Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: v2cgv3Krfg1SVuUg8Y1lyPen+/5V2fJNeBKUOR+UTMw=
Subject key identifier: 85:7B:2E:37:0E:53:3C:F2:C8:DC:1F:DD:8A:03:08:2C:54:56:DD:DF
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0196187E958CE69AF0CE4CAA621074249142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 07D8
Signing time: Wed 09 Apr 2025 03:01:10 +0000
Manifest this update: Wed 09 Apr 2025 03:01:10 +0000
Manifest next update: Thu 10 Apr 2025 03:01:10 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: ujOy1nlx4WXGstw0rOZAhYlYZ5m6MSPrZqrAVbzSRsE=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:7e:95:8c:e6:9a:f0:ce:4c:aa:62:10:74:24:91:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Apr 9 03:01:10 2025 GMT
Not After : Apr 10 03:01:10 2025 GMT
Subject: CN=857b2e370e533cf2c8dc1fdd8a03082c5456dddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8f:d9:2a:3f:01:79:5f:45:63:0f:b0:9b:97:
87:cf:d3:9a:27:a6:da:1e:ab:e2:bf:91:7a:b8:fc:
75:cc:65:c7:96:20:bd:ce:22:3a:b9:20:e4:72:c0:
ea:da:dd:48:bb:ba:13:30:b0:d8:f1:3d:54:07:2a:
fa:0a:27:27:67:f6:ad:3c:98:3a:76:52:53:4a:27:
18:da:e1:d7:01:0e:15:a6:6d:74:98:df:f2:4f:e8:
c1:73:71:90:91:26:60:bd:d5:29:ea:f3:35:d2:9f:
91:83:75:0e:17:93:f7:24:ef:c4:bd:97:57:de:91:
d5:55:96:f6:82:e7:2d:cc:3d:fb:84:9c:d2:73:b0:
8f:eb:ab:9c:af:3d:14:fe:4f:09:7b:fe:6c:83:e9:
65:33:e8:c1:5a:5f:cd:2f:6c:95:8c:d7:98:c9:a9:
91:b6:33:c3:da:85:0e:0f:65:f4:f4:3c:94:0b:ef:
e3:87:59:0f:db:3a:cd:3b:20:f3:aa:c0:e4:e3:2e:
72:58:3e:da:af:ac:fc:f6:86:2d:1c:de:e5:8e:75:
8d:b2:36:c6:9a:15:29:bc:be:2b:9c:c9:8d:f5:13:
60:e7:88:b6:91:1a:3f:28:06:90:5a:31:74:03:b5:
c8:b7:b4:9d:b5:b8:0a:4b:18:ad:29:9d:d1:29:9c:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7B:2E:37:0E:53:3C:F2:C8:DC:1F:DD:8A:03:08:2C:54:56:DD:DF
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:89:16:c2:3e:13:7f:ca:2b:4d:d5:33:11:79:22:30:ce:04:
73:a0:48:74:80:c8:5c:a1:30:3e:1e:5e:27:31:74:68:34:61:
0a:fc:42:02:e0:61:07:19:91:16:a7:1d:0c:59:ad:6e:86:f1:
61:cf:84:26:78:e2:ac:17:9d:1d:07:31:63:a1:f4:66:6c:df:
86:4f:6c:b9:5c:a4:b5:b0:1f:0a:9f:b0:4c:40:48:3c:fa:ce:
bd:9e:45:1e:5d:f6:19:3d:9a:1a:c6:e7:79:7a:8f:b6:4f:12:
0a:74:e0:00:44:df:67:95:9f:33:80:22:71:36:18:7a:af:b7:
38:7e:f0:f2:f4:b0:8d:30:29:82:d3:c7:da:a1:0e:e4:74:a8:
31:e8:e6:0d:fd:14:52:c7:e6:50:f0:b4:5b:67:37:87:9e:ce:
2a:29:23:74:58:0e:b6:a0:ed:a2:fc:22:63:2d:76:8f:a3:a4:
ef:36:52:29:04:8e:e5:ca:28:b8:44:5c:24:de:4f:29:5d:a3:
33:62:ea:6e:03:95:b5:37:19:b2:b5:13:70:e9:bd:75:09:53:
ee:f9:be:67:1b:f3:4f:7b:bf:f8:8f:c3:87:63:9a:36:49:da:
89:07:ed:19:07:5f:bb:60:6f:65:23:1a:3d:9d:01:b9:7a:8a:
24:70:08:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:19:09 2025 by rpki-client