Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: NVMWVbOckrNISl54gL0Ztc2T6337B4WZa2y7Tow4F3w=
Subject key identifier: A7:0D:26:30:98:59:D0:13:75:CE:B3:E4:6B:FA:FE:64:61:62:30:95
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 019655A5C59D02A41D10A62471FFFC6B8C43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 00:00:49 +0000
Manifest this update: Mon 21 Apr 2025 00:00:49 +0000
Manifest next update: Tue 22 Apr 2025 00:00:49 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: pJzdURLVOCyqhwi/ZeQCSlOcGFumXugwc9r3Quyo3k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:c5:9d:02:a4:1d:10:a6:24:71:ff:fc:6b:8c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: Apr 21 00:00:49 2025 GMT
Not After : Apr 22 00:00:49 2025 GMT
Subject: CN=a70d26309859d01375ceb3e46bfafe6461623095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:e0:f7:7b:82:91:dc:9e:e5:7b:5b:92:be:
68:4e:ad:6b:69:8b:17:8a:49:ce:f7:7e:6c:6b:34:
60:98:5e:6d:6f:6a:22:b6:62:93:a6:e2:6c:71:77:
ed:c3:17:7b:4d:03:1b:a8:18:46:4b:77:15:a8:9f:
a9:e8:c2:28:1f:d4:86:ed:dc:5b:c8:f5:c6:e8:46:
1e:3a:3c:a0:10:4b:35:0a:fe:8b:3e:81:5f:f3:8b:
7e:34:bf:78:6f:38:ab:7c:8d:e4:55:b7:af:c6:9a:
9b:b0:5e:40:37:7c:4a:7d:a4:9e:51:99:8d:e3:41:
d7:a6:36:9c:08:a6:e9:d0:e3:59:3e:29:b2:81:a9:
1e:3b:65:35:8b:67:26:ec:15:9d:1d:9d:32:66:ac:
aa:4d:97:05:31:ee:97:6f:c4:42:e7:b5:0b:5a:6c:
bf:ec:85:7d:ea:0f:3a:e3:cd:b1:1a:06:ac:df:d2:
6d:d6:62:b4:5a:17:4d:f4:67:d9:db:bc:1a:b5:79:
ba:17:df:93:41:41:59:00:9f:fa:01:28:2b:e3:e1:
c3:4a:f5:ea:2e:4c:cd:b6:65:d6:46:a8:cd:c6:d4:
a0:f9:00:42:df:9a:3d:2a:19:77:93:e6:71:6a:e3:
ef:8a:9a:af:6b:bf:e9:b9:34:d8:03:72:8a:4b:36:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0D:26:30:98:59:D0:13:75:CE:B3:E4:6B:FA:FE:64:61:62:30:95
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:53:80:cb:6b:92:ed:d7:87:ee:3b:bf:22:80:5c:ff:0b:b3:
44:bb:9d:31:ca:43:a5:6f:76:63:ad:fb:bf:cb:bd:23:e8:9f:
a2:ea:76:10:b9:38:7e:93:a8:7c:a9:2d:c6:30:78:ee:33:0f:
92:36:3f:fd:27:41:39:45:df:47:c9:e3:c7:23:f1:ca:2f:ec:
8e:07:03:b8:54:3a:25:8a:96:83:5a:7d:ac:c5:a2:36:63:00:
4e:79:e5:2c:3a:66:c7:a0:fc:77:eb:ed:14:d0:d4:dd:80:71:
8d:3f:93:0e:52:02:03:de:45:34:9d:42:f4:52:9a:22:de:76:
4f:0e:64:46:65:0e:06:a9:52:51:79:e7:84:db:6b:24:22:8d:
6d:42:9c:fc:92:42:f5:f2:6e:3a:c8:78:aa:5a:76:3b:67:01:
05:44:89:aa:d6:54:3f:43:4e:75:46:63:ee:0e:d7:9f:5b:63:
31:14:fc:a2:0c:18:98:5e:a6:e1:74:48:3a:4d:f4:17:a4:3d:
db:e7:dd:89:66:0e:b8:95:12:08:70:ac:83:fe:84:55:68:2e:
18:e1:7c:df:b1:23:75:63:06:8b:1e:e5:0e:11:86:23:7e:0e:
80:68:19:b0:bd:c1:d6:62:c5:ce:cb:ad:fb:f1:8b:27:43:3b:
7b:13:9f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:08:44 2025 by rpki-client