Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File: h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier: RB9KC5yoWZxDwzweRk0SHKsZXlxMtG6V/4ER7pGMdsU=
Subject key identifier: 91:6D:7E:68:1A:0C:D9:07:3D:8F:64:92:8B:79:E9:68:13:B0:22:47
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer: /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial: 01965A950CC32BFA15F05F366CE3117768CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number: 1237
Signing time: Mon 21 Apr 2025 23:00:39 +0000
Manifest this update: Mon 21 Apr 2025 23:00:39 +0000
Manifest next update: Tue 22 Apr 2025 23:00:39 +0000
Files and hashes: 1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: rsFOr+DlljK3prRXIkfbeUoi0vexeRrAbiXPWAf6p7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:0c:c3:2b:fa:15:f0:5f:36:6c:e3:11:77:68:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Validity
Not Before: Apr 21 23:00:39 2025 GMT
Not After : Apr 22 23:00:39 2025 GMT
Subject: CN=916d7e681a0cd9073d8f64928b79e96813b02247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:22:c9:c2:8c:9c:a2:d4:be:72:76:1f:f8:
de:79:17:cb:f6:84:f2:ad:ae:9d:83:14:0f:0f:9c:
9d:37:72:9f:e7:b1:89:d4:39:eb:96:d9:70:06:a8:
0a:55:5b:36:35:e3:92:6d:0f:62:73:c0:31:e8:cb:
cb:d3:81:68:16:7f:6c:53:a5:3a:e1:65:2c:a8:f5:
df:30:51:ca:59:49:7c:9c:45:2c:84:bb:b6:23:77:
eb:7d:e9:cc:5b:cf:8a:3a:45:58:b3:57:6c:cd:f6:
c2:78:38:f6:e1:5c:4a:88:73:6b:dc:eb:02:30:01:
2b:51:8a:b4:30:0f:9d:03:94:78:11:c4:6f:6d:9e:
7c:d6:0d:21:4d:37:95:0b:be:84:62:13:65:d0:2f:
3c:38:99:2d:43:46:20:72:de:f5:2d:14:0c:49:33:
e9:19:ea:f6:be:b7:7d:bf:0c:c9:70:8d:c9:2a:c8:
50:60:78:e6:f7:94:db:23:c4:83:77:33:14:65:87:
2d:6b:3a:31:34:29:d6:00:a4:34:71:5d:af:60:de:
4c:96:9f:ee:6b:91:4f:b1:62:8e:52:ef:ee:3d:be:
11:54:02:ea:7b:40:e2:7a:9c:fd:b3:cf:05:f3:6a:
df:b1:ca:20:61:19:0f:58:77:c2:73:30:dc:de:5a:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6D:7E:68:1A:0C:D9:07:3D:8F:64:92:8B:79:E9:68:13:B0:22:47
X509v3 Authority Key Identifier:
keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:b3:e9:c9:bb:cb:b9:d4:20:51:d6:3a:5a:6f:af:60:a5:
65:93:a9:7e:1f:22:e0:2a:d7:ab:3c:90:7b:ad:e8:09:b1:8a:
dd:ff:86:c3:0d:f5:1f:3b:51:55:22:58:50:e6:4a:2b:10:4c:
3c:50:db:9e:0a:49:cf:2b:5b:f2:b9:16:df:09:2a:4d:c0:e3:
9a:8b:97:53:4a:91:ec:6b:cf:fa:f5:dd:10:35:17:31:5c:c2:
ab:82:b9:14:66:1e:7d:57:e6:7c:8b:b5:e2:90:b6:0b:74:88:
da:1e:12:fc:d3:de:8a:27:c8:61:41:57:07:69:98:11:d1:f5:
80:22:f2:27:e8:85:dd:48:b2:a7:63:12:81:33:10:c8:0b:fd:
c8:55:f1:70:d4:c9:c5:9f:a8:a1:7d:01:d4:fd:ff:f0:a2:7e:
20:a9:9e:c9:5c:fa:76:12:f0:e3:40:8a:15:6e:64:09:73:e5:
f3:6b:a0:01:05:8f:a1:0c:09:6f:f8:95:1b:b9:dd:23:ca:9d:
40:28:1f:46:68:f9:30:88:c8:0a:67:09:78:94:09:e7:92:e4:
2f:e7:c4:f8:b6:99:16:85:fe:7a:12:0f:19:4c:93:16:63:0d:
5d:e4:e6:bb:28:6b:65:f3:ff:5d:96:73:50:99:7c:90:51:58:
fc:6c:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:47:28 2025 by rpki-client