Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
File: H-AtvuYsmPAfIPR3DRakf3mr4yw.mft (raw, json)
Hash identifier: zi7lGKZmsnM8NjdmJrNcMfs1QzHzsQjVcKXWjxq5ibk=
Subject key identifier: F3:8E:89:0C:32:0F:14:C8:12:94:6A:48:9D:66:00:3D:E5:6E:F5:49
Authority key identifier: 1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
Certificate issuer: /CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Certificate serial: 01958BBB3572053B6C3855CD438AF0E48821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 19:00:56 +0000
Manifest this update: Wed 12 Mar 2025 19:00:56 +0000
Manifest next update: Thu 13 Mar 2025 19:00:56 +0000
Files and hashes: 1: B_Zgbr5zHePzPX0kzYDR02lMQd0.roa (hash: oTbqq1QauLG6/LAk+F5PPgZYsS1F6hnMzvsYBg19oqU=)
2: H-AtvuYsmPAfIPR3DRakf3mr4yw.crl (hash: kVMGwbGyAGkkgHerhedSvtqmMWSkeaS7DVmo3dS1MBo=)
3: iB3qHj6jc-vYvyyZv2bCeRVUFSQ.roa (hash: GN+JMGlNiyjaBMnzgzzZxTHdUtxnuMF8sNkbCRGW38U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:35:72:05:3b:6c:38:55:cd:43:8a:f0:e4:88:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe02dbee62c98f01f20f4770d16a47f79abe32c
Validity
Not Before: Mar 12 19:00:56 2025 GMT
Not After : Mar 13 19:00:56 2025 GMT
Subject: CN=f38e890c320f14c812946a489d66003de56ef549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:7d:51:06:94:71:64:d1:29:71:2c:59:fe:
c4:bf:8b:9c:73:23:24:ed:19:7b:79:bf:1f:5b:4b:
0d:7f:cb:4e:a3:2d:87:f3:21:00:2a:cd:75:51:64:
e8:2f:60:b9:9b:9c:a3:13:f2:a2:b4:11:67:88:b7:
2c:5e:b9:81:88:7c:bb:3c:d2:53:e8:06:f7:7f:b8:
27:fe:9d:b0:2c:af:56:80:11:61:c2:3d:f9:ba:50:
f2:15:62:73:82:f9:82:bf:1d:a6:96:a7:13:08:10:
70:df:e4:fa:ad:2e:2a:00:b2:a0:3a:84:d5:51:39:
de:6b:ba:af:2e:d1:96:87:e9:de:4b:84:de:86:37:
05:2b:08:ed:ef:e2:ff:05:0c:e0:1a:ae:93:d1:e8:
1a:22:18:c7:14:b0:60:bb:5a:23:a7:3d:d5:0d:3e:
14:f0:84:f8:68:34:c3:05:19:a7:34:65:24:d2:29:
01:34:9f:47:f0:69:3c:d5:ab:6e:40:78:26:5c:2c:
bb:60:cd:38:a1:36:29:a5:20:d5:cd:7d:ab:ef:35:
47:05:fe:7c:e7:f5:3d:f9:0a:a6:42:b5:bc:d0:89:
05:09:db:83:38:06:57:d4:97:44:a9:cf:e3:2e:4e:
b0:86:20:09:d6:f5:65:35:aa:66:93:87:0f:14:1f:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8E:89:0C:32:0F:14:C8:12:94:6A:48:9D:66:00:3D:E5:6E:F5:49
X509v3 Authority Key Identifier:
keyid:1F:E0:2D:BE:E6:2C:98:F0:1F:20:F4:77:0D:16:A4:7F:79:AB:E3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-AtvuYsmPAfIPR3DRakf3mr4yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a12a30-d60f-4032-8863-21253ea9f3a4/1/H-AtvuYsmPAfIPR3DRakf3mr4yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:66:81:73:90:6b:1d:11:df:8b:a1:19:92:33:9a:4b:a4:88:
83:99:61:b6:09:eb:89:10:97:9a:af:76:07:9c:69:c4:72:b1:
66:5b:7b:74:9c:31:94:48:21:c2:1d:9a:01:26:cd:45:40:59:
02:5b:95:bb:59:b3:5a:a2:54:55:fc:fc:86:ee:dd:c9:f0:6b:
31:ea:6f:c3:1c:7d:74:d1:d9:04:7b:14:14:bd:6e:30:67:f0:
d0:c4:28:9c:87:1c:e7:6d:8a:38:ba:bb:62:29:cb:89:a0:da:
54:9b:13:9b:3d:28:32:ea:a4:6c:83:8e:93:00:cb:58:9e:af:
8a:8d:b8:36:f9:86:80:7a:6f:2b:49:6c:b0:b1:c5:06:6d:95:
6f:d9:05:67:ba:2f:77:d7:44:d4:8b:18:d8:02:ab:ba:b5:7b:
c5:96:ab:eb:63:8d:35:12:f6:70:db:ba:47:17:6b:c5:04:4d:
99:24:92:83:91:6e:5d:45:e7:b3:b5:c5:23:19:ac:4a:6c:d1:
d2:8e:52:f2:9f:d8:5b:e1:6c:5b:42:ee:f2:a3:94:df:07:3a:
77:07:2d:e6:03:79:5f:4d:fb:2b:62:48:7b:87:34:d2:bf:06:
64:71:23:96:b5:a9:2c:d9:1a:74:33:72:d0:b3:48:90:31:1d:
e6:ab:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:45:18 2025 by rpki-client