Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File: 1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier: 96PYsqJpr2JYacDpa90OTu2Klq3BGtDNLub9joj2OCI=
Subject key identifier: 89:B2:60:E1:73:EF:5C:5A:53:C2:34:6F:66:4F:B7:72:88:0D:B7:4F
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer: /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial: 019748FAB43F7B019A5F1E1B336683A756A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number: 0191
Signing time: Sat 07 Jun 2025 06:01:18 +0000
Manifest this update: Sat 07 Jun 2025 06:01:18 +0000
Manifest next update: Sun 08 Jun 2025 06:01:18 +0000
Files and hashes: 1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: GsEc2gYmoj6mwYnQ1czbRIQtSRmt0XZz7ZmudLZbuds=)
2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:b4:3f:7b:01:9a:5f:1e:1b:33:66:83:a7:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Validity
Not Before: Jun 7 06:01:18 2025 GMT
Not After : Jun 8 06:01:18 2025 GMT
Subject: CN=89b260e173ef5c5a53c2346f664fb772880db74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:e6:09:17:66:da:63:26:01:2a:a3:9b:e4:
19:4b:cb:30:fd:c7:29:b5:66:61:8e:c1:3f:11:63:
83:df:2e:12:ae:f3:2c:16:7d:2e:da:28:60:51:db:
66:36:db:c0:23:6e:ab:ac:07:2f:0e:ff:02:f6:a1:
8b:23:a4:76:51:e5:b6:5f:93:94:cb:74:81:75:9f:
c8:5a:8f:21:ac:a1:29:e2:f9:5e:03:58:36:0c:0d:
b5:32:db:e5:65:27:d2:a9:bb:97:3e:b2:d1:05:38:
58:28:c0:b0:5f:3d:89:1d:69:d1:49:50:8d:f6:22:
dc:b8:8d:56:46:1e:a7:38:f7:87:b3:f6:e8:81:a1:
fc:95:dd:ba:cb:e3:78:6e:5c:df:76:cd:a6:ae:12:
2c:f6:27:f3:e0:f7:38:f5:18:cd:25:23:f5:dd:79:
d2:cd:b9:4b:92:fc:40:3b:53:26:66:47:c0:17:a4:
d3:4f:54:35:dd:ab:37:a0:c1:f2:3e:da:8d:af:b7:
cf:86:22:75:05:8b:ee:14:30:81:c1:22:7d:68:43:
66:ea:bf:56:e2:ba:db:22:eb:e6:89:d6:e2:38:a5:
29:bb:07:26:c5:1e:43:8f:3d:c1:00:51:b8:de:07:
e4:29:49:31:41:58:c1:f3:8c:56:0a:e7:cf:be:b9:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B2:60:E1:73:EF:5C:5A:53:C2:34:6F:66:4F:B7:72:88:0D:B7:4F
X509v3 Authority Key Identifier:
keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:78:84:5d:33:bf:fd:91:be:8c:0a:10:ab:47:c6:ba:56:9e:
df:95:cb:78:1d:e3:91:09:46:21:3d:f8:c9:47:de:d3:bf:87:
ed:ce:60:cc:a4:6a:b4:73:cc:f6:5e:ac:3c:22:9a:88:65:0f:
7f:cd:38:9d:1a:a7:5f:32:c3:60:d7:04:59:5c:e0:5e:60:c9:
e9:b8:1f:31:1f:c2:c2:b0:41:50:c9:42:e8:5b:86:65:da:a8:
a9:95:c7:0a:03:48:80:eb:97:ad:72:2b:33:a7:fb:c0:bc:c5:
e6:9d:38:47:0a:ed:7f:c8:ee:3e:b0:ce:c2:ab:43:4d:23:a3:
17:ef:b1:ad:12:fb:8f:c8:da:2f:c0:a3:7c:10:7a:ed:04:f9:
91:67:05:7e:58:c0:d1:ff:1f:af:55:96:61:2d:cd:6d:c3:34:
91:b2:b8:d9:11:e5:45:51:70:7b:c4:53:3a:e3:43:6b:f5:68:
7b:19:a5:2d:bf:8c:12:79:53:ca:b3:4c:41:78:bc:f7:8e:40:
a7:c1:75:0d:d4:9e:0a:71:92:59:32:a5:30:77:14:e6:36:2d:
29:cf:76:07:b6:1a:34:29:a4:80:61:f5:4a:0b:a7:3e:d3:aa:
5e:d8:42:ea:2c:53:2e:56:46:00:b6:4c:f6:2c:9d:c1:09:50:
c5:2d:ac:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:12 2025 by rpki-client