Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
File: H6rKuORWuykZeac1enAk8AvrqvU.mft (raw, json)
Hash identifier: nAxSSEgoz2ry6WxoDDuAlGOUUuQ1WZQ3aPkTv67UL1M=
Subject key identifier: A3:A2:87:CA:DA:42:E4:11:82:DA:97:AB:0E:00:F4:29:F2:74:F8:FE
Authority key identifier: 1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
Certificate issuer: /CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Certificate serial: 01964C6B27E4B5BA49B87E9129687B8BD8CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
Manifest number: 03E1
Signing time: Sat 19 Apr 2025 05:00:13 +0000
Manifest this update: Sat 19 Apr 2025 05:00:13 +0000
Manifest next update: Sun 20 Apr 2025 05:00:13 +0000
Files and hashes: 1: H6rKuORWuykZeac1enAk8AvrqvU.crl (hash: P0W4PU89zuubwn+g9fTcHVvBPmzqGwIKAXmAxm11To8=)
2: d11D5FMeuAx9oHmui2Kj1XfjoC4.roa (hash: 5zOzBJZzZedY0D2DOhw0oc3kUo+4Q35gEG0yeOPr0rg=)
3: sUBkgJCpD3ZqzX_7qmTArV5BEgk.roa (hash: dqlXGiz9swMXmXvL7AO/g9/wLQ3iDn3rNE6iqCcU0fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:27:e4:b5:ba:49:b8:7e:91:29:68:7b:8b:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1faacab8e456bb291979a7357a7024f00bebaaf5
Validity
Not Before: Apr 19 05:00:13 2025 GMT
Not After : Apr 20 05:00:13 2025 GMT
Subject: CN=a3a287cada42e41182da97ab0e00f429f274f8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:15:46:cb:54:3d:59:45:7f:cb:c0:97:a5:
a2:f9:a0:49:40:94:40:0f:ac:04:54:7c:de:f1:c5:
b0:3a:d7:90:53:3b:30:fb:0e:d6:dd:16:29:08:2c:
33:6c:ea:25:10:5f:d3:b7:08:ec:56:12:2f:c6:64:
ee:4a:54:e8:4d:c4:03:47:a4:57:e0:b5:f0:8d:10:
c4:be:5a:bb:d4:7b:b6:c1:01:34:07:b3:b3:76:a5:
96:60:40:fb:ad:18:89:90:90:ce:fe:a2:71:be:56:
a8:ba:12:c1:e3:d5:da:3e:45:b9:9f:a4:b2:08:96:
33:e7:0f:56:71:0c:bb:71:5c:f5:34:57:1f:32:de:
bf:9c:bb:77:45:71:c9:1b:df:a2:ee:d3:28:d2:63:
64:4c:1b:03:f9:9b:72:dd:68:b9:50:67:47:a9:f0:
7d:14:e8:36:67:90:86:61:91:ad:10:d2:8f:b2:94:
09:c8:12:a1:9a:39:5b:82:79:30:69:80:d8:5f:49:
dd:11:99:bf:ac:85:83:22:3d:82:25:96:54:bf:18:
8a:fe:cd:83:66:94:08:12:80:10:06:51:15:52:e2:
1b:58:0d:d6:ea:3f:8e:7f:93:c1:0e:80:2c:bc:a4:
cb:54:01:d1:84:58:1e:0a:e9:f0:c7:cb:07:e2:c3:
10:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A2:87:CA:DA:42:E4:11:82:DA:97:AB:0E:00:F4:29:F2:74:F8:FE
X509v3 Authority Key Identifier:
keyid:1F:AA:CA:B8:E4:56:BB:29:19:79:A7:35:7A:70:24:F0:0B:EB:AA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6rKuORWuykZeac1enAk8AvrqvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/501fd3-a8cd-4e2d-9d32-2fb72a0aef6d/1/H6rKuORWuykZeac1enAk8AvrqvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:cc:c4:43:da:68:0a:06:20:36:d8:65:28:68:0f:23:bf:91:
65:e2:04:2f:ee:70:9c:8e:c9:4b:f4:d2:7f:ba:4a:96:37:4e:
f1:4b:c6:88:8e:ce:56:59:de:9b:da:90:d0:ac:5c:22:f5:0e:
8d:e6:9b:44:11:cf:22:4c:9a:f6:c1:9c:78:af:66:99:78:97:
d4:2e:e8:ec:4c:c8:e8:28:b3:d1:a8:02:56:10:ff:61:dd:03:
ce:63:e9:e6:1b:ec:f0:74:01:98:89:18:71:44:fe:47:21:6e:
b1:e1:72:a9:84:b8:53:3d:b6:ce:55:06:4a:0f:c4:6f:af:0c:
80:5c:fd:a3:69:05:c8:bc:ce:bc:35:31:99:5e:36:4a:46:c7:
f3:0d:e4:12:3c:3a:0a:6e:fd:09:5d:78:90:f8:29:42:67:0b:
71:c9:c0:f9:3f:f3:44:6e:cf:4a:8c:fc:cf:2c:60:86:c8:56:
26:63:44:0a:26:24:fc:61:92:f2:43:b5:03:c9:b0:09:c9:9e:
da:04:f1:a0:2a:29:7f:d3:61:98:b8:87:ed:1b:05:90:56:a4:
f0:3e:c7:aa:94:50:ad:3b:4a:33:8b:9b:78:5e:7c:6c:5e:da:
5b:3f:e1:2d:8d:07:6e:1a:57:46:08:74:af:08:10:5d:b7:82:
47:d4:42:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:34:47 2025 by rpki-client