Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: zXNRXPJwHnrCDSrDFINOysXz3iaMAZWmd9y6eELkxnk=
Subject key identifier: 91:D1:84:CE:B0:23:BA:48:76:EE:22:F0:C2:AE:96:0C:E1:F4:D8:51
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 01958CCE86CB0E1604698B5EE43ECA6F27A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 1365
Signing time: Thu 13 Mar 2025 00:01:39 +0000
Manifest this update: Thu 13 Mar 2025 00:01:39 +0000
Manifest next update: Fri 14 Mar 2025 00:01:39 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: x/Yk464HmnUECUJfkHsxO10lUL1F74hX+Zl2Q7wPcYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:86:cb:0e:16:04:69:8b:5e:e4:3e:ca:6f:27:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Mar 13 00:01:39 2025 GMT
Not After : Mar 14 00:01:39 2025 GMT
Subject: CN=91d184ceb023ba4876ee22f0c2ae960ce1f4d851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:fb:5b:c4:bb:14:87:ce:9e:59:56:2b:de:
86:c8:c7:42:7f:28:9d:8a:78:84:cf:63:51:36:7b:
37:c3:76:d9:5b:e6:1a:66:23:ee:7a:0a:cc:52:09:
54:d9:34:f4:52:77:81:ff:48:b5:81:42:0b:d8:ae:
00:1b:e2:20:0e:99:84:bb:e6:a7:3c:eb:b1:ac:f5:
d2:27:b4:63:00:77:06:7e:90:9c:e4:5d:dd:87:cc:
f1:ec:04:43:a1:71:23:be:bc:2a:de:de:16:fc:f8:
c0:59:56:ee:9f:c7:7b:d8:7b:0c:55:ea:ff:9c:eb:
13:a1:84:5b:3b:a1:09:b5:2a:ce:32:54:bf:85:05:
33:a2:1e:d1:a4:24:70:c1:66:ba:33:3b:5d:0f:7b:
2c:fa:83:6d:87:0d:a3:b8:2b:21:1d:e8:ee:27:ab:
c1:c8:60:74:ea:79:13:76:16:9d:c2:ea:86:51:4a:
40:a6:14:69:de:c1:0c:39:7f:17:0d:f5:df:68:7e:
72:c5:d8:9f:ba:6f:2b:7c:54:7c:0e:c4:6c:52:6f:
10:c0:44:3f:c5:42:19:ac:da:ae:33:74:98:90:e9:
e6:42:f2:7a:1e:f0:43:b1:3d:bf:f1:a6:a1:9b:51:
7f:9b:ea:b4:60:07:74:e7:c8:42:a2:97:c9:e0:5d:
da:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D1:84:CE:B0:23:BA:48:76:EE:22:F0:C2:AE:96:0C:E1:F4:D8:51
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:32:ed:07:35:9c:16:be:fa:5b:be:5f:71:8c:27:6c:20:76:
bf:0b:a0:84:bf:39:a7:10:6f:1d:11:6f:54:3b:45:73:bd:b2:
88:aa:4b:9d:b9:73:6d:0f:8f:96:55:d8:4c:a2:2e:a3:c9:1a:
25:29:7c:54:e3:bb:d4:0c:58:d2:b6:81:f1:0f:04:2e:ca:9a:
96:b3:32:08:2d:97:0c:73:53:37:72:97:2f:bd:fa:23:2c:20:
37:f1:9a:a1:45:cf:7a:d0:4e:5f:a9:7c:e2:3d:35:a4:8f:6d:
b3:47:78:a2:d4:fc:7e:34:d0:63:f6:d7:07:e9:e7:39:06:41:
19:a7:66:05:ad:38:0b:af:ff:0d:86:5a:97:fd:30:e8:ba:e4:
c8:94:72:af:2f:ee:01:33:c0:b1:d7:99:17:43:5c:82:54:00:
b8:3c:2f:b1:1d:39:14:ba:9d:85:2b:8c:1b:4c:b6:dd:2c:9c:
0c:33:62:f0:af:6e:c0:ee:31:ec:8e:2a:7a:b0:6a:b0:ef:58:
00:cd:55:ca:1e:3f:59:f1:03:af:42:e1:56:93:fd:1f:ea:b8:
04:82:b4:98:a8:66:9c:b9:3a:86:c8:8c:11:0a:ef:f8:63:cf:
ec:72:97:6b:b4:ad:78:0f:03:3d:9c:7d:ee:4f:fc:d4:34:44:
8f:73:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:30 2025 by rpki-client