Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: vG1o+l440kR4RikRRfNelYoy3gv+1TrLUuQxQxtqHVA=
Subject key identifier: 55:BA:D0:BC:7E:D3:2C:C3:F7:73:2B:26:4F:1F:3C:25:FF:E3:80:24
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 0196556E56EEBB4A25B14676A0287AF32B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 0426
Signing time: Sun 20 Apr 2025 23:00:16 +0000
Manifest this update: Sun 20 Apr 2025 23:00:16 +0000
Manifest next update: Mon 21 Apr 2025 23:00:16 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: ppy6dhR6HXqmKM1aZSUMZDVMBdMCMN48kK4ZJnB5lAM=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:56:ee:bb:4a:25:b1:46:76:a0:28:7a:f3:2b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Apr 20 23:00:16 2025 GMT
Not After : Apr 21 23:00:16 2025 GMT
Subject: CN=55bad0bc7ed32cc3f7732b264f1f3c25ffe38024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:81:19:d5:de:e0:fc:3b:5f:09:04:49:c2:
7e:09:98:e4:d0:b6:f2:e9:e6:68:93:d3:af:4f:f1:
8e:27:62:14:03:ca:4f:95:bd:01:28:7c:cd:5e:4f:
18:1c:0a:00:22:d8:18:1e:2b:4e:81:5f:d2:e0:0c:
38:79:de:ef:66:f3:8d:a2:b2:bf:be:a5:2c:77:a4:
da:97:2c:72:9b:7f:e2:01:bc:2a:3d:0d:9e:76:30:
bd:a3:9d:cf:dc:88:d0:6f:6e:ee:46:90:c1:0d:aa:
d2:26:0e:12:be:8a:19:2b:16:03:ef:75:91:53:da:
ae:40:9e:09:67:4f:3f:9f:ce:01:7b:6e:3c:4b:c8:
87:cf:9d:f5:1d:50:f2:ea:23:45:6b:d0:f5:42:06:
5a:ed:70:3e:c8:57:69:63:0f:e4:ac:b6:32:6b:fa:
15:89:3b:13:90:0f:59:42:92:57:9c:9e:8d:ff:79:
6b:ac:5a:09:fb:72:93:fc:48:59:5e:46:7a:18:a1:
87:60:25:1b:d5:5d:09:d4:be:50:39:a7:7c:09:47:
25:91:e2:9e:87:d8:39:65:8c:5f:e3:b8:e6:7d:99:
3e:7e:d2:9e:a6:21:5a:11:2a:18:7f:56:35:34:b2:
04:04:40:86:f5:be:be:d8:46:fa:59:1d:ca:5e:bf:
47:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:D0:BC:7E:D3:2C:C3:F7:73:2B:26:4F:1F:3C:25:FF:E3:80:24
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:57:b3:02:90:56:bc:e4:f7:c5:1a:04:51:ad:c2:32:af:bf:
62:32:b4:d1:cd:79:13:85:52:1f:a4:71:60:e0:bc:d2:47:e4:
47:21:3b:1b:06:30:14:40:8f:12:30:e0:3d:b6:5b:8b:1c:63:
1c:f6:ab:08:71:df:f9:42:35:ed:dc:fa:ab:f0:c4:b6:05:ab:
69:fa:91:09:54:9b:9e:c8:e9:e2:5f:be:7f:1b:39:16:c4:89:
a3:a1:dc:19:97:df:4e:e4:b4:dc:40:15:69:ac:e1:02:7f:c7:
f9:23:25:00:13:bd:5d:8c:98:4b:3d:be:a9:f0:41:58:28:5e:
66:31:18:9f:68:71:a0:d3:fd:65:e9:bc:46:94:5d:14:66:0f:
86:22:8b:73:2d:f3:f2:3c:ff:18:3f:84:21:48:fa:6b:33:aa:
f6:1d:bb:fd:49:44:96:c0:4b:59:7f:7d:44:e0:7e:c9:89:b3:
97:be:23:67:5d:0f:88:89:6c:d1:40:c7:ad:81:3d:47:8c:3f:
59:ae:3d:6a:00:9f:17:ab:59:c7:49:fa:9b:3e:9f:85:a4:1f:
59:19:8f:4a:35:6a:96:b9:2d:ea:48:41:b4:03:22:b2:ad:1c:
27:c2:41:dd:ce:3e:d1:58:74:22:3b:a5:25:c1:56:c1:64:80:
de:aa:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:16:24 2025 by rpki-client