Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: bv2tGRbEcFVqhvQAl3PcYYgv4HeUXr3SwLNkFLTO9Kw=
Subject key identifier: 56:FC:64:35:99:C1:8B:CC:94:83:F6:13:0A:AA:BF:D9:75:E3:24:9D
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 019653EE9022632EA151D893EDE105559444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 0934
Signing time: Sun 20 Apr 2025 16:01:05 +0000
Manifest this update: Sun 20 Apr 2025 16:01:05 +0000
Manifest next update: Mon 21 Apr 2025 16:01:05 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: 2HdydVDp5dpmcl+6+kdMJ4Ov5jSDKWeYmYHlzEuGhR8=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:ee:90:22:63:2e:a1:51:d8:93:ed:e1:05:55:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Apr 20 16:01:05 2025 GMT
Not After : Apr 21 16:01:05 2025 GMT
Subject: CN=56fc643599c18bcc9483f6130aaabfd975e3249d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:5f:ff:87:95:7e:fd:2b:5c:a6:ae:66:c8:
1f:2c:7d:1e:06:74:e0:ad:b4:b8:5a:23:1e:a8:f3:
d6:19:5e:8e:db:f0:09:ba:66:e3:07:b9:f1:a6:5c:
bb:15:1a:ef:40:e7:d1:30:b7:60:3c:54:ca:d0:05:
9a:1e:52:7a:85:30:1b:92:ae:da:22:52:1c:73:13:
c0:b5:83:da:45:3d:84:b5:47:36:c9:83:93:1c:ac:
ec:7c:aa:3e:ab:2f:a6:dc:2c:9d:74:9f:60:32:1b:
7a:ae:78:9c:2e:82:aa:44:a9:43:5d:d3:52:27:84:
26:67:c7:0b:d2:57:e6:dd:b6:b8:6b:3f:b9:6e:5c:
8b:d3:48:41:8a:9f:11:ef:b2:53:0f:e8:be:b9:c4:
e7:93:b8:0e:43:05:a1:bc:00:b8:16:8e:80:4a:45:
38:9f:66:94:83:c7:1a:d4:8f:3b:eb:51:9f:85:68:
5d:e2:c6:10:fa:28:b7:a5:aa:07:17:6f:df:83:c4:
52:2b:82:73:bb:dd:1a:54:c0:a6:da:e4:98:b8:19:
d6:1b:56:51:44:50:e2:59:8f:34:2c:c6:66:59:5f:
c7:19:31:03:49:9e:26:c9:ee:2c:61:d5:44:f4:92:
e0:c5:f5:14:44:3c:da:21:d1:bf:07:e1:7f:b4:94:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:64:35:99:C1:8B:CC:94:83:F6:13:0A:AA:BF:D9:75:E3:24:9D
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6d:08:2f:bb:f4:a9:97:c5:07:33:a8:63:c8:37:56:f0:e1:
27:63:2d:de:41:a5:9a:13:6b:de:8b:b1:25:58:4c:f3:3d:a7:
b5:e0:5c:22:33:a5:6b:95:d6:80:c3:f5:08:7f:86:7e:3d:fe:
f7:4d:69:ec:69:00:c3:7b:8e:a6:91:b6:13:d1:af:72:9c:9f:
5c:b2:1c:f6:f8:0d:0a:26:94:ac:fb:c7:d6:d6:a7:b2:3d:be:
cd:88:f7:68:13:78:ba:8e:8e:9b:45:cd:bb:04:17:b8:2f:1d:
9e:b9:16:52:22:69:73:a5:ff:22:50:59:0f:2f:7a:6b:35:ed:
71:07:bd:73:dd:33:08:41:f3:af:21:07:70:5c:2d:c6:2d:c0:
6f:6f:17:dd:20:88:1f:4a:6d:23:46:87:2f:e1:ae:46:5a:69:
dc:be:10:40:e5:c1:bb:c3:f6:5e:2c:ef:5c:91:67:52:1e:cd:
ba:65:ec:d1:35:e9:33:68:ad:be:32:94:6c:da:f8:4b:88:56:
43:48:a7:76:ce:ba:6e:fc:dc:8f:c4:35:e7:0b:0b:c7:e4:82:
73:c5:c5:d4:4c:01:4f:f8:df:2a:33:31:f6:13:5e:72:17:30:
55:4d:3e:ef:23:23:4f:aa:e1:ed:0c:20:e3:37:63:fc:2b:8f:
70:f7:5c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:08:27 2025 by rpki-client