Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: TxEm7yKZN/b7V885xbcF3/TIZMk/ovNahsyyNE+3foo=
Subject key identifier: 32:D3:60:EE:6D:68:84:91:A2:A1:3C:CB:2A:24:18:BC:56:06:A9:59
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 01965048A537970F61FE823FFB3FFA28FB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 23:01:00 +0000
Manifest this update: Sat 19 Apr 2025 23:01:00 +0000
Manifest next update: Sun 20 Apr 2025 23:01:00 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: BXra2vAlgmbx9wodj0d9oB0Xor5Ceg5KV8Ts0+kjtfg=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:a5:37:97:0f:61:fe:82:3f:fb:3f:fa:28:fb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Apr 19 23:01:00 2025 GMT
Not After : Apr 20 23:01:00 2025 GMT
Subject: CN=32d360ee6d688491a2a13ccb2a2418bc5606a959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:60:d7:3f:b9:d2:dd:e7:c6:65:c8:5e:35:
6e:67:c7:68:f0:c3:50:e6:47:d9:a6:5e:00:02:df:
7e:d4:23:60:17:d6:1b:d5:37:62:91:d9:ad:e4:70:
57:05:78:8c:45:39:ad:fa:1a:83:ee:dd:d9:0c:90:
d6:ae:47:29:c7:1f:16:80:4a:db:9f:af:c0:a8:1a:
ff:19:2b:3c:f8:5a:d6:0c:9d:a4:fc:4c:0c:64:00:
25:37:e9:77:91:ff:93:b7:55:ed:a9:6c:33:79:51:
64:cc:86:7f:ff:5f:39:e8:b3:2c:4b:96:6e:72:e1:
f4:00:41:46:7a:5e:c7:5b:d3:dc:39:44:91:a2:4a:
82:ca:32:7c:95:54:03:59:58:a0:aa:e2:6a:ef:ca:
72:d0:51:7a:d3:3f:17:a1:9f:10:fd:ae:a7:63:79:
ce:91:b6:a3:79:c3:7e:73:4a:ad:a4:5e:b8:ab:64:
7b:e7:b5:e1:71:6b:17:a1:3b:74:04:b6:71:b7:37:
a0:85:13:b2:d8:85:7c:b7:00:08:3e:ae:70:10:87:
7f:46:95:e8:0a:e5:e8:52:13:83:3d:18:71:2e:fc:
aa:32:08:ed:1b:5d:9e:19:e1:7b:21:ba:d1:a9:77:
4e:70:6d:87:be:f6:a9:31:51:ff:b6:6f:10:09:15:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D3:60:EE:6D:68:84:91:A2:A1:3C:CB:2A:24:18:BC:56:06:A9:59
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b6:14:ef:f5:51:7c:a3:a2:37:14:38:e7:bb:0e:fc:0e:a2:
e1:7c:c6:c4:8a:d6:6a:60:ec:c3:c5:97:51:e0:ce:9f:e5:b8:
d8:07:ef:bf:a1:e5:7b:24:c4:39:8d:70:84:e8:a8:06:62:0d:
4b:d6:09:eb:b1:89:db:42:12:cd:31:ee:c6:4b:b6:a1:fe:99:
61:c0:7d:9a:f1:70:7d:65:49:87:ef:8b:13:6e:19:ff:94:72:
0b:96:79:8e:a6:a5:7b:e5:db:f1:f2:95:38:32:97:95:66:a1:
3b:5a:b2:80:7a:18:2b:80:d5:bc:d0:37:91:0a:40:50:ab:29:
1c:23:d2:e8:0e:90:95:73:a2:b6:2b:6b:b2:6b:e2:08:5c:2d:
d7:fe:01:bf:7a:13:27:81:10:45:56:d7:fe:15:66:56:7a:f2:
c2:de:c0:fa:2e:78:c9:48:ed:06:c3:57:0f:cf:b0:b1:80:05:
82:d7:68:dc:e8:c3:ab:7e:28:3d:4e:af:51:32:b5:ff:3c:47:
be:75:10:2a:78:5b:48:46:fa:ef:d1:d4:b3:a6:dd:a7:1e:f4:
4a:1c:dd:53:5d:a9:d6:37:f6:04:6e:0d:5f:2c:71:29:d1:46:
7a:03:e3:dd:c3:f3:31:97:30:a5:cb:c1:83:14:0f:95:6c:77:
81:ba:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:44 2025 by rpki-client