Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File: H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier: sv4IVrT5tg9Axo4Yf2iV3AGDbG6WHKqhtymwGuzhPNU=
Subject key identifier: 30:A3:5D:8E:39:C4:5F:DB:1D:39:2F:AF:DE:D0:67:09:0C:AF:BF:44
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer: /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial: 01958B844DBFD7A420D809363F1D7EB1B927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number: 0553
Signing time: Wed 12 Mar 2025 18:00:58 +0000
Manifest this update: Wed 12 Mar 2025 18:00:58 +0000
Manifest next update: Thu 13 Mar 2025 18:00:58 +0000
Files and hashes: 1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 9R5a+VoLShCe66RuvT2OsuVG47SOfX8MNJ7wAD9D238=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:4d:bf:d7:a4:20:d8:09:36:3f:1d:7e:b1:b9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
Validity
Not Before: Mar 12 18:00:58 2025 GMT
Not After : Mar 13 18:00:58 2025 GMT
Subject: CN=30a35d8e39c45fdb1d392fafded067090cafbf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:01:71:4f:80:76:59:9c:c8:b4:e5:c5:63:
b3:ce:96:5e:4e:9e:32:24:48:65:30:26:a4:23:f6:
80:2e:f9:2d:2d:2d:59:64:d5:65:8f:c5:c3:80:52:
2e:b8:31:df:b7:53:e7:c7:17:eb:86:ae:38:69:4f:
4b:9a:a7:5a:9b:bf:e6:cc:65:f4:05:7c:93:14:b5:
07:e7:92:79:78:fb:0b:54:52:e2:e2:0a:84:04:3f:
6b:cc:2e:64:1e:d1:1f:4e:5d:09:b6:54:7b:70:73:
b5:42:39:0d:71:53:07:37:2f:04:db:c2:2f:0d:b1:
00:f7:f0:61:4b:65:51:27:5d:34:b3:f6:62:ee:f9:
50:cb:24:f9:97:50:70:4f:50:2e:84:dc:e4:c0:8b:
fb:3e:ef:b0:a6:a6:3a:3f:d6:c7:33:02:7e:c6:3c:
12:fd:09:26:e3:b0:dd:0b:c3:8e:dd:0a:f1:b7:fc:
7e:6b:fe:a9:ff:ae:2e:40:4b:33:39:c1:3c:ae:6f:
00:74:5c:4f:ab:06:83:e6:a4:18:55:1d:3d:e0:ea:
41:a1:6c:43:18:26:b5:4a:14:29:ea:3b:bd:c0:49:
18:b6:08:c5:bb:bf:01:a4:c7:2f:bc:c5:59:2f:62:
1a:35:88:4b:f8:db:c5:f4:30:8f:24:a9:c0:d1:03:
54:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A3:5D:8E:39:C4:5F:DB:1D:39:2F:AF:DE:D0:67:09:0C:AF:BF:44
X509v3 Authority Key Identifier:
keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:92:a1:59:f8:06:f6:13:71:03:58:23:74:80:64:12:0d:a7:
e0:22:6a:13:63:52:c6:8c:1b:0b:e5:2e:c3:53:d5:91:d7:3e:
77:de:73:8a:c2:81:07:a8:8c:ff:d1:f4:96:cc:36:5c:de:6b:
a6:ff:cd:e4:ab:41:f4:ec:d0:eb:e5:c0:2f:0e:ff:69:b8:b0:
ca:c9:be:e2:8f:a4:47:50:3c:12:f0:ca:b7:81:51:74:5e:f2:
ed:04:fe:c2:a4:58:52:bc:95:28:dd:35:2e:00:c9:30:b1:ec:
91:9e:e1:ec:7e:8d:08:29:f0:6a:34:56:0b:1e:42:f0:ce:ef:
1d:5a:b3:f7:61:41:dc:dc:dc:a7:c8:06:fd:1e:d3:15:19:2d:
31:64:71:88:ce:a7:65:63:c5:c0:01:51:19:d5:b1:92:fe:be:
b0:7b:dc:6d:c5:ef:1b:d8:be:fb:d8:31:51:ef:29:af:de:33:
a9:45:e3:46:b3:7a:af:26:0c:2a:59:9b:48:97:a8:f7:5e:c2:
f4:a2:f4:38:14:ee:e8:9f:cf:f3:9c:d3:65:ea:1f:97:c1:bb:
22:99:84:46:9b:38:32:71:d1:4b:8e:55:54:69:a2:6a:e8:d3:
28:50:e5:2a:68:af:26:1f:c4:97:ae:bb:1c:d8:23:28:a4:65:
5b:1e:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:18 2025 by rpki-client