Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: enDxOh/89cHgoxnSBwss//fkxCPnrt8hwVoza9GQqx0=
Subject key identifier: 1A:30:7E:E9:14:0F:5D:F9:94:D3:B3:60:EA:9E:91:74:ED:98:A9:2C
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 019653B727CEAC81CEFDBE9BF320E81B27E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 11A8
Signing time: Sun 20 Apr 2025 15:00:34 +0000
Manifest this update: Sun 20 Apr 2025 15:00:34 +0000
Manifest next update: Mon 21 Apr 2025 15:00:34 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: 6q1TgwytFnEH6A6L9akUnmB7UP6905lXkpSP6TRkaJk=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:27:ce:ac:81:ce:fd:be:9b:f3:20:e8:1b:27:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Apr 20 15:00:34 2025 GMT
Not After : Apr 21 15:00:34 2025 GMT
Subject: CN=1a307ee9140f5df994d3b360ea9e9174ed98a92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:96:f9:d2:d3:77:50:44:9e:83:6b:c1:66:
a6:cb:5e:e2:6b:04:2a:8d:02:00:49:54:ac:dd:87:
05:df:b6:22:b0:76:6d:48:a6:a0:fb:a9:46:d6:ed:
ac:e1:46:f2:2d:20:b4:2e:07:9a:a4:d4:c3:d6:05:
32:4c:50:2f:b9:d4:88:f8:cc:46:d6:89:a0:c0:fd:
c0:58:e6:b9:52:0d:c2:a6:ca:e3:f9:bf:ff:64:ed:
47:69:68:c2:0b:69:38:68:38:79:f2:31:0c:80:b3:
a4:e7:d4:83:f5:38:5d:32:df:25:f5:fc:cd:45:57:
b2:ac:f4:26:c3:4a:f2:ac:76:eb:8d:26:84:14:12:
a5:ca:cf:a9:a3:67:2a:37:7a:77:36:99:a7:60:6f:
e2:fc:bd:cf:3e:4d:ff:06:b1:94:84:b4:18:ba:dc:
61:58:31:c0:ee:f3:f6:fc:63:72:86:fa:e4:f7:54:
55:8e:fe:e7:db:06:7d:da:3d:f8:7d:5a:42:39:8e:
87:9b:e5:df:d1:d2:b5:c6:87:ca:33:1b:7a:10:e6:
c0:9d:ae:5b:6f:2d:81:5d:93:a5:f0:33:96:2a:28:
39:b4:a8:24:5c:ae:8a:b2:c0:38:0c:57:d0:e8:5e:
be:4a:f3:3d:0f:ca:c2:fd:95:5d:08:e2:ed:ed:6f:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:30:7E:E9:14:0F:5D:F9:94:D3:B3:60:EA:9E:91:74:ED:98:A9:2C
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c9:56:6d:7b:03:22:2f:dd:61:06:f0:03:f8:79:f4:6c:f9:
4e:b1:59:e0:3a:b9:b0:69:38:9c:4f:b8:ad:1a:f7:28:62:72:
7f:e3:ed:18:2b:8e:09:bb:b6:09:0b:09:d3:72:96:92:a0:ac:
51:8e:61:17:ee:15:d7:2f:de:fd:b0:7a:a1:cf:7a:10:72:b0:
53:cb:9d:b2:c7:ce:78:bb:23:2b:2f:71:f9:8f:02:b6:ee:2b:
5b:71:23:2e:a6:a3:4c:b5:c5:e7:8d:b6:f3:a4:ea:fc:79:0a:
b4:3d:06:33:f7:30:41:1e:c7:af:e0:96:74:c1:71:70:c7:43:
31:50:c5:a7:e6:8b:0d:d6:9f:c8:17:7e:0e:f7:e7:f3:67:48:
54:f2:2b:66:1f:43:2e:72:e9:61:71:b2:e4:d2:50:41:c7:96:
3b:4f:5a:7a:59:97:87:3d:7b:3b:44:86:1d:01:52:2a:8e:72:
ef:6f:c6:d6:2f:e1:33:c7:44:70:d5:b2:9c:6d:62:42:0d:73:
99:0d:b0:7f:5f:1d:12:14:59:3f:74:a7:55:c1:74:bb:1e:5f:
e9:da:c5:9f:e2:dd:ce:5c:6c:d8:5f:76:aa:54:55:82:21:b4:
b7:ec:63:2b:f3:6a:ac:86:8a:93:73:53:ea:45:52:34:1a:ac:
9a:78:15:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 20:21:43 2025 by rpki-client