Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
File: h5axwx_d4r1emPj7t3mKvEdJPPI.mft (raw, json)
Hash identifier: 1xB5XmTbmn3Z7FPvf6r+fa0h9519u2goejESZoV3thY=
Subject key identifier: 3E:0C:EA:36:AC:2F:F8:08:C3:50:09:14:A3:70:FD:FE:7D:7D:0C:78
Authority key identifier: 87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
Certificate issuer: /CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Certificate serial: 019752A1B83032CE1E7BB6C935BB1D360316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
Manifest number: 1213
Signing time: Mon 09 Jun 2025 03:00:19 +0000
Manifest this update: Mon 09 Jun 2025 03:00:19 +0000
Manifest next update: Tue 10 Jun 2025 03:00:19 +0000
Files and hashes: 1: Xaf_adaEk34l87Y0UzQQZjHD3uU.roa (hash: RtEuhMllYELC+PU6yqfyctqQo+07f0YVdbie5OODqqY=)
2: h5axwx_d4r1emPj7t3mKvEdJPPI.crl (hash: i6QggBITZT8nGsIJmx75jwNbNVnmoVykMfE5i0owPT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a1:b8:30:32:ce:1e:7b:b6:c9:35:bb:1d:36:03:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8796b1c31fdde2bd5e98f8fbb7798abc47493cf2
Validity
Not Before: Jun 9 03:00:19 2025 GMT
Not After : Jun 10 03:00:19 2025 GMT
Subject: CN=3e0cea36ac2ff808c3500914a370fdfe7d7d0c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:f2:a0:de:d7:0b:92:77:de:12:84:6e:ef:
94:97:21:fb:ee:5e:78:0f:d3:43:8c:94:10:d8:d4:
04:9c:d7:60:eb:a8:0d:4e:6b:75:09:3f:66:c2:ae:
38:ee:5a:e4:83:20:d9:b0:ab:a5:c6:6e:80:2e:9d:
bd:f5:d1:f6:ce:26:66:3b:49:8e:60:d2:21:d3:ec:
4b:7f:93:e9:df:a4:e9:28:74:87:22:59:fd:8e:9b:
4d:d9:e2:8e:2d:9e:c1:a3:07:42:47:e1:e8:17:8b:
a8:42:ae:43:ff:6d:c9:0f:79:58:93:80:c3:05:44:
71:21:84:4d:af:03:f8:3a:4e:45:ed:d9:1a:d4:23:
a1:ae:83:73:b3:2a:1e:3c:02:fd:ea:ba:8f:64:5a:
c3:38:f7:12:32:a0:7a:a8:9c:88:1f:e4:aa:17:75:
e0:ac:66:87:37:0f:9e:05:9e:b0:88:83:df:5d:5c:
79:c9:0e:a5:b4:b4:1f:17:0b:7b:59:3f:dd:68:45:
33:83:d0:2e:37:ca:19:c0:f3:69:89:78:4b:b1:61:
3d:83:8c:92:fb:4d:dc:ab:62:03:cf:95:44:9c:24:
da:5c:15:bb:7b:a2:19:e3:7d:c5:58:26:0e:92:e9:
28:ba:7c:cf:59:c9:6d:8a:69:fc:fd:bf:cf:6f:3d:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:EA:36:AC:2F:F8:08:C3:50:09:14:A3:70:FD:FE:7D:7D:0C:78
X509v3 Authority Key Identifier:
keyid:87:96:B1:C3:1F:DD:E2:BD:5E:98:F8:FB:B7:79:8A:BC:47:49:3C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5axwx_d4r1emPj7t3mKvEdJPPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/2343a3-d0f2-4e8a-87d4-4ae3306da793/1/h5axwx_d4r1emPj7t3mKvEdJPPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:67:a2:97:7c:03:40:d0:33:84:20:10:28:28:e1:d7:53:d9:
7a:d6:e6:b7:c4:4e:01:20:59:06:27:e1:bc:56:0d:17:08:ad:
9a:60:b3:00:1e:74:8a:cd:18:a1:ac:23:bb:5c:3a:db:a4:77:
ab:3d:b7:e8:da:61:ef:18:16:02:79:dd:73:3c:1a:0e:8c:78:
92:1c:de:14:3e:cc:4b:2e:fc:ee:3e:6d:86:91:16:91:fb:31:
13:04:f1:46:1a:bc:33:ae:6d:82:f1:68:e2:7c:11:e9:6f:04:
22:ea:22:84:94:27:04:57:c8:5e:7e:a1:e9:44:fb:e8:0b:d7:
c9:bc:88:b5:77:a0:56:07:8c:e5:7e:b0:65:37:6c:db:ce:c7:
fc:5f:c1:27:2e:b3:56:84:dd:ae:16:5d:84:b2:5a:67:25:cb:
5a:e4:5b:86:14:9f:25:ab:2f:f1:88:da:19:f1:4a:16:c7:4b:
13:b0:24:95:90:86:0b:e9:6b:1b:8d:49:32:14:ca:0a:a1:18:
cb:a0:75:82:96:ae:f0:3c:80:f9:d5:e7:5d:71:0a:0d:72:1c:
09:f8:03:85:f0:21:e2:0c:9c:d2:78:3b:cd:13:b6:a3:5f:0a:
5e:7b:29:82:34:09:6d:6e:87:28:65:5d:1a:43:99:07:27:4b:
d3:7b:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:32:00 2025 by rpki-client