Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
File: H0n8ab9uujufoFF9AGKSchDk6Mo.mft (raw, json)
Hash identifier: oFZtv+bDjeNkrw8pkP+mkezQBsxNLWvoNsuE4vUb26o=
Subject key identifier: 79:C2:B0:43:E3:02:B0:3F:29:86:0B:A0:0C:17:26:C0:48:22:00:E3
Authority key identifier: 1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
Certificate issuer: /CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Certificate serial: 01965500BA3EDE3A23200090D5A6A41F4779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
Manifest number: 03C9
Signing time: Sun 20 Apr 2025 21:00:32 +0000
Manifest this update: Sun 20 Apr 2025 21:00:32 +0000
Manifest next update: Mon 21 Apr 2025 21:00:32 +0000
Files and hashes: 1: H0n8ab9uujufoFF9AGKSchDk6Mo.crl (hash: DyTbDePxGndt+Ug58gaVb5GB8VZouI4BcT86DWsY29w=)
2: Uer55Veb_ut1JsDk-7JNWBypePA.roa (hash: mFvrHyTdVgwfq1zEyZ5X8BtK4+uJoolM6yDZ19bRhfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:ba:3e:de:3a:23:20:00:90:d5:a6:a4:1f:47:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f49fc69bf6eba3b9fa0517d0062927210e4e8ca
Validity
Not Before: Apr 20 21:00:32 2025 GMT
Not After : Apr 21 21:00:32 2025 GMT
Subject: CN=79c2b043e302b03f29860ba00c1726c0482200e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:54:b7:dd:63:b2:ec:e8:56:49:6a:39:eb:
19:a4:be:75:cb:cb:12:19:7e:3d:11:aa:cf:b1:52:
f7:52:95:8b:81:ed:f6:ab:0b:77:8a:95:eb:da:37:
07:ce:e0:5f:05:9d:95:6c:22:d0:50:b2:4a:a3:f9:
a5:7b:f8:29:6c:90:9c:4e:4d:50:7f:d7:b7:f4:49:
d7:6a:a2:b0:ff:47:78:55:d8:69:14:e7:5c:4d:7b:
6d:e2:dc:c5:90:c8:8f:9c:d0:5c:ee:ec:03:0e:b7:
f2:4f:a8:5f:f9:7a:b7:ba:e6:02:d1:66:5f:94:7d:
e9:fd:89:dd:38:1e:e7:f4:1e:fa:c6:65:e3:eb:34:
78:39:dd:78:a9:e5:67:58:da:47:3e:85:12:ba:97:
24:ad:87:3b:a5:4a:c8:06:17:36:60:5f:f3:4b:40:
54:5b:cb:89:8b:59:1d:b5:ac:3f:70:74:2e:a6:e2:
a8:aa:68:ac:ee:c9:e7:3a:5a:88:cd:b3:32:0b:8b:
4b:3a:1c:40:70:05:76:28:9a:f4:bc:1b:8d:6d:a9:
91:26:47:d4:47:28:03:64:48:19:86:6e:04:58:89:
2f:f3:f9:ef:18:49:7a:e5:3d:0a:95:c3:33:50:1a:
e1:d6:f8:48:b7:9a:fa:24:94:93:70:87:b3:17:27:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C2:B0:43:E3:02:B0:3F:29:86:0B:A0:0C:17:26:C0:48:22:00:E3
X509v3 Authority Key Identifier:
keyid:1F:49:FC:69:BF:6E:BA:3B:9F:A0:51:7D:00:62:92:72:10:E4:E8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0n8ab9uujufoFF9AGKSchDk6Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b6bb0-edff-4fd3-864f-f6cc0c6f12b4/1/H0n8ab9uujufoFF9AGKSchDk6Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:bc:18:42:80:cf:d9:7e:50:b6:65:f7:a3:40:17:13:f0:cb:
65:34:9c:59:67:ce:dd:f5:57:e8:fa:6d:d9:b2:1c:cd:41:8f:
07:50:46:2a:12:33:f5:a6:8e:62:33:f3:c2:fa:ae:75:ff:d5:
d9:1d:51:f0:12:82:ae:a8:ae:67:99:55:dc:3b:c6:0d:92:01:
fc:64:47:6b:92:64:30:d5:d4:18:71:8c:12:a9:4c:db:66:14:
d2:13:2a:0c:10:30:9f:f8:7b:44:81:23:a6:8b:37:28:2e:d9:
80:ca:eb:0c:2c:3e:a3:25:a9:df:b7:10:9a:7d:24:b6:ca:e0:
f8:ec:24:79:38:8c:62:f6:b3:92:75:03:e0:3d:7a:e5:72:b8:
d3:2f:7a:f3:da:88:fb:6c:ce:9d:f3:57:50:6a:1c:a9:3a:32:
1e:ee:ac:25:ee:29:6a:d1:51:91:73:10:ea:04:be:d6:11:f6:
37:2b:e7:07:af:6b:f0:cb:97:59:e5:19:ee:dc:04:5b:68:ca:
23:d4:4e:d8:19:e3:aa:be:09:28:d0:43:46:8d:15:f4:21:fd:
b0:7f:11:ab:a9:33:ab:59:e1:e1:58:71:d0:9a:38:ea:f1:68:
49:32:2c:aa:49:95:e2:22:14:18:2d:87:7c:1b:d6:41:9b:a0:
d9:da:3b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:04 2025 by rpki-client