Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
File: h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft (raw, json)
Hash identifier: LViLxO3NL7lWk6oKRXjw4EC0tJcnvnVvkQWBSUzo3XI=
Subject key identifier: E4:DD:88:EA:C2:83:EE:C9:7E:2C:F6:D1:5A:FE:0B:2C:14:C9:E6:E4
Authority key identifier: 87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
Certificate issuer: /CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Certificate serial: 019644B22B7162DC08360AA801BC0911ED7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
Manifest number: 1218
Signing time: Thu 17 Apr 2025 17:00:49 +0000
Manifest this update: Thu 17 Apr 2025 17:00:49 +0000
Manifest next update: Fri 18 Apr 2025 17:00:49 +0000
Files and hashes: 1: TBNCAmXPiITjG3rsN7mx1xrR_KY.roa (hash: iXvzmMuxsBGvkR+ftL5TgUS2Lpzgxj9Gu947ZjpDrMU=)
2: h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl (hash: mfVfm2TwgrPIWlqXkny5SZNBX99kZg9XK6WwAJbYRuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:2b:71:62:dc:08:36:0a:a8:01:bc:09:11:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874fc0fba1b836c23ff6df468c8abf7d3a8216ce
Validity
Not Before: Apr 17 17:00:49 2025 GMT
Not After : Apr 18 17:00:49 2025 GMT
Subject: CN=e4dd88eac283eec97e2cf6d15afe0b2c14c9e6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:d3:41:36:ef:bd:88:d4:54:14:3e:56:86:
be:5f:03:05:57:f6:09:22:44:64:65:b4:ec:e7:a2:
bd:13:3b:ba:bb:7b:b1:96:4e:9b:b3:c7:b9:da:05:
e1:98:e2:87:73:a1:32:c1:c1:8c:dd:42:20:88:ea:
29:f9:4a:32:7a:ab:4f:1a:20:3d:dc:89:0c:25:4d:
c1:8f:85:03:40:22:b7:c4:9e:4a:a4:5c:93:cc:59:
3c:65:71:44:47:39:65:a3:34:d8:fc:d1:64:aa:7a:
be:05:1f:2e:be:b1:87:8a:d9:a6:4e:0c:91:40:64:
17:bf:50:e3:76:5f:e9:47:d9:33:f9:13:ca:57:c8:
55:68:ae:ad:21:26:ef:cd:7e:16:d3:54:c9:e9:ff:
82:b4:fd:1c:ec:d9:4c:fa:51:9f:4e:bc:d7:f8:76:
24:29:08:ec:26:ca:fd:ea:11:cf:75:3c:86:65:f7:
54:91:02:fb:90:ea:dc:18:f4:c4:95:47:27:c9:dc:
3e:06:c5:6e:e7:a5:c5:7d:52:0d:51:1f:a7:c1:21:
e0:3e:17:db:22:ce:82:70:77:82:89:4f:d0:a7:9c:
7f:c8:41:92:6d:3b:b5:25:a0:ac:e3:1f:0b:d6:f0:
38:d6:b8:a1:ee:6d:c5:e2:3b:30:ee:63:9d:14:54:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DD:88:EA:C2:83:EE:C9:7E:2C:F6:D1:5A:FE:0B:2C:14:C9:E6:E4
X509v3 Authority Key Identifier:
keyid:87:4F:C0:FB:A1:B8:36:C2:3F:F6:DF:46:8C:8A:BF:7D:3A:82:16:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0_A-6G4NsI_9t9GjIq_fTqCFs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c15cf7-422d-4a8a-8f4c-2d54e582b5e0/1/h0_A-6G4NsI_9t9GjIq_fTqCFs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:4e:43:6d:96:e3:c2:75:39:e8:b8:32:4b:5e:3e:3d:bc:34:
33:25:70:b6:52:93:71:c2:ba:73:6f:e7:66:d8:99:8f:8f:d4:
a1:cc:03:65:29:9e:4a:90:d2:a6:cc:a3:07:ae:94:5e:d6:29:
5a:75:d4:a0:8a:95:76:d1:1a:1c:ae:6c:82:66:0e:ae:b8:43:
cc:54:3e:a4:0c:1d:f3:ed:f8:66:93:06:4d:b8:f9:c8:05:50:
70:ff:af:b9:e2:e8:78:a5:8b:30:46:fb:82:9c:dc:e0:0b:a4:
0e:fc:74:9f:10:99:29:3b:c4:de:f6:c2:52:9f:35:48:c0:3a:
f2:11:81:01:dc:9e:96:1c:71:b8:21:0b:fc:5c:07:aa:0a:82:
62:57:96:d8:03:c7:90:20:60:ff:ff:77:d6:23:fb:8d:49:6f:
6e:28:bb:2c:d3:32:58:86:17:95:03:b5:13:60:6c:e2:28:f9:
6d:64:d7:1c:39:1a:98:ba:f9:45:bf:77:76:2e:e0:dc:21:92:
fa:1f:34:f1:0f:55:52:f2:bf:84:e4:af:e9:b2:f9:36:db:7a:
19:28:06:99:7b:78:0a:36:35:b9:24:8e:7c:e5:dd:e4:68:ac:
7b:1a:3e:21:0b:c9:72:0b:cc:05:48:36:12:9e:80:83:b5:2e:
4d:43:be:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:31 2025 by rpki-client