Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier: kp7dbKmkx8IF9X6ntQQxUa+4kQDel8KL+/Zq6Ae+snw=
Subject key identifier: 38:39:7C:3B:44:33:B5:80:23:D4:80:8A:09:AD:C4:10:14:B4:2C:92
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer: /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial: 01964FDA6622164C7AA9F1B8A087A6F2DB40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number: 0811
Signing time: Sat 19 Apr 2025 21:00:35 +0000
Manifest this update: Sat 19 Apr 2025 21:00:35 +0000
Manifest next update: Sun 20 Apr 2025 21:00:35 +0000
Files and hashes: 1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: aauHhHfZag215Lhwcq674ycZ7Ptw8PPpEyv2eZm/L7Y=)
2: _KxvEwb-05zypoulu-kOqoL22-A.roa (hash: iIrzlSKXJeml3wWcOMj0MUUk02aq1R81c8+dmUXm/h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:66:22:16:4c:7a:a9:f1:b8:a0:87:a6:f2:db:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Validity
Not Before: Apr 19 21:00:35 2025 GMT
Not After : Apr 20 21:00:35 2025 GMT
Subject: CN=38397c3b4433b58023d4808a09adc41014b42c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:ab:9e:62:e0:01:ef:59:34:95:e0:19:4e:
9e:00:e9:c7:d0:f4:37:88:65:24:d3:e6:62:bf:46:
b7:64:ba:26:93:b7:06:d8:0a:48:7e:2f:17:ae:20:
5a:2d:59:26:43:7f:85:40:5a:ac:23:c8:e6:0a:69:
2b:c7:ae:11:53:1e:7a:95:c2:ff:c1:15:b1:2f:f6:
84:06:c4:35:e3:e8:d0:f6:0d:a0:d0:4c:60:2f:aa:
b2:4d:9d:df:1e:6c:9e:ca:9e:a2:5f:81:f8:a4:b6:
ca:ec:57:02:d1:dc:56:73:5a:35:96:1d:01:c7:5c:
3f:7c:66:02:0f:82:c0:8b:c1:a7:68:a5:ce:9d:9d:
2d:0d:6a:f8:68:45:56:e1:bf:6c:28:c5:93:f8:4c:
31:68:38:44:39:68:0d:4f:8c:e8:2c:ff:6b:23:3f:
cd:0e:07:2e:e6:76:7c:77:d8:c4:71:8d:ab:47:2c:
2f:05:51:fe:e9:52:da:e5:61:5d:c1:77:5b:63:1e:
39:32:b1:ca:91:f6:3b:94:e0:67:77:ac:7f:31:a2:
b5:fe:28:d1:39:42:ce:fd:ff:18:20:42:d8:d6:7a:
65:10:c8:26:5b:b0:1b:4a:23:17:4e:40:b9:6a:c1:
ff:43:93:54:95:bd:c4:02:46:da:c2:23:0e:0f:69:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:39:7C:3B:44:33:B5:80:23:D4:80:8A:09:AD:C4:10:14:B4:2C:92
X509v3 Authority Key Identifier:
keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:58:ba:61:4e:c0:47:e5:03:04:9c:79:2d:73:34:1b:85:5a:
ac:1f:49:c7:b3:22:6d:b2:b1:f2:df:3a:d4:51:84:7a:85:d7:
a1:18:e7:67:f4:39:d3:d1:eb:60:31:9b:c7:b6:ed:1e:50:31:
67:a2:68:b1:f4:06:84:08:06:3e:ae:06:76:1d:ec:88:1d:0c:
47:8e:77:79:dd:d9:97:f1:06:af:14:98:0c:f7:7d:31:3a:4c:
16:10:26:0c:06:e4:94:46:d6:02:62:fa:4a:99:f8:03:f0:fb:
f3:b6:83:bf:b4:d7:e0:0d:ec:77:5b:19:b6:0c:df:20:c3:f0:
bf:c8:4e:39:d3:03:5d:de:22:c4:2e:9f:09:6e:3b:b1:70:ba:
2d:6f:ff:c4:13:df:8e:ac:a2:60:6c:5e:49:57:b5:dd:d5:70:
86:d9:ab:73:49:52:e9:d3:dd:97:87:e1:24:0f:aa:e4:6f:49:
de:72:7a:4e:62:8d:8b:a9:2c:c9:4c:92:19:7f:8b:84:bf:d4:
3d:93:0d:ad:de:4a:d4:98:01:4c:d5:98:d6:ef:c6:87:a6:be:
9d:62:f7:c2:36:dc:86:bd:a7:89:f5:91:c3:c8:a1:ed:62:1f:
72:89:10:d7:62:3e:61:80:9f:04:32:2a:ca:77:9b:c2:f4:a2:
a7:6d:ed:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:03:11 2025 by rpki-client