Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: qvHmSuZbTTmZxsh6rwEsHEDxSAeJaVIdpfqV8PdCMsY=
Subject key identifier: BA:E6:BD:61:A4:5F:F4:D6:3D:06:CD:73:37:DD:BE:D5:C0:DE:43:E5
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 01958F615BC349BEA48A06EAA6B8BA9BCDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0B89
Signing time: Thu 13 Mar 2025 12:01:17 +0000
Manifest this update: Thu 13 Mar 2025 12:01:17 +0000
Manifest next update: Fri 14 Mar 2025 12:01:17 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: iTB9NvcR84+/FQV//qcFmrW48M6KqSJQgdTXWfPNe3M=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:61:5b:c3:49:be:a4:8a:06:ea:a6:b8:ba:9b:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Mar 13 12:01:17 2025 GMT
Not After : Mar 14 12:01:17 2025 GMT
Subject: CN=bae6bd61a45ff4d63d06cd7337ddbed5c0de43e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:c0:73:c7:dc:d2:8e:a1:0d:52:64:e9:13:
20:60:f5:ec:7a:d5:dd:ea:f1:3b:98:9e:66:29:a3:
49:36:9b:fa:d6:da:c7:55:c7:9a:fe:c8:62:e9:3a:
f7:74:be:76:7e:5d:66:29:17:83:4d:2d:2b:82:57:
91:a7:3e:3e:ec:31:79:78:87:c4:be:ca:2d:ca:ce:
4f:c9:cc:d5:84:79:cd:15:85:0f:00:7d:00:b7:c5:
97:4c:16:bf:f2:3d:78:86:f7:90:bd:5f:ca:6e:97:
70:e9:c8:e1:99:f5:68:af:02:4c:86:b5:ff:a3:d8:
7c:41:38:b0:c7:85:84:3e:f2:29:fb:f4:30:ef:a5:
9a:9f:99:f2:52:80:b3:21:48:f5:00:c6:40:ee:af:
99:e6:1e:bf:95:d0:ef:8f:dc:c7:c8:39:3d:1e:0e:
86:de:1f:a9:d5:ba:3a:df:ee:6e:26:aa:f1:22:af:
47:27:27:4d:d2:28:bb:f5:45:28:38:98:33:6c:b6:
80:21:a9:0e:d0:60:69:ec:b1:4a:4c:7e:83:63:a2:
4c:ad:a7:69:3e:47:10:5f:83:8b:fe:1d:30:2f:5f:
60:4d:e0:52:f8:c2:39:b0:a7:58:db:5f:51:e2:fe:
85:64:fb:76:e4:2a:22:91:7a:45:22:36:c6:5a:7f:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E6:BD:61:A4:5F:F4:D6:3D:06:CD:73:37:DD:BE:D5:C0:DE:43:E5
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:3e:60:48:41:65:eb:7f:c6:8b:3b:1f:1b:e7:a5:fc:41:
7f:f2:31:b2:3f:87:2a:e2:98:f1:a4:19:f9:30:a5:5b:57:7d:
46:b5:d7:e9:e8:68:32:36:00:b7:4f:2c:e1:75:92:2b:9e:4b:
88:e7:cb:fc:4b:f2:39:8a:f2:99:e2:94:e5:25:d5:68:db:81:
6a:ab:03:93:84:c8:1d:67:aa:2b:51:a3:e1:6f:3e:99:7c:79:
33:0f:9e:68:43:13:f6:af:4b:c8:c3:3a:db:d7:5a:f6:ba:63:
aa:f5:63:9f:55:34:ce:52:3f:c0:5d:9d:55:94:ee:cb:0d:4a:
f5:0c:c2:4b:17:b8:fc:7a:f9:5e:10:74:c0:22:9b:28:cb:8a:
f2:08:6e:6d:43:1b:76:89:6d:b6:b7:8d:6a:b5:39:cd:62:ca:
e9:38:5a:ea:09:e0:d3:21:34:73:4a:89:fc:4c:1e:a8:b5:92:
ca:64:45:9d:47:de:5f:be:d5:67:76:dd:26:ad:98:04:b1:8b:
52:33:0e:9b:c9:24:e5:24:ba:01:55:24:4c:a1:fe:29:19:28:
06:ff:a7:da:fa:82:38:a9:14:f9:51:dd:45:fb:62:67:33:39:
30:79:51:99:4a:be:22:22:a2:8a:95:99:6d:67:b2:5e:f9:9f:
0f:11:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:10 2025 by rpki-client