
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: dsM7pgrKZ39N/lTZcUL8umemRbu2igmvUolIhIyErS8=
Subject key identifier: A8:DA:22:B2:94:BB:E5:32:70:77:38:95:15:9D:9A:AD:6C:C2:2A:6F
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 0196553889D932998E89A4633A728D5314D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 0886
Signing time: Sun 20 Apr 2025 22:01:30 +0000
Manifest this update: Sun 20 Apr 2025 22:01:30 +0000
Manifest next update: Mon 21 Apr 2025 22:01:30 +0000
Files and hashes: 1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: y8AQUENcE//xNzvorw4C2bldFSkXAVnmiSPt3XfSKWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:89:d9:32:99:8e:89:a4:63:3a:72:8d:53:14:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: Apr 20 22:01:30 2025 GMT
Not After : Apr 21 22:01:30 2025 GMT
Subject: CN=a8da22b294bbe53270773895159d9aad6cc22a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ba:4c:73:97:8b:cd:44:82:37:f0:d1:3f:76:
36:d5:c7:17:c3:c6:69:3a:eb:8c:47:f0:41:02:1c:
cf:20:ef:96:f9:e2:85:ea:b0:53:84:b9:80:49:b1:
4f:54:54:cf:3b:25:6f:2d:7c:9c:7e:7c:88:6a:97:
81:17:a5:de:8e:94:7c:65:b7:3f:06:94:b4:80:8a:
f2:1d:f1:03:0a:e7:9e:e1:ef:52:70:ca:51:92:c9:
60:2d:57:78:02:bc:eb:94:df:74:b6:76:48:0d:b3:
d0:b6:da:93:95:c2:b7:ce:8c:79:1a:0a:dc:e0:22:
c8:77:56:dc:2c:b3:43:4a:e9:74:0c:15:e1:5f:10:
0a:54:da:46:34:0a:de:ad:c6:47:5c:20:22:9f:0e:
82:d5:57:31:cb:ad:0c:4c:b6:64:ed:af:06:c0:65:
e4:05:a7:68:b6:7e:be:0d:a8:77:6f:0a:c1:e3:aa:
07:0d:33:9c:82:f6:6f:7c:12:2c:ca:3d:6f:a4:a8:
55:87:97:26:f6:42:58:4b:5e:3a:a2:77:9b:3c:c9:
34:7e:52:61:89:e2:82:9a:b3:24:66:a0:e3:8e:a8:
e4:a0:d6:93:5b:7d:28:08:fd:c0:c1:3b:84:db:73:
08:52:a5:ed:7d:ad:2a:64:8e:98:78:87:fa:c4:c5:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DA:22:B2:94:BB:E5:32:70:77:38:95:15:9D:9A:AD:6C:C2:2A:6F
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:43:13:6e:f2:4f:63:38:57:7d:71:b3:4b:31:60:c5:09:5b:
99:e7:82:d7:e1:08:90:6d:38:0f:b1:7a:70:c7:7b:84:c4:ec:
c0:18:5a:e2:60:39:d1:41:8e:ba:b0:b4:16:f8:c9:bf:dd:1e:
2f:81:d9:27:57:00:dd:7e:c0:e6:fd:c7:6e:f7:a6:2a:1f:64:
7b:2e:aa:70:0b:89:d7:69:04:4b:91:f4:f3:aa:57:07:e8:7e:
bf:42:53:13:63:47:e2:b3:ac:0a:c2:05:10:61:c7:db:d8:9f:
e7:e2:6f:8c:db:4c:c8:44:0d:c9:83:a7:f3:cb:c2:0b:df:d9:
1b:dc:89:30:b1:7c:24:78:a6:3f:cb:8b:43:02:0b:07:34:ef:
fd:95:68:e7:a8:37:23:28:2c:45:59:ae:53:65:d2:06:d3:fb:
25:b7:33:c6:e3:48:60:e0:e7:a2:d6:76:e6:4e:b9:7b:a9:b8:
e2:3c:13:31:5e:2b:1b:94:1a:eb:f9:cb:53:a5:93:55:66:bd:
a5:01:51:dc:fa:b7:b0:e3:1d:21:1b:da:9a:98:02:e8:74:70:
cc:9a:03:13:94:61:3a:7c:76:00:d2:66:eb:a4:c0:77:0e:e7:
9a:42:ac:7e:97:21:23:83:f8:c6:8f:30:08:dd:ae:d0:32:d9:
f7:d4:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:05:18 2025 by rpki-client