 20:00:35 2025 GMT
Subject: CN=d391ec2d17c1badc75213cff68d0afe32cdbb9e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:01:84:d5:85:84:0f:f3:ba:9e:d0:ff:0d:
57:4b:8f:ff:72:1e:80:a0:a3:23:fe:f5:84:b4:36:
45:e4:ae:38:94:52:88:f0:fd:78:d0:ef:5d:69:ad:
fc:e6:b2:2b:3e:72:72:aa:db:f1:e5:d7:75:82:e8:
33:b6:80:0c:ed:ec:0e:86:88:83:1b:c6:6f:18:f9:
4a:fd:3f:db:da:03:28:f0:00:89:e9:c7:b8:c4:3d:
4e:2c:03:55:91:3c:42:3e:fc:c3:9e:f5:29:8d:d8:
53:ed:92:fc:73:c4:35:bb:60:24:73:b2:94:46:ca:
53:03:f6:cf:96:42:27:f7:77:ff:29:64:67:18:f7:
48:89:46:c5:81:36:0d:97:c0:fd:a0:e2:e0:28:bf:
e8:63:b2:14:47:2e:a6:88:73:e5:a3:9c:96:1d:2d:
4e:8f:65:81:10:1e:be:48:36:6b:56:31:14:84:a5:
f9:40:6e:76:e3:b2:5e:e4:e6:65:93:d3:0e:dd:e6:
ac:ab:cf:65:8e:3a:62:d9:c0:e8:77:11:40:29:e4:
22:60:95:52:e8:78:b1:0d:11:89:27:61:d7:c4:64:
7b:7d:76:98:4e:e8:5d:ef:08:ba:a4:0c:c0:db:ff:
ae:a6:c4:34:a2:93:9b:6e:7c:2b:41:2d:f8:6d:53:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:91:EC:2D:17:C1:BA:DC:75:21:3C:FF:68:D0:AF:E3:2C:DB:B9:E9
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:33:c8:4e:4e:40:a0:62:93:9e:d8:34:b5:fe:2b:4b:7f:44:
5b:62:2b:c4:6f:fa:ad:3b:4e:ca:98:a3:85:37:d1:6b:27:6e:
43:db:f2:aa:4c:60:cc:23:9f:93:fa:1e:e3:db:c2:89:24:07:
f6:11:78:c3:8a:bb:9b:f2:fb:ed:29:a6:54:66:84:28:67:12:
1a:f0:0a:5f:29:63:6f:0a:06:6e:78:67:48:25:dc:02:52:7e:
38:f2:91:66:aa:08:39:c1:42:bb:9c:11:55:6a:26:57:e1:62:
65:c5:9b:b7:20:ff:97:9c:b3:4b:72:93:6a:e4:7e:e9:80:31:
90:1b:7d:b9:7a:5f:bf:87:bc:7b:15:7d:b2:63:63:fe:41:34:
d0:bd:c2:12:c4:61:f7:98:62:86:5b:b8:bb:cb:cf:04:5e:47:
d7:f0:e8:df:81:35:d1:6d:b6:24:5f:1a:f7:56:15:d7:85:ae:
e4:cc:3f:9c:9d:9a:2a:69:6e:d7:dc:fe:01:32:b7:1e:77:60:
fc:ec:03:72:00:a5:36:93:3e:7d:fc:d1:dc:f7:f1:2a:1a:3e:
e8:dc:6d:3c:ce:51:f2:91:d9:42:23:dc:79:37:08:82:11:cb:
7b:4e:1c:61:b8:a9:3a:06:26:8a:c1:67:02:21:17:e0:0b:c5:
90:1a:fc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:47 2025 by rpki-client