Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
File: h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft (raw, json)
Hash identifier: 1MAivluJj6tT8cXAbBaUYqFHuAfer4jA0lXZL2y28Ak=
Subject key identifier: 07:55:A4:C5:02:45:C9:B4:CE:AA:77:4F:71:F3:5A:D6:33:A0:25:3E
Authority key identifier: 87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
Certificate issuer: /CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Certificate serial: 019652DB484C3A9704FE7B4F9E969AE4AE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
Manifest number: 05F5
Signing time: Sun 20 Apr 2025 11:00:24 +0000
Manifest this update: Sun 20 Apr 2025 11:00:24 +0000
Manifest next update: Mon 21 Apr 2025 11:00:24 +0000
Files and hashes: 1: h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl (hash: Snb3t+Je/ACGvymbXbJeKzGRRFzJHNhte7aLeSwE+j0=)
2: hlby1xXJUtbaqPmELmi7xbziBY8.roa (hash: QsHPEqttrfF2zMx3M7sZxcReCt1hljy1sF+KTN49S3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:48:4c:3a:97:04:fe:7b:4f:9e:96:9a:e4:ae:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874c3dcccbf02ba8501ab1c706d31e137fddf41d
Validity
Not Before: Apr 20 11:00:24 2025 GMT
Not After : Apr 21 11:00:24 2025 GMT
Subject: CN=0755a4c50245c9b4ceaa774f71f35ad633a0253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:6a:1b:c4:4c:cb:5f:ff:2f:15:c8:16:33:
0d:e7:c6:88:aa:19:d5:5b:db:5c:3d:8f:b7:4e:f6:
c7:da:c2:9f:fb:a3:af:28:ac:1c:c2:ba:4f:24:c3:
95:b9:c1:08:e3:83:d2:92:10:9c:13:5f:c8:40:a7:
6d:51:fe:f6:01:da:cd:00:7b:eb:68:03:30:9b:8a:
f8:a1:81:92:7d:4d:4c:c1:0a:cb:13:a0:d6:8b:e3:
26:bc:3e:84:f5:c6:d3:33:e3:25:43:9a:40:00:a4:
a7:fa:e5:a8:9b:70:fa:7e:a8:1e:bb:6b:36:9a:22:
12:08:37:af:a7:0f:ba:a0:0c:b4:08:89:17:bb:23:
a0:9c:fd:a2:18:ee:38:ee:4a:5e:02:8f:7e:3b:dc:
af:3a:fa:be:a9:23:62:b2:18:c9:90:49:7d:2e:2b:
71:20:d3:01:40:e8:0a:3a:c3:b2:2b:50:45:f3:f1:
bf:b1:6b:6d:c3:fb:3d:c6:3f:40:4a:d0:79:ab:03:
2b:cd:c0:d0:14:43:22:eb:d6:a3:ab:4c:e1:f6:47:
06:d8:d3:23:44:38:3c:a3:48:ae:96:d5:52:0f:06:
bb:7e:5d:53:ef:18:99:a1:92:cf:b0:ab:6e:34:de:
40:dd:f8:96:66:bf:42:83:4a:37:61:94:e7:31:3f:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:55:A4:C5:02:45:C9:B4:CE:AA:77:4F:71:F3:5A:D6:33:A0:25:3E
X509v3 Authority Key Identifier:
keyid:87:4C:3D:CC:CB:F0:2B:A8:50:1A:B1:C7:06:D3:1E:13:7F:DD:F4:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0w9zMvwK6hQGrHHBtMeE3_d9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/993d38-2188-4a7b-bc37-a04762095ee6/1/h0w9zMvwK6hQGrHHBtMeE3_d9B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a1:a1:73:75:3c:0f:06:b6:32:2c:63:7d:8b:34:b2:36:80:
e5:f4:a0:a1:26:91:51:d0:78:d2:21:99:d8:51:13:99:d3:aa:
28:59:be:54:55:36:30:b2:d3:78:6a:28:d7:a2:8f:07:b5:e7:
2d:6b:f3:bd:73:0b:c6:05:1b:15:5c:0a:39:2d:33:3b:f3:95:
10:87:95:ea:30:4a:de:64:3a:65:76:70:af:6c:bf:2c:25:f9:
73:1b:11:22:d6:3c:c4:00:4c:6b:d7:20:15:4f:6c:1a:bf:da:
87:cf:25:d7:77:1b:e8:15:e9:c2:14:fd:25:e0:7e:93:08:27:
f2:e6:9f:ba:8c:68:c5:c3:5b:62:b1:3a:e9:85:9a:47:d4:66:
88:67:3f:12:0b:ef:cb:54:9d:e9:68:d6:a5:59:cb:91:6c:9c:
23:82:89:8b:6f:c7:1a:62:a5:cf:54:15:1d:d6:13:19:ff:9f:
fc:c8:6d:fd:3a:2c:61:3a:98:60:28:90:8b:17:a4:d1:62:56:
db:1e:e8:44:c7:14:a0:e7:57:37:3b:6d:ac:9c:01:bf:bb:ab:
b5:82:51:32:d6:1a:57:e2:eb:c7:6a:be:62:b9:1c:5b:93:12:
a8:b0:d2:21:e4:77:41:31:65:90:8d:d8:e1:df:97:c1:4e:c0:
83:ba:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:15:20 2025 by rpki-client