Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
File: H6EtaHxiehgvgdTMyz8yIBhh9nc.mft (raw, json)
Hash identifier: nRiQ+7JJmzyszStT75mQNx6Tg/QGVAx2UST3Kz32L4w=
Subject key identifier: 13:D9:50:B4:09:B9:6D:93:26:C7:4B:C6:AC:CA:9D:C7:D8:31:18:8D
Authority key identifier: 1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
Certificate issuer: /CN=1fa12d687c627a182f81d4cccb3f32201861f677
Certificate serial: 019658A68468780936C765CCC6EEAB383589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
Manifest number: 1507
Signing time: Mon 21 Apr 2025 14:00:29 +0000
Manifest this update: Mon 21 Apr 2025 14:00:29 +0000
Manifest next update: Tue 22 Apr 2025 14:00:29 +0000
Files and hashes: 1: H6EtaHxiehgvgdTMyz8yIBhh9nc.crl (hash: S5Kx9/xdxkG9T7YPhtuAYM1QQDCN/qAaDwySjWaCIEs=)
2: TYWepdwzCmiIVwEz7K8yZe03CRw.roa (hash: Gskq7xmpmSlLRwYuMMpLlLQSUWpIBfZkyQHS0PN6dOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:84:68:78:09:36:c7:65:cc:c6:ee:ab:38:35:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa12d687c627a182f81d4cccb3f32201861f677
Validity
Not Before: Apr 21 14:00:29 2025 GMT
Not After : Apr 22 14:00:29 2025 GMT
Subject: CN=13d950b409b96d9326c74bc6acca9dc7d831188d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:50:ef:2f:5c:73:4c:3a:27:ad:2e:6a:31:d8:
4e:0f:e0:dd:c1:c2:d8:ec:f5:36:c9:68:ee:65:36:
f2:00:ef:33:7b:fd:ca:0c:19:81:8c:92:6a:66:47:
df:72:39:eb:ca:88:1b:28:f4:a8:0c:9a:17:5b:55:
35:f5:9a:c9:e4:93:e1:4f:1b:5b:98:d9:02:57:02:
f7:0a:8b:15:12:4a:f2:78:e5:5f:2b:2a:e4:28:b3:
89:eb:b9:58:c5:37:b4:2c:02:b3:7f:df:76:37:1a:
2e:84:65:7d:54:2c:fa:d4:00:f7:04:72:11:1d:0e:
2f:bb:86:cb:71:e2:aa:23:04:9f:37:09:c6:72:34:
f6:ad:fd:0b:a1:4a:95:a5:5a:23:6a:4c:cb:dc:fb:
d6:f0:ff:e0:95:0c:f5:2c:90:69:26:18:c3:eb:2b:
d1:f9:41:77:7b:af:06:17:fb:c7:e2:bc:90:ea:46:
82:07:1b:ee:55:cf:d6:bf:fe:c3:24:e1:0f:c8:2c:
58:81:70:f3:c6:74:22:d4:95:ac:76:9d:0a:28:11:
b3:42:c1:40:a1:89:c4:5b:93:57:73:b6:e4:14:f9:
5c:bf:38:2a:bc:63:a0:3b:2b:86:5e:18:b4:48:c6:
21:fd:3e:2b:ef:3d:11:f6:37:01:ff:4c:64:ce:b3:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D9:50:B4:09:B9:6D:93:26:C7:4B:C6:AC:CA:9D:C7:D8:31:18:8D
X509v3 Authority Key Identifier:
keyid:1F:A1:2D:68:7C:62:7A:18:2F:81:D4:CC:CB:3F:32:20:18:61:F6:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6EtaHxiehgvgdTMyz8yIBhh9nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/4c29d0-58ea-48e8-bac7-89ccc2d4563b/1/H6EtaHxiehgvgdTMyz8yIBhh9nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:d8:65:67:8d:23:21:2c:2f:56:e0:12:10:f3:9a:2c:17:
a4:ab:6d:48:04:c5:ee:f5:c2:60:04:0e:e9:e0:2f:8f:a1:ea:
b9:b6:ad:2f:ff:bd:c8:9e:a1:f1:0d:73:89:b5:53:de:dd:ef:
ec:c3:33:92:51:f5:03:80:81:f4:66:2b:10:20:80:da:15:e2:
d6:42:a5:39:56:c1:8c:51:01:2b:cc:c7:33:53:a2:37:29:dd:
54:0c:fc:91:90:eb:2f:f7:55:19:34:02:ab:a2:b6:eb:3b:12:
9c:c6:da:88:0b:90:09:c5:5d:5b:33:af:4b:3b:c0:c6:ef:bb:
d2:e2:14:bb:f9:21:c2:53:8c:87:db:11:93:be:ed:78:82:82:
f5:15:55:3c:5a:b7:3d:d7:48:1e:66:d3:55:3b:25:24:15:d9:
98:25:89:02:b4:a3:a0:b9:63:a5:e7:d6:86:59:c3:f0:4e:87:
df:9f:ca:6a:40:c9:ab:ec:85:db:59:c3:4b:8f:c5:83:97:3e:
61:be:09:8e:30:d2:11:01:0e:8c:e1:0e:a8:29:4c:d0:1f:4a:
ff:d4:14:07:31:90:cb:b7:88:22:b3:6d:ce:f1:a4:d9:fa:6f:
73:4a:6d:b6:05:f5:04:90:78:33:07:ca:b6:df:bc:70:2f:02:
46:20:e3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:02:24 2025 by rpki-client