Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
File: h338-RVp2BViJvwnkOZ5BnY6KwM.mft (raw, json)
Hash identifier: dAVvh385OEtPYw7Tk4/era5DoL2oEWf8lwvuMp0LxuU=
Subject key identifier: 00:32:72:16:17:D9:83:CC:35:86:17:37:98:21:E7:F2:D8:5D:8A:02
Authority key identifier: 87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
Certificate issuer: /CN=877dfcf91569d8156226fc2790e67906763a2b03
Certificate serial: 019644B26A3E4E12B7B5E2ACFB262AEC1694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 17:01:05 +0000
Manifest this update: Thu 17 Apr 2025 17:01:05 +0000
Manifest next update: Fri 18 Apr 2025 17:01:05 +0000
Files and hashes: 1: h338-RVp2BViJvwnkOZ5BnY6KwM.crl (hash: KZyJQ6bt56WVge8frhpRcgS3I+W5cjcxRJkbKn2TeRM=)
2: hw2W04D1is42TOmflaN39hcxH9E.roa (hash: fNZHjDeAyo42LcaysmyiDifSO0kt6UxDpr+XhWr9MzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:6a:3e:4e:12:b7:b5:e2:ac:fb:26:2a:ec:16:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877dfcf91569d8156226fc2790e67906763a2b03
Validity
Not Before: Apr 17 17:01:05 2025 GMT
Not After : Apr 18 17:01:05 2025 GMT
Subject: CN=0032721617d983cc358617379821e7f2d85d8a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a6:e8:e3:38:cd:a1:b5:49:db:6d:94:84:48:
80:d5:55:bf:05:f8:bd:a9:70:cc:3a:aa:67:14:6b:
ce:ea:44:f0:a8:b1:50:f5:71:52:49:e7:32:e1:9c:
70:8e:5a:3c:f0:ac:af:87:84:db:2f:8e:92:68:a2:
e5:e2:8d:d4:25:71:1f:64:6d:fd:92:9c:59:d4:fa:
5d:19:7b:4b:e8:b9:e3:8b:ee:88:97:43:b6:04:fe:
93:f0:f4:92:4a:64:cc:16:ca:f9:c8:3f:89:89:eb:
dc:a7:a2:0d:52:c4:c0:4c:1b:9a:ec:5e:44:6f:7c:
80:21:3b:39:4d:97:a2:c9:c3:3c:8e:72:0a:64:96:
48:e2:4c:b0:5b:d2:33:e6:d3:a8:ae:27:c5:61:da:
3f:e4:6e:d0:96:6f:86:64:08:cc:f1:88:c5:e0:da:
2c:48:1b:fd:a1:fd:bd:95:6d:53:e4:ab:e9:39:5c:
29:66:20:3b:23:38:b7:2d:8f:77:5d:f1:ff:ea:22:
2e:7c:76:50:d5:a5:9e:70:15:07:95:16:d4:1f:82:
a1:04:f4:aa:04:57:63:87:9e:ea:d2:c5:ea:1d:49:
0f:22:2b:51:28:70:9e:e0:6e:d5:38:6d:18:23:fc:
8a:4a:f8:c5:b8:01:dd:22:7f:8e:ae:c1:40:2f:65:
6a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:72:16:17:D9:83:CC:35:86:17:37:98:21:E7:F2:D8:5D:8A:02
X509v3 Authority Key Identifier:
keyid:87:7D:FC:F9:15:69:D8:15:62:26:FC:27:90:E6:79:06:76:3A:2B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h338-RVp2BViJvwnkOZ5BnY6KwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f2bdc8-79e7-48cd-a994-ad495858b32c/1/h338-RVp2BViJvwnkOZ5BnY6KwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2a:9a:09:e9:3c:58:c3:2b:60:25:28:9a:a2:71:e4:eb:ef:
f0:b3:a0:ea:51:f0:63:69:cc:22:2f:31:53:83:a7:fe:54:18:
60:a9:b4:c9:6c:33:45:e7:69:38:fe:b7:75:fd:fd:01:de:9e:
08:08:a8:bd:00:44:d2:33:0e:9c:51:70:3a:f4:3b:09:dd:f9:
35:d6:e0:72:b1:10:c9:ec:15:81:8b:fe:54:97:a5:4b:0f:66:
c0:5d:1e:a0:80:04:7f:9d:27:5c:21:37:0d:b2:11:e5:6f:33:
4d:95:84:54:b7:25:2e:11:7a:26:dd:80:c9:76:0d:71:b6:48:
4b:4d:45:98:43:b9:ec:af:13:9d:b9:38:ac:e0:f2:3e:9d:a9:
06:1a:d8:a0:d2:ed:7a:e1:d7:f1:2d:3f:bc:7c:b5:10:66:35:
93:9a:02:9a:69:9f:89:f6:45:2e:ad:fe:5d:9f:76:6a:c5:68:
1a:24:2a:8c:fe:80:3e:6d:08:08:ea:29:d2:83:17:2c:3b:46:
fa:23:19:22:9d:d5:8b:ad:8b:66:19:63:d5:b8:d8:6c:16:71:
b9:c7:1a:be:6d:95:a8:1b:26:18:17:58:e8:55:66:8d:da:cb:
5d:19:3b:8b:1a:d1:91:cd:6f:64:b8:5d:ab:84:67:73:8f:77:
ae:cf:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:37:11 2025 by rpki-client