Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: mKmg8FYIGeV001LXPtaw/HSVATmsKoPb4AvKKwCQI3w=
Subject key identifier: 39:46:78:BA:DD:26:BD:DB:24:5E:C3:A9:1D:FB:2F:A6:FA:87:56:8F
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 019624F18E0311EF54327B5EDE24115BC43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 1476
Signing time: Fri 11 Apr 2025 13:02:12 +0000
Manifest this update: Fri 11 Apr 2025 13:02:12 +0000
Manifest next update: Sat 12 Apr 2025 13:02:12 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: qFg5mKFEZ/me3NgiKMswubxocxt8jkeEW90naU9ZR7E=)
3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:24:f1:8e:03:11:ef:54:32:7b:5e:de:24:11:5b:c4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Apr 11 13:02:12 2025 GMT
Not After : Apr 12 13:02:12 2025 GMT
Subject: CN=394678badd26bddb245ec3a91dfb2fa6fa87568f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:b3:25:56:6b:5e:0e:3f:60:ab:ef:76:99:
a1:30:e9:60:ee:7e:cd:67:ad:b4:e1:2e:94:f9:a7:
62:72:82:08:8e:22:24:ea:4a:a8:7a:28:d4:94:5b:
91:63:60:98:30:68:5b:23:4b:d0:c6:27:11:49:71:
2f:5c:f7:c1:99:45:32:62:d2:42:6d:6c:46:1e:c4:
ca:78:53:bb:bc:1a:fa:70:f3:76:34:a4:58:ab:04:
f8:62:3f:8a:27:70:cc:77:1d:00:b9:c1:e0:f4:d8:
97:1f:ce:fa:47:39:0e:44:d5:df:b9:a0:14:69:28:
2a:20:ca:5c:d1:9e:7e:9a:bf:d0:aa:d8:1d:bc:8d:
cd:a6:68:bd:f3:9d:bc:3a:b9:12:12:85:77:95:a7:
34:a6:75:d5:ac:aa:93:d8:d7:ec:7c:6f:35:22:dd:
29:0b:c2:51:de:7b:be:1c:c6:9f:c9:9b:0e:c4:6e:
10:62:c6:ed:6e:60:18:1a:46:19:2d:e7:30:82:9d:
7a:23:b4:c7:57:48:f7:06:f4:59:60:68:d5:72:8b:
a1:01:da:3b:5c:00:f0:14:ec:5d:96:1a:c6:7a:41:
b1:06:f6:7e:ec:5e:d1:46:45:4d:9f:3c:e5:17:73:
38:86:4f:1d:85:44:ba:8f:e0:28:e4:51:31:f0:a4:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:46:78:BA:DD:26:BD:DB:24:5E:C3:A9:1D:FB:2F:A6:FA:87:56:8F
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:9f:08:90:a1:bb:3d:c8:d5:ea:34:dc:e8:68:0a:fd:d0:
d1:fc:86:d4:68:ca:ba:70:ef:14:98:cb:21:f2:bb:f0:63:be:
bc:2c:91:11:a7:97:ca:db:05:ca:4e:80:ba:9e:25:be:30:d2:
9a:46:7b:10:fd:fa:a3:0b:8d:19:a7:1c:34:92:13:d5:67:2d:
f0:d4:9b:d4:91:a9:f3:ab:36:4d:5e:37:e8:dc:51:1d:06:44:
58:6c:69:ea:52:12:48:4b:e9:08:ee:fb:ef:fe:f8:08:25:f3:
c3:6f:e3:f0:4f:39:0c:75:f0:d1:ab:8a:34:b9:ef:37:62:c4:
ac:e9:87:f4:ba:58:78:b5:57:5b:cb:e6:7c:7f:95:4e:0d:b4:
df:3c:ae:6f:67:7c:fa:80:60:82:30:ea:b8:90:81:32:bd:d8:
05:10:2a:02:26:83:e6:fe:a0:25:f9:37:13:b9:1d:c2:2b:56:
be:b5:b2:f3:95:83:38:24:b0:b7:25:2e:7d:e7:3b:d7:0f:38:
69:09:b0:d8:23:18:a3:55:b7:3b:cd:d8:61:16:25:31:27:ca:
06:ac:f4:07:58:2f:79:06:3f:93:75:07:16:63:92:f9:72:b0:
1b:88:f3:0a:37:5a:e9:d2:00:f6:ab:38:94:2b:35:48:61:e4:
33:7e:c5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:29:52 2025 by rpki-client