Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: DROzVMu3OEyB82RA1OsUMjOzgE9ojrtN+91k6naHv2k=
Subject key identifier: 65:D6:7C:3F:0C:C1:BB:E0:B5:70:0C:30:65:A8:33:07:B6:BC:4F:97
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 0196542537DDCB1BC102969225EC7DADC6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0D32
Signing time: Sun 20 Apr 2025 17:00:47 +0000
Manifest this update: Sun 20 Apr 2025 17:00:47 +0000
Manifest next update: Mon 21 Apr 2025 17:00:47 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: n/DkpcZsWbzRS3hi8enCyjIFSToYHamIIVCCjOR7stw=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:37:dd:cb:1b:c1:02:96:92:25:ec:7d:ad:c6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Apr 20 17:00:47 2025 GMT
Not After : Apr 21 17:00:47 2025 GMT
Subject: CN=65d67c3f0cc1bbe0b5700c3065a83307b6bc4f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:d2:47:bf:08:de:9b:09:62:7c:15:b8:09:
57:06:03:ac:52:3b:64:08:9d:21:63:42:39:dd:97:
59:8f:de:ec:28:3e:1a:e3:12:f1:fd:94:1d:1f:a0:
c7:95:95:a1:28:d2:24:1d:0c:b1:94:fb:a4:79:d5:
2c:b5:cb:2a:4b:0d:12:19:0e:86:1c:b7:8d:52:13:
d7:8b:15:3f:72:00:c4:64:57:08:78:f6:e5:1e:1f:
d6:94:62:d4:31:5b:1b:7d:f8:1b:3c:99:02:bd:38:
99:37:bb:95:b0:cf:3d:97:f1:3d:24:a1:18:9a:56:
fe:c1:ff:be:48:cc:d5:1d:0a:d2:aa:84:29:71:23:
ae:ae:59:ac:85:68:2e:14:8b:b5:d9:83:4a:17:84:
b1:5e:96:60:48:ef:eb:85:e4:05:bb:88:c5:e4:37:
95:9d:7c:74:47:61:76:3e:b9:f1:4e:9d:4d:75:db:
aa:09:dd:72:25:c7:38:e8:38:37:e7:90:b6:c2:91:
c4:d9:7c:e9:53:64:13:12:3c:94:23:30:29:ba:98:
ff:43:38:ec:c4:82:99:86:87:6d:02:c6:f2:d6:18:
83:b0:14:9e:7d:4f:59:b3:7a:4b:72:3e:ee:66:e1:
fe:77:8d:c7:15:a9:92:5d:9b:e4:5f:7c:d4:b9:7b:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:7C:3F:0C:C1:BB:E0:B5:70:0C:30:65:A8:33:07:B6:BC:4F:97
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6c:35:a6:59:51:3c:a0:70:51:e7:12:ae:f4:16:a2:1d:fc:
06:a3:ca:23:5d:fa:82:ae:7f:cd:44:08:b1:e2:39:34:b5:2d:
a4:22:42:24:c7:04:f6:f1:8c:8a:a2:9f:6a:88:cb:b3:44:7a:
67:bf:6a:87:06:32:f7:75:25:7a:6a:11:d7:82:de:eb:82:b2:
74:30:43:92:98:8a:ea:87:f5:90:e5:36:0e:65:b9:02:4a:eb:
0c:17:ff:28:df:d8:bf:01:a0:e2:0d:d1:03:2d:00:a8:67:9b:
3a:b3:50:19:77:2d:72:aa:4e:28:48:73:be:37:47:32:00:07:
2d:e1:fc:3f:87:38:a9:d6:c3:02:3f:5f:4b:e5:90:95:00:58:
f6:7a:17:b5:fe:14:79:f0:8e:1a:a7:e5:57:70:63:cb:4b:2c:
9c:01:60:8c:1b:08:40:d8:ac:e2:4c:e7:b2:f2:ad:43:94:c0:
80:e3:de:14:3b:4d:3c:22:33:5f:2f:ca:2c:dd:8d:8b:cf:df:
d5:f5:83:c0:73:d0:fb:7d:84:fb:14:c2:5b:33:89:47:1a:a3:
0d:c8:b8:00:79:7b:8c:35:08:53:92:38:43:d5:50:ee:6f:5e:
85:f2:3a:08:13:14:1a:a2:c0:27:38:09:4a:51:4e:a8:63:64:
4e:51:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:14 2025 by rpki-client