Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
File: HT0ETAkeiLgLSyaeu3lrPyRUS18.mft (raw, json)
Hash identifier: PHVJmX6pL58PFOk/hRPsA3XzI0CTNWDd2z2owNnAJpY=
Subject key identifier: D3:5B:65:A3:9A:D2:38:DB:82:05:B7:12:55:FD:D8:32:C7:C0:B0:CF
Authority key identifier: 1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
Certificate issuer: /CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Certificate serial: 01964FDA49C92958DB0E17D7B4D7CAD00E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
Manifest number: 0590
Signing time: Sat 19 Apr 2025 21:00:27 +0000
Manifest this update: Sat 19 Apr 2025 21:00:27 +0000
Manifest next update: Sun 20 Apr 2025 21:00:27 +0000
Files and hashes: 1: HT0ETAkeiLgLSyaeu3lrPyRUS18.crl (hash: pepShKSkCFoAEjNhz0+UqDDCm2EObmp0tiy5BBZdwX0=)
2: NW7G420E0Tk7pMi-UVKL9EO5zTA.roa (hash: Q3IRZsTEhDqe1ExEIgIekgobeYaG4FmT5pyujXNfnVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:49:c9:29:58:db:0e:17:d7:b4:d7:ca:d0:0e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d3d044c091e88b80b4b269ebb796b3f24544b5f
Validity
Not Before: Apr 19 21:00:27 2025 GMT
Not After : Apr 20 21:00:27 2025 GMT
Subject: CN=d35b65a39ad238db8205b71255fdd832c7c0b0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:59:f4:fe:51:8f:95:d7:5e:01:02:39:74:
e7:38:25:11:81:9b:6a:4c:fc:84:36:8f:48:40:9f:
37:fb:81:32:10:a8:55:61:94:6c:9f:3b:1f:57:f0:
2d:92:2a:db:aa:77:c7:ab:6f:ed:8b:d4:c0:31:8c:
ae:e1:24:a9:dd:f4:be:fa:07:2b:48:cd:bb:c8:a3:
04:ab:05:fa:83:b0:a7:2b:c5:3d:95:28:06:60:32:
20:3c:34:d9:52:c2:ca:37:65:5a:63:08:d9:9c:7a:
0d:01:4b:74:c4:35:c0:b4:e8:8b:27:3d:ca:c7:f9:
ad:53:82:fb:5d:b2:45:26:4c:04:73:4c:f5:5e:99:
5b:bf:0c:17:60:62:55:fa:fb:20:9e:59:6f:84:48:
cd:48:c5:cb:58:25:cc:77:d5:ec:1c:a4:93:1c:b1:
75:74:66:b6:05:95:ef:3b:24:39:19:d9:e5:97:e0:
22:82:49:76:21:32:54:0e:e4:eb:c5:24:5f:5a:52:
54:5b:6e:16:c1:02:e7:9c:da:3b:eb:6f:5d:f3:1e:
24:36:ec:bb:93:73:74:6c:6a:9d:92:a5:c1:bc:ce:
db:07:68:90:1c:23:66:9e:3d:b9:02:4e:59:c5:a9:
2c:51:0a:43:06:3b:42:67:e3:d2:1a:02:9c:92:e4:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5B:65:A3:9A:D2:38:DB:82:05:B7:12:55:FD:D8:32:C7:C0:B0:CF
X509v3 Authority Key Identifier:
keyid:1D:3D:04:4C:09:1E:88:B8:0B:4B:26:9E:BB:79:6B:3F:24:54:4B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HT0ETAkeiLgLSyaeu3lrPyRUS18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/246466-607a-44da-9cbf-c417442eff93/1/HT0ETAkeiLgLSyaeu3lrPyRUS18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:5c:05:e2:6b:15:07:23:fc:c8:73:fb:01:64:1f:bf:85:b7:
32:7f:da:85:54:63:6d:02:99:a5:c8:bb:b7:09:13:38:9b:df:
bc:55:30:39:b2:c7:0d:e9:25:14:82:dc:ab:ba:65:3d:c2:91:
72:1f:28:7e:ff:1b:f9:0a:49:9f:9e:0e:4d:f3:52:68:55:9d:
aa:2a:65:61:8f:d7:a2:3d:2f:37:0b:19:36:96:82:1a:c7:eb:
3e:5a:a2:48:38:86:82:79:26:be:a6:fe:63:92:9c:b5:a8:87:
43:7a:7f:e1:72:8d:a7:c8:ec:31:8a:42:dc:34:91:c7:7f:5c:
13:54:13:e2:f8:0e:a3:d3:c5:c9:fd:05:f0:23:90:19:c0:c4:
c7:1f:56:08:85:e1:ea:07:b8:81:17:08:64:73:aa:dc:f5:9e:
43:f2:f4:c9:9d:68:83:08:a5:78:b6:ee:af:a6:6a:a2:02:02:
51:14:0b:16:ee:3f:4f:4f:71:b6:e8:0d:14:55:1e:db:c0:fa:
f6:18:3c:60:9f:85:49:80:60:7e:53:56:12:c4:52:1a:c3:b0:
67:e5:2b:1b:23:47:32:8a:99:85:1f:88:63:eb:c2:3c:70:06:
13:50:74:eb:4f:2d:55:ff:d8:1b:e7:da:98:e3:de:b8:91:34:
43:a4:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:11:57 2025 by rpki-client