Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: J792gdhI4L+RUd1oLZy2qcwAaeGG2dvN9cFSagxKGbk=
Subject key identifier: 35:1A:C8:64:1A:A3:7D:80:2C:5E:E6:65:D7:3F:15:7D:D4:1C:9E:2C
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019652DBADB943B962B324DEA55D7665F9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 11:00:50 +0000
Manifest this update: Sun 20 Apr 2025 11:00:50 +0000
Manifest next update: Mon 21 Apr 2025 11:00:50 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: jz4OtbWmFD7M6BilTW1WfOe+in6oxDOXmaTmXw7LhSk=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:ad:b9:43:b9:62:b3:24:de:a5:5d:76:65:f9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Apr 20 11:00:50 2025 GMT
Not After : Apr 21 11:00:50 2025 GMT
Subject: CN=351ac8641aa37d802c5ee665d73f157dd41c9e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:9e:62:89:9c:fa:a7:a7:f8:56:66:2a:5a:
f0:3f:5c:8a:25:80:d7:12:ff:4e:df:05:3d:f4:f0:
21:bb:9c:45:d8:c2:82:cd:18:c4:a1:f4:4b:27:03:
af:0e:29:96:7b:e9:a2:c0:9e:0e:95:e2:ef:a0:3b:
d6:3a:0c:f2:5d:4e:ca:2f:cb:33:e6:24:df:55:bd:
9f:bd:b3:02:8f:43:df:8c:8b:da:a7:52:62:35:60:
80:ae:a7:57:f2:de:29:a0:2d:12:f6:7e:e0:0c:bd:
4d:47:f9:2e:db:d8:4a:04:b1:8f:e8:7f:4e:f0:4b:
34:bd:91:94:11:7d:6b:d1:88:79:01:0b:8c:76:9d:
a8:07:f0:69:c2:a6:31:df:61:b5:b8:16:7d:96:74:
63:3e:1b:80:02:bc:95:a5:a4:bc:d3:20:a6:04:87:
15:b5:d9:78:a0:f2:12:18:67:10:83:65:02:44:b6:
e4:29:cf:c8:43:59:c3:f5:46:64:ea:e6:cb:36:94:
bd:e3:d8:28:d7:01:ba:61:7b:ff:de:1c:c5:7b:ca:
0b:b3:a9:cc:53:ff:2a:43:fc:1c:58:c1:16:2a:f9:
b6:e7:1b:50:0d:3c:bc:88:03:9d:d9:b2:d3:6b:2a:
6c:ac:ab:bd:d4:e8:f2:46:1a:d8:0b:83:66:48:13:
a6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1A:C8:64:1A:A3:7D:80:2C:5E:E6:65:D7:3F:15:7D:D4:1C:9E:2C
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:e7:ed:a9:b9:83:cf:7b:d4:9d:da:b2:e2:ee:13:cf:9a:25:
66:cf:90:cb:7c:47:83:6c:ed:47:1b:3c:96:e1:f3:3f:7a:1d:
a8:29:a0:75:86:95:f6:65:97:47:a8:89:ff:d3:e1:e5:84:dc:
3c:0e:f0:68:73:bb:00:ac:42:07:a3:2c:81:1b:28:74:01:41:
46:5a:ab:18:d9:1d:29:ce:24:0a:9e:5f:1b:75:91:c9:e2:39:
24:7b:ff:20:af:1c:be:2e:b5:d2:bf:40:8a:af:07:f8:e5:fa:
1d:37:8b:b0:e0:6f:7d:0b:7a:24:95:7c:60:5d:7e:be:ac:fa:
82:14:51:65:81:99:66:a9:49:5c:f1:94:50:67:07:07:79:fb:
e1:e0:4b:83:5f:c3:01:d6:b9:ba:6b:ab:5e:b3:03:03:e0:49:
51:c0:c4:33:e0:f3:a3:73:41:15:43:88:08:54:ca:d5:d9:17:
77:7e:4e:2d:7d:1d:22:98:d3:3c:16:f5:5b:63:e5:ff:18:31:
f0:a5:84:0c:be:7d:f4:c4:1b:a0:19:98:2c:e9:91:16:0e:51:
e5:86:53:8d:75:75:0e:ea:71:0c:1f:7a:42:69:df:bc:a1:4c:
ae:0b:79:53:3b:49:75:25:29:1a:46:21:d4:91:1c:fa:b4:32:
42:e5:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:30 2025 by rpki-client