Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
File: H_p_dysyOyTb5p0_Os91XmnWAc0.mft (raw, json)
Hash identifier: OWG4QCtLDmTlvwmYbi3gmah91c5hZM9TdPPm3Z9CfcQ=
Subject key identifier: 27:1F:EF:58:6C:DE:55:7B:2F:CB:CD:1E:16:7B:DF:32:87:93:17:3D
Authority key identifier: 1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
Certificate issuer: /CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Certificate serial: 01965981FFAE80CC2A86CD3E77EC71738BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 18:00:13 +0000
Manifest this update: Mon 21 Apr 2025 18:00:13 +0000
Manifest next update: Tue 22 Apr 2025 18:00:13 +0000
Files and hashes: 1: EmLYbat0-CjjrryGAbAlQnrrrrQ.roa (hash: 8A9ahdOL6eJIIDSIKOF59+Qm0B8lNaZhUtGUWL64Trk=)
2: H_p_dysyOyTb5p0_Os91XmnWAc0.crl (hash: 2y3waMXtKpzROxIuueIBvI9BP7JyVDJKT9EkyBTEjNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:81:ff:ae:80:cc:2a:86:cd:3e:77:ec:71:73:8b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ffa7f772b323b24dbe69d3f3acf755e69d601cd
Validity
Not Before: Apr 21 18:00:13 2025 GMT
Not After : Apr 22 18:00:13 2025 GMT
Subject: CN=271fef586cde557b2fcbcd1e167bdf328793173d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a8:7a:f6:59:32:35:bb:e6:6c:26:1f:e5:32:
b1:d4:81:28:08:b3:11:ab:9b:ff:4e:97:dc:54:ae:
93:48:82:e4:bd:d3:25:5b:0b:c0:5d:40:77:2b:1b:
8f:98:a8:01:fb:e6:5b:3a:b4:b9:21:5c:e8:f8:c4:
8e:db:92:59:4c:9f:ce:d7:75:6d:19:22:47:26:55:
c6:e4:b7:d8:5f:97:60:a6:fc:6f:66:05:33:aa:32:
15:1e:14:72:32:5c:e5:9e:3d:8a:0f:06:45:ca:21:
02:b0:9e:4e:73:02:da:e8:8b:5f:96:41:0e:4f:a2:
6e:91:63:31:84:31:b1:0c:1a:fd:67:93:0f:96:11:
f0:f2:01:4f:72:d1:bf:58:be:12:4b:1d:02:42:b1:
1e:02:0c:f5:22:6a:57:c4:72:ab:14:ed:db:24:76:
2d:c6:f8:89:1b:6f:5b:0e:86:28:bb:de:ed:fc:d8:
3d:43:49:d8:0c:d8:95:a7:44:20:93:9b:e3:fe:ea:
c2:51:47:92:1c:61:44:a6:bd:c3:04:f9:4f:76:02:
b1:55:95:e8:b0:26:4d:19:d1:d0:92:b1:54:25:35:
07:ed:28:1c:27:d1:82:bb:39:f7:50:7a:ec:95:2a:
3c:77:a6:e0:32:4b:56:5d:9d:15:5e:ce:8a:56:5a:
b2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1F:EF:58:6C:DE:55:7B:2F:CB:CD:1E:16:7B:DF:32:87:93:17:3D
X509v3 Authority Key Identifier:
keyid:1F:FA:7F:77:2B:32:3B:24:DB:E6:9D:3F:3A:CF:75:5E:69:D6:01:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_p_dysyOyTb5p0_Os91XmnWAc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/506b38-76ec-472e-a94b-87034f9fce61/1/H_p_dysyOyTb5p0_Os91XmnWAc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:33:04:9d:af:17:33:8e:4b:f2:ab:d1:86:7d:86:be:48:ee:
58:e5:99:fc:a3:49:ed:e1:2e:c7:4d:7b:fe:4a:c6:b7:e0:bb:
a8:c2:73:18:ab:19:2e:bb:ee:99:75:bb:79:0e:aa:28:a8:c5:
94:a0:c4:3d:4d:d4:5c:6d:d2:e4:ca:48:62:bd:2e:42:d8:bd:
b9:45:f9:d8:a7:66:6c:ee:b3:53:b7:c8:d7:0a:b9:4d:f8:67:
11:57:b2:4f:a4:60:75:67:39:4e:3d:56:b3:85:c6:84:f9:93:
a2:91:f5:bd:16:72:a0:a1:cf:1a:fb:a0:48:81:98:6d:bb:1b:
10:4e:ce:6f:cb:db:99:47:3e:be:37:e0:d6:70:83:59:68:0c:
0c:07:35:f0:b4:05:a2:54:9c:56:c7:4d:07:5c:b1:fd:24:4e:
53:ca:26:e6:66:2d:39:06:35:6a:d7:10:74:89:01:68:16:fc:
02:36:80:2a:18:27:9a:86:2e:6b:73:35:b1:8d:f8:b9:0a:5f:
ff:50:b2:e4:ce:46:3e:a3:0f:d6:87:8a:8f:1d:32:3a:0f:f1:
d0:35:4b:cb:af:29:fd:00:57:c9:fe:05:f3:c4:ae:30:94:fd:
bc:17:05:6a:11:31:f0:c4:57:03:60:f2:a1:34:e2:21:26:dc:
41:53:60:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:10 2025 by rpki-client