Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: bsAIrkWGXHx3raKilMva+VdMWZUW+gpZYbEgjSL4RP4=
Subject key identifier: 0F:32:72:B9:12:4F:23:AE:25:C5:A5:9F:A4:42:71:80:80:E5:88:12
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01965048B16409D7544652801A09860C295D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 23:01:03 +0000
Manifest this update: Sat 19 Apr 2025 23:01:03 +0000
Manifest next update: Sun 20 Apr 2025 23:01:03 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: Ibr4ZnK6Tpz/2oS2XJ/4bRJSS2IlYddnyZ7IEPsJmUQ=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:b1:64:09:d7:54:46:52:80:1a:09:86:0c:29:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: Apr 19 23:01:03 2025 GMT
Not After : Apr 20 23:01:03 2025 GMT
Subject: CN=0f3272b9124f23ae25c5a59fa442718080e58812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:aa:6f:93:34:9c:08:a1:0c:6b:a1:c4:6f:c1:
d3:59:00:22:51:19:f1:7a:6c:7d:2e:35:71:e1:0e:
c2:9c:9a:9c:05:96:b0:13:f5:b6:73:a9:f8:c9:81:
d6:ca:a2:26:c4:47:5e:1c:68:c5:5b:0d:49:56:16:
84:d8:a5:24:5c:33:60:59:4b:d2:e6:93:11:f0:31:
ca:32:a9:a7:a3:0f:0e:4e:64:1a:30:b8:a4:bc:96:
23:d0:56:de:7a:08:36:4c:10:94:78:a7:40:06:ab:
ee:61:7e:c2:9c:55:14:94:d7:a6:2b:3e:b8:fe:e0:
af:a9:74:a9:1d:1b:86:43:d0:3e:fe:94:d2:79:f4:
2f:af:86:3a:ee:04:23:26:12:08:35:13:6e:f7:8a:
08:e2:06:2b:50:f5:3b:20:27:75:7b:b4:b4:99:60:
46:2b:29:b4:2a:8b:e6:6c:3b:a8:1d:e1:62:00:e4:
54:33:75:db:f8:ab:94:0b:78:68:68:9b:ac:09:bd:
05:47:11:38:66:53:2e:e3:bd:d8:9c:f0:2e:71:54:
14:f8:b9:4d:ab:3b:df:8b:ee:95:14:f8:46:cc:d9:
bb:3e:06:45:24:53:28:3f:66:21:9e:0b:d5:08:6d:
3d:ea:88:95:73:9c:b4:f0:c0:fd:48:39:80:c0:0c:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:32:72:B9:12:4F:23:AE:25:C5:A5:9F:A4:42:71:80:80:E5:88:12
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:21:38:36:80:01:79:30:bd:7c:7c:1e:b6:ce:4b:d1:de:
7d:90:61:24:ea:b2:4d:78:59:fa:58:c5:9a:31:2e:67:1e:5f:
22:9b:88:73:4a:44:ae:aa:87:29:92:91:5a:fc:90:9f:c5:05:
20:bf:49:b2:e0:3a:61:fe:53:d2:1c:e4:ba:e0:57:56:d3:dc:
e1:ee:67:06:48:80:00:55:f7:df:66:d4:8e:0f:19:fc:e9:0c:
fe:f3:c6:d9:c9:bc:6a:1e:76:d8:21:a8:1b:ff:ab:52:5d:01:
35:dc:17:4b:36:8c:5b:d7:69:a8:c6:5b:19:39:74:00:a5:f8:
be:e8:9e:ec:ea:e4:f0:1f:ba:9f:10:a8:8d:f7:92:8e:6e:10:
e4:27:b9:26:0a:0b:06:f8:f9:b5:20:2a:e9:ae:fd:88:64:bb:
3b:fe:ae:82:af:82:3a:97:0b:69:9f:23:40:12:fc:cd:a2:79:
15:2e:e3:b7:09:74:79:df:84:64:e2:18:e6:b5:8d:97:13:a4:
43:0d:26:89:d1:a1:68:17:ab:89:a5:d5:12:b1:44:3c:c4:45:
08:04:ee:25:e9:9b:9d:ba:13:cc:dd:2a:3e:4c:c7:5a:00:2d:
92:77:47:cb:ee:68:26:b8:21:49:7d:ad:d8:f3:38:4c:5c:cf:
88:15:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:17:42 2025 by rpki-client