Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: O6LhhCVKxnPT0kpMd7VaBUzLDnIx8Tj3m2EfynJzq+U=
Subject key identifier: 54:48:78:70:0A:31:65:16:EF:8E:39:F5:E7:07:E2:8C:6C:77:D8:E3
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019653491614F7E8D2A60211BB7773BF8EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 1265
Signing time: Sun 20 Apr 2025 13:00:20 +0000
Manifest this update: Sun 20 Apr 2025 13:00:20 +0000
Manifest next update: Mon 21 Apr 2025 13:00:20 +0000
Files and hashes: 1: DC457V004ebo_81e4fxQUpZs59k.roa (hash: koGSw3MBz9AwS+zqOmOgemnpgRcxTDfkN77KAf52zbM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: 32QVu/9VY9s97+HINEEXiMTE8whxDQUhQqZEdSP9IOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:49:16:14:f7:e8:d2:a6:02:11:bb:77:73:bf:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Apr 20 13:00:20 2025 GMT
Not After : Apr 21 13:00:20 2025 GMT
Subject: CN=544878700a316516ef8e39f5e707e28c6c77d8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:5b:9f:e5:a7:f1:11:59:24:58:e6:f0:86:
b6:58:da:93:cd:30:26:6a:ed:c5:dc:35:bb:9f:1f:
6b:1b:db:91:a5:35:72:ec:91:82:72:26:4c:73:ba:
d7:66:0f:a2:e5:15:43:0a:e4:73:c1:6a:fc:12:a9:
28:ce:1a:85:29:26:80:d5:25:b4:5d:d3:da:5b:4c:
c2:c6:11:71:3f:34:02:26:7f:6d:1b:14:ee:b3:73:
8b:46:40:2a:fd:f6:65:fe:5e:8a:51:13:5f:64:33:
c1:b3:45:39:b2:12:b2:13:e1:63:c8:7c:b2:e2:d4:
c9:24:bd:d9:ac:6e:e9:da:d7:da:5a:76:b4:70:82:
af:7d:a5:6a:e0:71:2b:dc:96:e3:ae:ed:11:f0:9d:
b5:b7:b4:15:b0:a9:2a:d1:55:af:50:9e:32:45:63:
f0:a7:21:e1:3d:0c:4b:ea:23:4c:d5:af:e3:41:1f:
f3:38:71:4c:33:a7:62:96:0a:e3:e2:68:e9:5d:f3:
ba:19:16:08:0f:bd:45:68:2e:39:00:c4:c3:95:59:
b4:57:f1:2a:a9:19:c0:4c:42:7b:92:56:02:28:3e:
95:2f:0e:e2:34:7c:f9:95:bd:c0:3e:50:87:31:bb:
9b:76:04:96:af:fc:02:98:ae:fc:26:a9:3b:e9:8a:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:78:70:0A:31:65:16:EF:8E:39:F5:E7:07:E2:8C:6C:77:D8:E3
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f0:fe:a8:cb:97:08:be:59:90:a9:a6:06:03:5a:c9:62:f3:
ac:12:77:d9:82:76:b7:c8:6b:0f:8b:4b:93:fa:eb:57:7a:e5:
ad:6f:3e:21:5f:33:79:43:7a:a7:2e:64:ad:ea:d4:b0:35:b8:
bb:02:3b:48:a0:2a:f5:7d:49:4d:74:7f:06:43:6d:e3:22:6f:
4a:7e:c0:3c:20:98:1e:97:1a:bd:3c:8f:4c:77:77:82:e3:2d:
71:6d:22:c5:29:a5:28:38:a0:31:2b:35:7c:ee:a6:a0:16:25:
b4:81:7d:a7:95:ec:b1:79:4c:a7:fd:b0:54:fc:0c:da:df:94:
d2:3c:fc:e5:16:8f:6b:84:33:a1:32:79:be:fd:ff:a8:88:4a:
d1:26:c6:81:3a:f9:77:c4:dd:ae:95:99:07:9c:78:ea:b2:4a:
11:46:b3:c0:7b:48:21:4b:84:93:0b:92:18:a9:53:ca:28:88:
8f:96:98:0d:ed:79:e4:9e:54:3f:3e:23:35:b5:cd:48:c6:35:
c4:9d:8b:6f:ff:41:6c:85:96:6f:c4:eb:59:d5:f5:fb:4b:a1:
66:af:a1:22:6b:35:9e:9d:2e:03:a3:05:39:ff:bc:0a:2f:c5:
02:ba:49:a2:ed:86:ac:bf:a2:2f:89:bd:83:9d:95:19:39:ed:
39:be:f9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:56:52 2025 by rpki-client