Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: oeo4PCV8M90PzjHxVvQsr0/6CCtLhOeZt0ec87I+45U=
Subject key identifier: 72:68:DB:57:D0:8A:45:7F:34:76:F9:D8:9E:AF:36:8D:53:4B:EE:C1
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 01964FDA18B83DE6665CAEF1B077C8588591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 21:00:15 +0000
Manifest this update: Sat 19 Apr 2025 21:00:15 +0000
Manifest next update: Sun 20 Apr 2025 21:00:15 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: kirMRNi/7tMin/xRZ/F0tuGs161Ak5ocHixz6oRQ9a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:18:b8:3d:e6:66:5c:ae:f1:b0:77:c8:58:85:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Apr 19 21:00:15 2025 GMT
Not After : Apr 20 21:00:15 2025 GMT
Subject: CN=7268db57d08a457f3476f9d89eaf368d534beec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:62:a4:d4:72:88:96:b9:8e:ea:a2:fd:f1:
c2:e7:ab:50:49:10:96:4d:c5:71:84:e0:62:34:5c:
6f:c4:66:ec:99:67:28:82:fc:5e:5f:78:c3:be:c7:
71:ef:c1:17:6b:cd:7b:38:e1:11:71:d4:77:6d:d1:
42:be:61:55:32:e8:13:7a:9f:e8:66:d9:e4:9e:31:
3c:76:f9:f1:b7:20:94:51:e2:43:20:ef:0f:c4:2d:
d4:26:3b:39:6a:54:18:28:8c:66:a4:dc:43:fb:65:
09:05:7a:8e:55:ef:ee:11:4d:c4:7a:77:4c:63:96:
45:e6:73:aa:59:ae:12:7e:1c:a0:c6:09:31:07:48:
b2:a3:d2:28:97:51:98:c6:91:c2:76:14:26:e3:59:
75:bd:61:57:c5:9a:47:e2:f0:78:16:00:02:f8:01:
8a:21:28:85:66:6e:db:8c:9c:fe:e9:d9:6e:3b:60:
1f:7c:21:fa:8a:4b:98:a9:0b:f0:1f:41:4b:94:6e:
3b:9d:28:39:60:05:d7:64:dc:0f:d0:d2:ab:8b:20:
8b:73:a3:00:54:1d:3a:7f:83:3c:ad:d6:da:24:76:
b4:1e:3c:c7:f3:cc:df:86:90:04:87:59:a1:2c:4f:
18:43:da:44:d4:6f:23:c6:b1:b6:e1:f0:33:ee:96:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:68:DB:57:D0:8A:45:7F:34:76:F9:D8:9E:AF:36:8D:53:4B:EE:C1
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:28:1d:07:85:47:95:15:c6:99:c6:de:29:2c:5d:71:f6:e3:
ea:ad:ec:7f:3d:05:c5:7e:0b:82:f4:c5:d8:0e:cf:e7:e3:78:
ab:f7:57:3b:04:ff:ec:88:49:55:5c:5d:ce:98:34:fe:91:af:
73:d7:6f:29:2a:34:ee:8a:5f:b7:58:4e:96:12:62:97:af:22:
ec:09:29:28:7b:e3:65:dc:99:56:95:46:a2:8a:8c:8c:71:02:
14:1b:6b:95:5b:19:5f:ee:e5:01:33:a7:ff:4f:42:d1:81:9f:
52:68:f7:6a:0b:d7:36:6e:7c:4f:cc:7e:89:75:44:ae:40:05:
e9:01:46:a4:2e:c8:81:d2:f4:f1:99:78:b9:42:8a:25:9d:03:
02:05:c2:47:87:24:35:86:3a:4d:a2:9d:72:13:e0:3f:ab:c2:
65:ef:99:bc:2c:e3:a4:09:f8:62:24:46:43:e3:d1:e6:de:7e:
c4:ca:94:09:ff:a8:f7:78:f9:8f:30:c2:01:04:8f:d8:e5:60:
47:ab:2b:54:c6:58:e6:64:16:7f:ba:c2:77:6b:b8:95:30:2c:
50:86:62:f2:6a:cb:14:18:87:32:6a:2e:2f:63:e6:3a:a7:df:
e3:d8:bc:a5:77:41:dd:ef:ae:b2:2e:a2:ac:7e:76:a2:75:39:
ae:b2:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:49 2025 by rpki-client