Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
File: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft (raw, json)
Hash identifier: 22KVubifVGiJbvZXeOifulhV3cj+1UohdZalsL2NNKE=
Subject key identifier: 95:73:EB:34:ED:78:CD:49:55:5A:DA:38:09:57:79:09:C0:7D:7F:0F
Authority key identifier: 1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
Certificate issuer: /CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Certificate serial: 01963D65F83C48D119DDCCC1647488C05036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
Manifest number: 09F6
Signing time: Wed 16 Apr 2025 07:00:14 +0000
Manifest this update: Wed 16 Apr 2025 07:00:14 +0000
Manifest next update: Thu 17 Apr 2025 07:00:14 +0000
Files and hashes: 1: H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl (hash: M9MxM1WRfimxp2/4mlp3s9KuhAZoNjXv70pqkZegDUQ=)
2: ntEteGeDZu85wNJOAqgjTrUSx54.roa (hash: Q0TMKcR9tSI7oBt+FGXWaqYBj7j3GPsfDK87Fv5h+YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:65:f8:3c:48:d1:19:dd:cc:c1:64:74:88:c0:50:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f9004ea0538c73c23a3d1dfdc121f0e600acdf5
Validity
Not Before: Apr 16 07:00:14 2025 GMT
Not After : Apr 17 07:00:14 2025 GMT
Subject: CN=9573eb34ed78cd49555ada3809577909c07d7f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:87:2b:3d:34:8f:1c:4d:16:88:c1:5e:b0:
fd:05:67:d5:91:b8:0d:d5:62:3a:22:d8:b6:4f:2a:
91:82:5d:f0:9c:8e:9e:bf:c1:6d:03:22:43:1b:81:
58:d1:75:41:57:ef:e1:17:69:a3:9a:60:61:b9:15:
24:2b:1a:ce:dc:b7:33:04:43:be:9d:68:0a:a0:06:
b7:e4:68:db:d4:1c:36:20:54:d7:9f:e6:a9:75:2b:
98:6e:38:84:c2:89:3a:46:fa:31:b2:d6:0b:4a:e3:
15:c2:d3:42:d6:48:2c:9d:c6:bb:f1:d3:7a:f5:a0:
dc:dc:62:9f:07:f5:3d:71:af:ba:9c:9d:c0:bc:2d:
71:16:53:c2:7e:c4:5c:1b:d3:06:29:27:12:07:18:
3f:6a:15:59:88:f1:f6:6c:db:62:5e:e3:59:5e:75:
fc:ff:50:da:3c:6e:a6:f4:e6:8b:16:12:52:ba:e1:
07:76:12:0b:2c:96:59:73:67:3a:02:88:d5:91:4d:
0b:19:19:11:2a:08:8e:93:e9:57:81:03:fb:69:54:
d5:30:44:db:86:2b:44:28:c0:69:00:47:b1:7e:a1:
8b:a4:c4:fc:9e:fb:2c:a1:15:06:d5:2f:7c:ab:79:
a2:d6:1a:75:f7:f9:3b:c0:f9:48:1f:a7:19:ef:67:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:EB:34:ED:78:CD:49:55:5A:DA:38:09:57:79:09:C0:7D:7F:0F
X509v3 Authority Key Identifier:
keyid:1F:90:04:EA:05:38:C7:3C:23:A3:D1:DF:DC:12:1F:0E:60:0A:CD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/23d7b7-5ae6-4631-b142-496abee7ce79/1/H5AE6gU4xzwjo9Hf3BIfDmAKzfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:0c:4c:3c:6f:6e:12:da:4e:85:04:b5:c2:d8:65:50:65:
a8:d6:9c:5d:26:5d:d8:70:49:6b:cc:c6:bc:5d:ee:68:66:9a:
43:44:2f:b6:8f:0d:61:d5:69:e5:61:ca:ee:49:48:92:b2:73:
88:d6:1f:55:0f:5f:49:df:03:69:c8:a6:0d:ce:0c:01:c0:63:
f6:17:7d:da:e0:60:a1:18:c8:ae:34:48:74:ba:ec:84:11:84:
e6:77:32:2f:5f:a1:92:b9:99:78:a8:6a:ef:46:17:35:08:b6:
23:5c:0a:44:49:a2:ac:5b:a4:10:c4:04:68:c2:9d:55:be:49:
a7:d9:85:4b:1f:a7:89:85:6c:e8:9b:ab:b9:e2:54:44:24:20:
ea:b2:e6:a3:6b:90:e4:f8:1f:43:19:66:b6:a3:86:71:b1:56:
05:27:8a:8c:f2:f9:6a:3b:cb:dc:c6:f1:7b:38:d4:37:3d:8a:
04:e7:46:ea:df:5a:70:c6:dd:c9:3c:85:a0:0a:9b:b2:52:82:
f9:96:e6:9d:11:dc:7b:19:7f:84:93:45:e9:cf:96:3e:8c:a9:
4f:54:b8:91:96:2e:3e:15:d1:28:62:54:2d:ce:91:a2:1b:fb:
35:ce:22:ee:35:dc:5d:7d:2a:4c:80:c3:cf:83:96:27:9b:7b:
4b:49:0d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:33:02 2025 by rpki-client