Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: QO1VHZ7GbqcoB/MMHnoD7e0gLn7QryYw4DphucmHieU=
Subject key identifier: 12:41:38:B3:43:12:0F:21:2E:64:6F:74:B6:B6:A6:26:F0:28:89:1D
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 019650B66C3085E917475E128335B917F5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 050A
Signing time: Sun 20 Apr 2025 01:00:54 +0000
Manifest this update: Sun 20 Apr 2025 01:00:54 +0000
Manifest next update: Mon 21 Apr 2025 01:00:54 +0000
Files and hashes: 1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: iOn/lfPl8sxqVZNzp/+6F/mZhwLSIdhJR7Fht7CW4Xk=)
2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:6c:30:85:e9:17:47:5e:12:83:35:b9:17:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: Apr 20 01:00:54 2025 GMT
Not After : Apr 21 01:00:54 2025 GMT
Subject: CN=124138b343120f212e646f74b6b6a626f028891d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:b0:e3:11:66:c9:82:8f:84:97:8b:d2:ba:
80:bd:59:f8:cf:ec:12:6e:5f:2e:5e:65:d2:52:12:
39:ed:b7:03:e6:70:c7:0d:91:65:c5:da:48:8e:0d:
22:ff:82:d3:a0:cd:09:30:21:6e:1a:73:1a:4d:28:
ed:d9:d7:bb:46:f4:b5:17:57:f2:63:6a:87:b2:70:
a1:39:10:46:f4:9b:b1:b0:c0:55:67:da:56:60:28:
1d:98:96:ff:b7:96:dc:0a:79:00:47:0a:53:2b:91:
6a:54:9b:7c:6a:c2:b9:c2:46:8a:c0:a3:db:00:d9:
f7:02:2b:39:e1:2c:a1:95:45:37:a4:36:a1:da:39:
66:5b:81:79:2e:a8:9b:4b:19:6e:13:96:ea:06:87:
99:74:f1:ad:5e:a6:12:2a:45:93:be:4a:35:1f:17:
55:00:32:f1:0b:d7:b0:8a:83:b6:6b:7e:67:89:68:
3c:80:40:57:1e:c0:77:09:00:a8:c1:61:7c:99:3c:
6d:4b:dc:66:f6:f0:76:45:58:af:52:c6:7b:e1:32:
ab:69:67:f5:82:a7:86:2e:ed:b3:6b:59:de:40:b2:
a2:73:84:01:15:20:dd:b4:87:36:29:b7:c0:98:a7:
e5:f6:3d:73:2a:82:ff:47:37:5b:d9:4e:66:c9:f3:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:41:38:B3:43:12:0F:21:2E:64:6F:74:B6:B6:A6:26:F0:28:89:1D
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:6b:ea:d4:00:e1:0f:a0:9a:f9:87:f1:12:16:c8:22:e8:
7b:e0:8b:8f:c2:1f:66:4e:00:66:85:18:e9:78:6d:df:01:2e:
c8:f8:d0:bd:b7:0f:9a:79:ff:db:f0:4c:b8:03:b1:c8:d3:03:
db:cc:73:f4:ed:d5:e9:d8:5d:6f:28:05:80:a0:db:9e:2c:90:
0c:11:6a:b6:6c:51:83:5d:a1:41:e1:25:5c:19:cb:3a:ef:ac:
89:2c:79:42:82:da:78:23:ac:89:55:4b:b5:e2:5a:1e:1f:3f:
74:7e:d8:6d:f1:d7:51:5c:b5:8e:f1:b5:5f:73:2e:b1:04:34:
4e:b4:7f:20:06:b1:37:cc:83:ba:82:21:9c:81:bf:80:fb:d9:
94:09:d8:f8:79:f9:06:fd:4c:f9:f5:0b:4b:9c:6e:cf:2e:27:
26:80:38:c6:52:83:fa:23:17:d5:4a:6e:55:3b:5c:36:57:d2:
cf:6b:2b:cd:1b:f1:cc:df:c7:86:6a:3a:11:24:c1:96:18:bd:
9f:21:7f:0b:57:62:1b:08:45:07:54:5a:48:45:79:e9:09:e0:
5a:24:2b:f1:40:04:21:f3:6a:a7:aa:08:be:b2:66:31:62:3c:
09:ce:c9:36:10:60:54:5c:f8:4d:a1:f4:98:7b:3c:a5:86:82:
81:b7:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:34 2025 by rpki-client