Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File: H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier: WzirU9XBvC/NafjTZzHPatVNpN3/CZlZZ/5e7lkeVHc=
Subject key identifier: 04:82:C7:42:6E:DA:12:27:FE:9C:33:84:DE:26:05:25:70:75:44:B2
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer: /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial: 019629A9AF35F1A6E97E28F446D323EE3A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number: 03AE
Signing time: Sat 12 Apr 2025 11:01:48 +0000
Manifest this update: Sat 12 Apr 2025 11:01:48 +0000
Manifest next update: Sun 13 Apr 2025 11:01:48 +0000
Files and hashes: 1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: Th4nUokw/rY/Y+ydZ5OCsLlhFZBZfQN/y7H6NWOMfYc=)
2: y-Jj6DyqKWn6BYWapkymjYaL5QU.roa (hash: gn98KweekT80SkX3KfiuOUzbXsngJC/J9zd5eWO66No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 11:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:a9:af:35:f1:a6:e9:7e:28:f4:46:d3:23:ee:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
Validity
Not Before: Apr 12 11:01:48 2025 GMT
Not After : Apr 13 11:01:48 2025 GMT
Subject: CN=0482c7426eda1227fe9c3384de260525707544b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5a:02:39:5c:c9:08:22:7c:f4:b4:d0:9c:05:
25:50:5f:f5:3b:81:19:39:e8:f9:68:c5:33:94:e3:
87:72:df:f6:29:d0:84:8c:b1:d4:91:47:04:12:da:
af:41:41:33:99:b2:96:05:1a:ef:2d:26:be:c1:aa:
cd:42:b6:34:33:31:13:e8:04:2f:95:25:6c:d8:21:
14:58:78:e8:ca:8e:ac:8a:e3:8c:8f:f7:19:02:35:
db:3d:74:8d:ef:a1:2f:62:f2:ae:c2:df:36:44:4e:
23:14:0b:05:ac:f4:f0:56:4d:ec:c1:88:ec:1c:2b:
36:41:93:de:dd:2c:28:d2:fc:ee:9f:d3:4f:cf:d8:
ab:86:fa:ee:d4:fb:fc:b5:0d:c2:fb:e0:5e:eb:b6:
cb:8d:1d:80:ae:32:e2:22:36:5e:88:44:95:18:b9:
58:da:89:ed:ef:95:f8:3d:d5:56:d9:a5:79:19:8d:
49:72:82:f1:4a:21:0f:aa:87:43:42:7f:86:29:aa:
63:62:1e:62:7e:c7:98:9e:76:a1:8e:f3:03:ec:a4:
9d:6f:34:cb:b6:9f:2c:89:32:6c:9f:15:a4:9e:f2:
66:ad:a1:05:c9:c4:44:ca:8d:e8:45:81:00:70:e1:
2d:36:42:ff:6a:85:6c:89:d9:db:e1:bb:61:70:08:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:C7:42:6E:DA:12:27:FE:9C:33:84:DE:26:05:25:70:75:44:B2
X509v3 Authority Key Identifier:
keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:07:b9:ce:2c:aa:50:d4:f6:10:90:1f:fd:e4:e1:89:65:96:
d6:34:7d:44:c5:a2:a6:a4:b1:c6:46:13:ae:a1:14:31:9d:9c:
e5:20:a7:3a:f9:14:44:3b:5d:25:dc:e1:8d:03:f5:68:6f:52:
57:fc:8c:77:b3:2a:3e:83:70:93:47:25:ab:86:5c:76:ec:bb:
32:35:5c:3b:53:0a:bf:15:72:27:24:69:47:a0:12:b3:3d:92:
61:98:38:45:c5:72:ca:ac:70:af:94:3b:7c:5e:ca:fb:0b:d5:
7b:9f:0c:8e:10:78:7a:e9:4a:78:8e:e8:6c:79:25:63:c8:3a:
5f:80:ca:a5:dc:27:be:73:ec:da:35:3b:a4:ff:a3:5d:c8:42:
9f:ab:2f:fd:5b:3f:e0:66:83:aa:24:30:c5:1d:e8:58:9e:f5:
5f:72:31:e6:1c:9e:4e:fa:ca:3f:fa:e4:2b:be:bb:d5:8a:dc:
e3:9a:32:7c:74:7d:67:dd:ad:8a:54:06:5c:3d:49:65:2b:8a:
01:e1:03:3b:f2:21:71:54:20:6e:c8:79:0b:9c:ab:43:f3:1b:
ff:5b:69:17:be:d5:db:60:ac:f6:0a:4c:c5:52:50:e0:61:76:
99:51:99:08:83:7b:c6:40:56:66:54:b4:c0:df:e5:2f:24:d9:
9a:82:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:59:18 2025 by rpki-client