Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
File: H9CHXNAFHQwJJaygQQNOeECmdws.mft (raw, json)
Hash identifier: T8QwEW3nf7PnJPhZSepzVy4fvTq8u21PrAWBkn+h/mA=
Subject key identifier: DB:61:9F:92:EE:B6:C4:C2:26:57:F7:B4:AD:9D:DD:D3:0E:CD:CD:A4
Authority key identifier: 1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
Certificate issuer: /CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Certificate serial: 0196580232E903D9A7F2A90C8BDF40228F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
Manifest number: 04CC
Signing time: Mon 21 Apr 2025 11:01:01 +0000
Manifest this update: Mon 21 Apr 2025 11:01:01 +0000
Manifest next update: Tue 22 Apr 2025 11:01:01 +0000
Files and hashes: 1: DKCys4KRYdnrGXDLl1nVf9nVmRA.roa (hash: IaLK2xfRNIne0nZPaZ2/jfh45tolOprh7fcjo3irVI8=)
2: H9CHXNAFHQwJJaygQQNOeECmdws.crl (hash: KTxCoW/myy6XSXDdc0tgUsK4JJNMZzchBBcc0DGQOjk=)
3: NfUK1WerAdsfJiTM68i5Lnvkb2w.roa (hash: ZGezIXFkpMHBb+7ell8DWUCsKtD9DU2fEiI/6174M+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:32:e9:03:d9:a7:f2:a9:0c:8b:df:40:22:8f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd0875cd0051d0c0925aca041034e7840a6770b
Validity
Not Before: Apr 21 11:01:01 2025 GMT
Not After : Apr 22 11:01:01 2025 GMT
Subject: CN=db619f92eeb6c4c22657f7b4ad9dddd30ecdcda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:38:0d:c5:f8:a8:a9:1a:7d:58:83:00:d8:98:
9e:54:60:63:04:3a:58:ad:37:c0:03:6a:aa:81:57:
86:d0:a3:52:a6:c4:1e:59:a0:ec:9d:9b:4a:69:61:
17:7e:24:94:66:e0:5a:9e:b4:84:ac:9d:10:fb:69:
06:9a:61:30:ed:f4:c0:71:c3:9b:e9:8a:50:a8:48:
35:b1:b1:44:6f:91:76:40:54:97:02:59:2d:63:f9:
46:7c:ea:55:7d:a1:e5:e2:14:f2:d5:6e:3c:6d:7b:
2d:12:f2:34:92:4f:84:9a:37:18:24:8b:5e:19:25:
f1:3b:dc:76:2c:2a:a3:40:c0:d3:f1:ea:73:c6:cf:
59:97:60:a0:6b:06:59:23:cc:f3:c3:10:1b:f6:49:
8b:0d:cd:aa:9a:94:2b:48:ff:27:1b:be:e3:8a:66:
93:04:74:36:4a:81:2a:84:2a:0c:5c:ea:ac:8e:50:
06:3b:9a:8e:b4:e3:15:06:b0:fe:6e:bc:c0:b3:81:
c9:e4:f5:65:e5:9a:31:62:75:54:60:ef:ed:55:38:
81:e0:3a:4c:0a:4c:91:ff:41:6a:aa:e5:2c:65:1e:
2f:cf:85:c7:b6:41:b8:35:6a:ac:15:53:18:21:83:
90:84:7e:e8:0c:2d:bf:a0:35:da:39:3f:27:6d:e6:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:9F:92:EE:B6:C4:C2:26:57:F7:B4:AD:9D:DD:D3:0E:CD:CD:A4
X509v3 Authority Key Identifier:
keyid:1F:D0:87:5C:D0:05:1D:0C:09:25:AC:A0:41:03:4E:78:40:A6:77:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9CHXNAFHQwJJaygQQNOeECmdws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/221048-3bad-469c-b933-e0802f474444/1/H9CHXNAFHQwJJaygQQNOeECmdws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:7d:be:d9:82:85:2e:ff:ff:62:89:9a:31:69:63:7a:96:81:
63:c5:69:69:3d:1a:b6:87:97:3c:85:ba:7b:d0:3d:8b:de:f4:
b8:97:f8:20:f2:53:36:33:08:f4:f8:60:01:7f:cd:98:54:14:
ee:b8:d6:b9:b2:07:30:04:de:42:84:c0:92:ac:24:7d:76:0d:
76:47:59:33:4b:82:a3:d5:52:0b:cf:51:0e:4a:c4:51:bd:75:
50:7a:89:57:2e:6d:01:3d:ee:dd:78:96:c6:de:1f:58:2e:28:
b7:2a:66:28:f4:24:c0:8c:4b:05:58:91:64:35:aa:88:53:1b:
81:e5:fa:a9:1a:bc:40:a2:e5:d5:49:9c:3a:25:9b:3b:85:04:
1a:82:d4:81:fd:0c:7d:6e:9e:32:ae:60:8e:60:30:20:27:af:
68:d5:a0:de:e0:86:cf:98:fb:9c:ff:51:02:da:94:d6:ce:f0:
01:1f:93:af:a5:62:31:a3:0e:11:5e:b6:1e:cb:4c:0d:cc:fc:
f0:d6:36:c8:4d:20:4f:5a:c8:ae:1b:41:01:3d:39:f5:18:29:
73:71:a1:d6:6c:ba:4b:fa:c8:04:f4:a4:39:66:9e:13:b4:31:
10:48:92:1b:d7:69:61:e8:0c:d5:e7:01:c8:76:cd:85:fe:50:
19:2c:ec:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:01 2025 by rpki-client