Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: mJMCWqEfyCywG1iSUKfENnYMLG5H74cnnCoU+TEAtEY=
Subject key identifier: 42:97:86:1D:F4:07:E8:88:BC:5D:91:93:F9:88:4E:F0:38:1C:53:27
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019600AD88D7E50BA9735615548FFF7ED6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 03E9
Signing time: Fri 04 Apr 2025 12:01:34 +0000
Manifest this update: Fri 04 Apr 2025 12:01:34 +0000
Manifest next update: Sat 05 Apr 2025 12:01:34 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: nqGBBKJPJni9QWmBEe9RRQQ7JdPkxxeLpKzaKz/78X0=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:ad:88:d7:e5:0b:a9:73:56:15:54:8f:ff:7e:d6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Apr 4 12:01:34 2025 GMT
Not After : Apr 5 12:01:34 2025 GMT
Subject: CN=4297861df407e888bc5d9193f9884ef0381c5327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:87:30:9d:67:b2:81:a2:4c:50:16:e1:dd:cc:
11:86:90:46:b0:b3:24:8d:bd:b9:65:ab:0d:1b:0f:
d3:d1:78:dd:60:c5:0a:ce:f4:b1:db:05:90:41:3a:
a1:00:27:96:db:ce:18:2e:50:65:fb:e7:a2:81:ff:
7b:14:60:64:b4:3b:75:b4:ba:70:dc:6c:27:4c:3a:
d3:4f:9a:aa:aa:29:9b:a1:6e:b4:67:9e:21:a7:87:
1a:2f:07:6d:1d:19:35:93:d6:80:20:5d:d2:01:9e:
61:cd:cd:a4:ff:98:e6:b4:cb:2c:0e:17:56:76:23:
5e:51:50:6f:76:91:00:7c:77:ec:ab:75:f8:8f:07:
77:ad:9e:e6:d9:02:26:12:39:0a:dc:d8:32:66:f6:
13:d4:77:c2:e9:97:c5:b0:39:42:4e:ee:7e:0f:35:
30:e3:be:1f:45:e7:f8:e9:88:11:9a:4d:32:58:f2:
99:d6:48:b0:10:a6:94:f5:00:5d:80:3f:f6:24:58:
47:66:3f:b9:0e:a8:04:38:c8:c5:f1:7f:22:84:f1:
68:40:74:a1:bc:e3:79:4c:14:5c:44:bf:03:0c:47:
e3:ba:5a:e4:84:77:27:9e:cd:35:d4:10:9d:53:c6:
fa:18:c6:c1:92:39:b2:4f:ff:d0:fa:a0:85:bf:fc:
5e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:97:86:1D:F4:07:E8:88:BC:5D:91:93:F9:88:4E:F0:38:1C:53:27
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e8:68:a1:fb:96:c0:f3:f7:55:3c:44:2f:d4:8f:26:e9:b4:
05:8e:1b:87:ea:33:4f:95:dd:70:a3:08:c3:62:15:51:91:5a:
e3:e6:72:f3:b2:38:21:7b:da:44:f0:e1:77:da:f3:ce:68:df:
66:93:61:1c:ab:97:f6:c5:4f:28:61:9d:5f:c4:3f:13:c1:1a:
c0:6b:d0:cd:8a:f4:8a:63:b8:86:27:55:8b:e9:23:4a:2e:d2:
de:8b:17:12:8d:a4:c2:86:17:45:bb:22:a8:db:22:2b:95:fc:
98:d4:d9:ca:bb:c8:d8:4a:b5:d1:70:e8:20:d7:c9:a0:37:6b:
e3:a9:d3:05:07:42:db:84:dd:8c:87:6a:ea:c3:e7:fe:45:35:
cc:17:17:0d:1d:44:ea:67:f4:0c:b3:68:3f:92:d2:6c:ed:66:
dd:6c:1a:df:04:db:c3:97:33:cc:ce:a3:e2:95:8b:54:0f:00:
1a:5e:43:62:f7:b6:af:e9:10:2a:a0:51:74:48:89:c5:65:75:
91:70:52:ba:0a:ac:46:73:b2:15:51:44:97:ec:73:d7:c9:98:
54:8c:1f:69:c3:a9:3c:3a:c5:93:bc:c7:a3:76:bf:40:35:aa:
bf:44:a4:08:c0:32:6c:5f:c2:11:cc:cb:00:ef:c6:bb:1f:2e:
12:2c:68:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:40:42 2025 by rpki-client