Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: u+PZlZwJhF33RtmZBXc68tv+urBCKIcz5NcMh7fiEU0=
Subject key identifier: 2A:9A:D1:B5:D6:08:B8:D6:81:D0:1F:FF:6B:88:5F:0E:A6:6B:D8:99
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 019655DCAA3040297F7633DA6073CAFC550D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 0554
Signing time: Mon 21 Apr 2025 01:00:46 +0000
Manifest this update: Mon 21 Apr 2025 01:00:46 +0000
Manifest next update: Tue 22 Apr 2025 01:00:46 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: hWnhVJwsraOj+zCPsV379LdQgrXNbDbYM10Dm5xzzWo=)
2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:aa:30:40:29:7f:76:33:da:60:73:ca:fc:55:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: Apr 21 01:00:46 2025 GMT
Not After : Apr 22 01:00:46 2025 GMT
Subject: CN=2a9ad1b5d608b8d681d01fff6b885f0ea66bd899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:72:74:89:0e:d9:6f:96:69:12:f5:06:50:
4a:68:62:0a:ba:fc:66:c7:4d:1a:12:fc:93:45:6b:
34:db:ea:aa:94:82:40:31:4e:a6:e7:e7:36:73:cd:
6c:e3:e9:fa:84:30:b7:ea:7c:b6:6e:27:29:45:08:
84:d2:f7:82:45:17:6e:2b:d9:72:4c:29:ef:a8:d5:
9a:6d:d3:44:04:d5:9d:b0:28:5f:94:97:2b:cf:1c:
5c:7b:fc:fa:2b:62:dc:c8:4d:0b:f5:64:15:3b:b7:
09:80:b2:95:6d:ce:6e:e2:2a:54:7c:62:89:11:50:
b7:b5:71:32:c2:58:ea:5f:f7:e0:7d:cc:3d:a7:98:
33:8a:82:8a:44:69:cb:19:e0:18:29:3e:52:9e:d7:
4c:85:50:11:89:ef:95:59:b7:ff:db:49:dd:e7:38:
9b:93:65:38:07:b0:c7:48:d4:a8:16:9d:4e:4a:d8:
3f:a6:a2:b7:3c:37:0a:ad:c7:cc:ea:a0:97:25:01:
bb:e3:34:cc:2a:4a:d8:eb:af:2d:91:f5:8d:84:88:
2e:c2:eb:f2:a3:d9:0f:e7:d3:98:3e:a5:5e:fd:74:
34:d4:ad:50:30:26:fe:3c:43:1b:f1:90:ae:17:81:
6e:3d:98:96:a0:5d:f3:7b:d6:f0:c9:3d:f9:7d:f1:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:9A:D1:B5:D6:08:B8:D6:81:D0:1F:FF:6B:88:5F:0E:A6:6B:D8:99
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:14:c8:45:a6:9a:8a:77:94:9f:ca:3d:a5:4c:2e:1f:53:d3:
41:0f:29:b5:d8:6c:9b:5a:c6:23:fb:09:04:ac:90:c9:61:7e:
6c:49:c8:03:13:37:12:9b:09:8c:79:1d:0e:0e:10:f7:b9:93:
4c:df:04:e0:b8:e3:b8:af:60:8b:55:bc:02:f5:7a:e7:c5:58:
c8:12:92:e7:1c:86:b9:d3:a7:e1:6c:91:77:02:f8:46:f2:7b:
03:aa:eb:04:4f:33:32:e2:59:d7:fd:fd:7b:22:af:c8:8d:20:
de:b5:16:44:42:89:6d:24:ba:27:18:2b:00:71:22:d5:2f:59:
65:e2:eb:68:7b:8f:13:51:bb:72:38:e0:3d:cb:99:95:c7:00:
c1:ed:ac:d1:c0:06:7e:64:8c:62:0e:46:58:25:18:bf:45:32:
c4:95:d5:00:ae:7d:b5:79:f5:93:de:46:41:48:be:74:52:65:
3f:8c:cd:94:b0:ca:76:df:d4:4e:4e:82:89:54:04:46:48:28:
5d:34:54:43:1f:2d:68:d8:48:9c:db:55:b8:d3:64:66:de:46:
3b:5c:b0:1e:c1:40:cb:e7:e8:28:59:0c:08:84:8b:9d:0f:53:
9a:7d:c8:51:dd:22:a1:58:2a:7c:85:9b:cf:9e:96:51:75:d2:
5d:1e:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:54:03 2025 by rpki-client