Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: i90MF7mClJbmaa5Fg5xR8xK1agDaX7V6WREuY2nWDTo=
Subject key identifier: F9:C3:7E:A8:F7:78:F8:E8:B4:7B:58:F9:1D:71:A0:00:85:98:63:B6
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 01958B4DE50DCACF79DB78780E6B64764F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 17:01:32 +0000
Manifest this update: Wed 12 Mar 2025 17:01:32 +0000
Manifest next update: Thu 13 Mar 2025 17:01:32 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: Yjpn2jTE2jt8a6i8zWz4ow25kKjZZhswaOUHFxLznPU=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:e5:0d:ca:cf:79:db:78:78:0e:6b:64:76:4f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: Mar 12 17:01:32 2025 GMT
Not After : Mar 13 17:01:32 2025 GMT
Subject: CN=f9c37ea8f778f8e8b47b58f91d71a000859863b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:59:14:13:be:4c:b9:f8:bf:8d:04:5d:fb:
c9:99:5b:bd:36:35:b1:23:0f:ae:cf:84:52:de:16:
80:76:2f:30:d7:3d:11:81:48:19:10:d6:10:75:9a:
0e:86:b6:7f:b0:8d:ca:de:17:f3:ea:2d:d0:5d:11:
e6:89:ca:77:a0:81:78:b0:58:ed:af:a5:2a:48:1e:
35:e0:ef:e3:f3:43:05:a1:fd:88:13:17:12:48:66:
cc:fe:02:1b:49:10:b2:da:db:40:c1:79:95:a7:ad:
34:05:1d:67:67:c5:15:4f:2e:29:9f:7b:e1:90:50:
66:e5:23:b5:cd:36:a5:6f:24:d6:96:cd:88:af:12:
37:3b:41:dd:c3:a7:fd:d8:89:3a:c5:38:31:92:9b:
57:89:5b:d1:68:8d:2e:3a:d3:4d:df:17:9e:cf:06:
3c:42:16:5e:a9:78:c7:d5:78:0d:18:7e:d9:a5:cf:
48:de:4e:91:28:0f:3b:cd:94:d5:ce:8b:5b:24:43:
84:a5:e5:8c:f4:c0:af:0a:b8:c1:79:da:a9:c2:ec:
15:a8:4f:9d:7e:03:29:e3:35:6c:78:bb:0f:df:59:
c1:56:e8:20:dc:8b:dc:fe:4a:35:90:6b:f2:de:63:
4e:13:a8:c1:60:bd:e2:89:02:33:78:a1:d8:0d:76:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C3:7E:A8:F7:78:F8:E8:B4:7B:58:F9:1D:71:A0:00:85:98:63:B6
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c9:e4:66:f8:b5:83:8b:73:fc:db:10:0b:7e:bb:a0:34:c6:
d3:33:f4:6b:3d:22:11:e9:59:db:4b:3a:78:48:54:e1:5b:03:
0e:bf:77:1f:bd:69:2e:32:f9:e5:9f:be:de:ee:24:63:4f:e1:
d1:d2:e6:05:91:95:7c:28:d0:f0:a8:c1:6f:81:e3:3c:61:17:
ce:7f:3c:8c:a6:68:cf:9e:67:8e:39:14:3c:fd:dd:50:80:ec:
81:fe:3d:08:70:e5:4f:2f:66:84:c0:7f:ae:e8:b5:55:89:5c:
e9:01:95:a1:31:9e:31:7d:10:27:2c:ff:8f:5c:29:69:c9:f4:
fd:9c:fa:e4:85:7b:cf:d3:09:8e:55:4d:a7:b5:03:ae:8b:85:
b2:a7:38:b3:54:6e:ec:4b:e7:a0:03:ca:70:04:71:60:9f:88:
ad:8f:b7:f2:50:44:d9:91:1d:2a:c2:1b:d3:97:88:b0:0d:7a:
f5:64:79:0f:fd:90:ec:aa:c6:f5:da:dc:2a:93:3a:ea:82:09:
76:95:ad:db:ef:f7:1a:a6:f6:4c:63:94:65:58:f7:86:54:6f:
63:fa:5f:5a:dc:06:fa:b0:28:3c:73:05:7d:90:e7:3d:47:3e:
3f:c9:03:cf:fb:63:da:c4:13:30:be:f3:35:7e:1d:a1:b7:78:
07:dc:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:04 2025 by rpki-client