Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
File: H5_9juMrPjV5eNnLmSFszoE3oyQ.mft (raw, json)
Hash identifier: rbPHBVzioONmnOi2mVCJQ5OFrHGaXMcAIkYDzj3aVIM=
Subject key identifier: B0:DD:7D:62:01:84:05:F0:FA:3B:97:3A:91:E2:EB:37:98:ED:35:E7
Authority key identifier: 1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
Certificate issuer: /CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Certificate serial: 01964D1039F94E25D7F09F2F9405AF540F64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 08:00:30 +0000
Manifest this update: Sat 19 Apr 2025 08:00:30 +0000
Manifest next update: Sun 20 Apr 2025 08:00:30 +0000
Files and hashes: 1: GYb1F3991igV-Xs-ZoTKTm-Vg7M.roa (hash: oDfsrWpPRTbFkqWOBaawHb+IseXIbMKYHakcvEvzdXQ=)
2: H5_9juMrPjV5eNnLmSFszoE3oyQ.crl (hash: I5TZIHvOlt0KYxcNflqpExc2aPrRgdBOpJHSRhxU7ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:39:f9:4e:25:d7:f0:9f:2f:94:05:af:54:0f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9ffd8ee32b3e357978d9cb99216cce8137a324
Validity
Not Before: Apr 19 08:00:30 2025 GMT
Not After : Apr 20 08:00:30 2025 GMT
Subject: CN=b0dd7d62018405f0fa3b973a91e2eb3798ed35e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:76:cb:fd:0e:79:6a:38:7e:92:df:5f:f6:
7f:ad:63:31:ba:37:4d:c8:a9:cc:e1:96:79:fa:89:
7c:8b:d9:c1:64:8a:fc:01:5f:ee:c7:6a:b8:2f:36:
e7:1e:47:dc:32:74:d6:de:f7:26:84:e6:9b:44:ee:
42:8f:02:f2:b8:1f:8d:79:a2:94:93:eb:1d:75:c3:
e1:a3:e8:ac:27:d4:98:e4:37:d5:78:f8:4f:47:4c:
6f:11:1f:e6:ed:b0:63:2c:d6:55:a1:1f:be:d4:ce:
75:fd:9b:ce:b7:8f:c7:2c:fe:3b:86:87:91:91:a4:
58:2c:5d:b7:ba:e2:49:d8:f3:35:2f:52:ca:78:b5:
a4:0e:96:6d:eb:d9:e5:9d:b4:69:8b:f3:ba:cc:92:
16:16:90:9d:18:53:8d:ca:99:e6:c0:b4:43:a8:ae:
6a:f5:47:58:6c:e4:75:0c:20:3d:12:6a:04:fb:c7:
8e:33:35:8e:87:bc:ff:59:22:31:b3:f6:82:9a:2f:
f9:04:16:53:bd:0a:e3:b8:2f:9b:a0:ed:0b:dd:5c:
2e:5d:86:d3:06:9f:0e:82:70:dc:d1:8f:d5:54:b5:
5a:6d:f8:b6:b5:9c:ec:c3:bd:1e:29:44:78:a0:31:
d6:15:a6:89:35:d9:7e:b9:5e:dd:c4:7b:3f:a7:52:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:7D:62:01:84:05:F0:FA:3B:97:3A:91:E2:EB:37:98:ED:35:E7
X509v3 Authority Key Identifier:
keyid:1F:9F:FD:8E:E3:2B:3E:35:79:78:D9:CB:99:21:6C:CE:81:37:A3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5_9juMrPjV5eNnLmSFszoE3oyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/03ffd0-7e8b-43fe-8eee-aae638dbb1c1/1/H5_9juMrPjV5eNnLmSFszoE3oyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:96:ec:11:9d:d9:56:ac:b2:8a:cb:3f:3b:97:7e:f2:9e:15:
6f:9e:43:89:1e:82:bc:c6:a1:23:0a:33:52:e9:1d:63:d4:6e:
c9:90:49:ac:c4:14:8f:cd:51:0b:0c:64:73:de:df:35:8d:65:
4d:70:fc:3f:1e:7f:72:97:27:7e:1c:26:c0:a6:f5:4d:31:65:
ef:8e:46:c7:bf:52:03:f0:51:8c:e9:58:74:a7:e0:d1:9f:62:
f6:84:83:0a:1a:21:ca:dc:5e:2d:6d:6d:14:65:ac:37:e8:da:
54:3d:06:38:68:b7:c0:d8:43:e2:34:04:d8:12:84:cd:71:98:
84:29:09:fd:53:3b:b2:af:9f:29:90:6d:54:1c:14:ea:58:ec:
aa:0a:69:e8:14:c0:82:d8:a0:0a:ab:5b:54:51:3d:65:2e:13:
62:23:f0:44:ef:1c:7b:e1:d5:65:88:b4:b2:f4:18:b0:5d:b2:
fd:ad:ce:df:40:7f:96:ce:7e:ca:66:61:e9:4b:c1:46:10:3f:
b5:d3:82:72:60:82:74:13:f6:2a:80:4c:3d:ae:32:0a:ed:e4:
6a:c1:c9:7b:6e:9e:8a:4d:d4:33:9d:3c:7a:fe:cd:d0:3f:71:
06:2b:e3:08:0c:21:40:9f:d7:34:2c:e8:48:9c:26:ec:70:9b:
b6:56:2e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:23:25 2025 by rpki-client