Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
File: H1z20SDigTiwqi_IPLqbDpZ5bDY.mft (raw, json)
Hash identifier: FuvlyUH3LXvmCDP1NoBU0Vwwz5axybPu4Ts+981BBuw=
Subject key identifier: E5:7A:35:E7:44:4D:AE:A3:85:F9:35:B0:2D:58:4C:A5:42:D6:2C:17
Authority key identifier: 1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
Certificate issuer: /CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Certificate serial: 019658A69ABD324D6A5C362C1A6B40400318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 14:00:35 +0000
Manifest this update: Mon 21 Apr 2025 14:00:35 +0000
Manifest next update: Tue 22 Apr 2025 14:00:35 +0000
Files and hashes: 1: H1z20SDigTiwqi_IPLqbDpZ5bDY.crl (hash: s01poqqQIod6mAq9ZxNNU3K0C5PPx3mc3e1af+RbBxI=)
2: HUVkGsdlCFOUct2ob4-4pOtlsOM.roa (hash: IfkJT/mKBfcu6BevAktc/69QyZFWwDwWSgoOqzPD22M=)
3: dDCoImKQNrHXyasH5BqbAo27W3o.roa (hash: f48SfVN/nMYwPQ7yDQlyTF9yoojdYsN08X4hTrgTFDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:9a:bd:32:4d:6a:5c:36:2c:1a:6b:40:40:03:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f5cf6d120e28138b0aa2fc83cba9b0e96796c36
Validity
Not Before: Apr 21 14:00:35 2025 GMT
Not After : Apr 22 14:00:35 2025 GMT
Subject: CN=e57a35e7444daea385f935b02d584ca542d62c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:bb:f7:aa:0b:f6:fe:5f:f7:c9:0a:d9:c0:
03:16:3a:a0:9e:a0:af:f4:fb:5f:7b:60:5a:03:f2:
9a:df:5a:a8:90:b1:44:9e:a5:da:4f:e8:1d:32:00:
e3:84:41:09:d0:37:a9:7f:bd:76:9e:d1:7a:89:60:
ce:f3:65:59:61:b9:d5:e7:e7:ec:af:4d:ed:8d:76:
d5:58:01:b5:35:c4:bd:74:10:6d:09:a0:a3:e2:87:
70:a3:d7:91:c5:e3:71:53:12:46:a2:2a:1d:4a:09:
4f:e3:1d:15:be:79:1a:4a:f4:65:bb:8b:8f:b5:43:
29:fc:0d:8b:4f:f0:b4:fe:d7:48:4b:74:6d:57:5d:
c1:46:20:ee:2c:01:d1:43:2a:93:ce:b7:8f:d3:9d:
74:ab:e9:f5:4a:cd:9c:84:91:b2:44:17:90:a8:6d:
ed:05:68:e7:a7:08:92:5c:3e:4b:a1:7b:9b:a6:48:
9f:43:60:cd:6b:fc:2c:14:50:3a:09:cf:12:00:a2:
60:78:0e:f7:74:3a:13:02:1d:32:fc:0a:80:9a:1d:
b7:4f:08:53:32:a7:14:9e:eb:5f:fc:52:55:67:71:
b0:d0:51:43:56:73:2a:c7:65:44:ed:99:e2:9d:27:
0b:85:09:bb:db:22:e5:c9:cf:7a:cf:f0:dd:cf:16:
9f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7A:35:E7:44:4D:AE:A3:85:F9:35:B0:2D:58:4C:A5:42:D6:2C:17
X509v3 Authority Key Identifier:
keyid:1F:5C:F6:D1:20:E2:81:38:B0:AA:2F:C8:3C:BA:9B:0E:96:79:6C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1z20SDigTiwqi_IPLqbDpZ5bDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/00e8e1-c235-49a9-9f92-63831ae951ef/1/H1z20SDigTiwqi_IPLqbDpZ5bDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:96:80:06:35:ac:fe:1d:74:28:8a:0d:08:29:79:f3:60:10:
a5:88:96:a0:e3:09:c2:f2:f2:6c:32:b5:33:80:47:84:73:44:
fa:9b:b7:2d:7b:59:28:bc:b7:9e:cb:5c:c9:46:ec:7c:13:8d:
4e:f2:0e:2e:bd:b0:f3:15:5e:0f:ad:53:2e:ac:a7:c1:9d:aa:
d8:44:29:0c:65:13:95:e1:6f:49:46:0b:91:ad:29:87:ad:cf:
97:ae:ee:5c:c0:cd:66:86:7e:02:4c:1b:d3:00:54:f9:a3:f3:
b7:3c:a9:e7:ff:1e:ee:35:ac:64:31:a2:b7:35:ff:e8:03:f5:
74:a8:5b:25:3e:b2:97:1c:97:f8:b7:5d:c1:3c:73:4f:87:90:
30:65:eb:17:8b:e3:20:df:a4:28:d2:7d:f7:ba:ac:b0:67:66:
fd:70:d4:2d:08:51:33:7d:a2:fe:62:3a:80:62:a8:50:04:ff:
13:3d:c0:8e:c1:a1:1a:10:b2:89:a3:41:f3:43:f4:e6:15:21:
4a:bd:99:a6:81:f2:68:03:74:3b:a2:0a:dd:67:ac:20:54:ee:
e2:ab:b0:a4:57:64:e3:c5:7a:a1:fd:7a:bf:eb:65:fe:22:0f:
0f:d7:0c:9b:6a:74:c3:ba:86:66:bd:27:fa:cf:a6:d6:47:85:
d1:7b:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:35:01 2025 by rpki-client