Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: w/3nDnsbdW44bNBP+YkUs5nR84viIj+0cQDtsiESbAk=
Subject key identifier: 7C:A1:2C:02:74:FC:10:87:29:37:23:D7:E8:DD:CA:EF:92:43:7A:25
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 01965BA7AA043EE0DDBB4682EC31451759D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 1458
Signing time: Tue 22 Apr 2025 04:00:36 +0000
Manifest this update: Tue 22 Apr 2025 04:00:36 +0000
Manifest next update: Wed 23 Apr 2025 04:00:36 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: j47FxgWkOUzsjQZoMwfbsQWVxgFhiD1ijUum2gh+ZIQ=)
2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:aa:04:3e:e0:dd:bb:46:82:ec:31:45:17:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: Apr 22 04:00:36 2025 GMT
Not After : Apr 23 04:00:36 2025 GMT
Subject: CN=7ca12c0274fc1087293723d7e8ddcaef92437a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:10:88:78:0d:97:24:a2:ec:6a:62:f4:69:
56:dc:fa:82:ca:a3:bc:92:d2:f4:9c:e2:13:79:bd:
77:0d:8b:41:98:eb:fb:d2:54:ea:d7:a0:90:93:ca:
25:38:bc:93:60:f5:7c:42:81:d4:66:cb:14:bd:c0:
5d:93:61:8a:0d:5c:08:7b:b2:f5:4c:87:21:39:5d:
9c:8f:67:34:60:1a:47:8a:95:e6:1e:ac:41:93:a5:
83:9f:42:c3:61:e0:4f:19:1d:1b:19:cf:4e:66:b5:
44:4f:61:3c:ed:ca:8b:51:e9:7d:4d:c3:28:91:d1:
e8:69:a0:60:de:76:6b:7d:ec:b5:33:bb:d8:c5:1e:
48:c8:54:e3:7b:20:e9:2b:02:26:36:56:b8:56:c9:
b6:33:17:ca:95:0a:9f:76:a2:e4:80:ac:1c:32:31:
14:f8:a1:ba:b3:e4:2e:35:a3:67:58:d7:ee:11:67:
0f:17:fb:43:e8:b7:36:55:8d:cf:e6:39:8a:98:a7:
00:7b:bc:8a:e0:7f:8d:c8:9d:38:42:2a:a4:f6:55:
5f:bd:f6:39:1b:4c:1b:52:27:5c:7b:95:10:81:ff:
04:63:6d:de:91:d4:2a:90:db:13:9e:e7:50:da:23:
be:53:f4:44:c4:67:94:a0:f6:b6:60:b8:34:94:59:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:2C:02:74:FC:10:87:29:37:23:D7:E8:DD:CA:EF:92:43:7A:25
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:12:f4:aa:8f:7c:62:8f:87:de:7c:eb:ab:92:a7:9b:3b:5c:
62:d0:27:cb:da:74:b7:80:a2:da:29:7d:fd:14:83:5b:ca:3b:
42:87:93:1b:18:76:53:2c:fa:f9:5c:7e:8f:c0:4c:4a:64:88:
78:25:00:14:fe:00:f0:2c:d7:19:59:94:c7:03:e9:be:e0:a7:
af:ee:46:d8:35:d3:6c:2c:aa:55:8f:f1:3c:fa:a5:aa:f6:90:
40:9f:18:1c:7e:87:a1:65:7b:2b:d5:11:0d:fc:52:f8:f4:1b:
75:bb:48:66:35:cf:9e:5d:f4:a5:57:e0:1e:b7:e7:df:0c:ce:
f2:cc:79:48:d6:76:d0:41:e0:6f:57:f0:c4:b5:70:87:e9:9f:
0d:78:66:5f:37:12:27:f8:a6:cd:03:65:30:03:a2:02:d8:b1:
e0:0d:17:70:9c:d7:51:94:77:44:21:16:aa:77:2b:b9:19:53:
04:2f:ab:d4:a9:ed:c5:20:80:9f:73:33:db:dc:cd:04:c5:ed:
1d:e1:63:8d:9a:44:b9:9b:b2:60:ef:e1:0f:c2:e5:82:7e:86:
49:02:1e:43:12:d5:96:03:99:29:3a:9c:4f:a0:67:7e:32:64:
8d:26:ea:a7:c2:39:ec:20:0f:a3:9a:f2:c8:58:48:a6:fa:c9:
56:ee:c6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:35:03 2025 by rpki-client