Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
File: V-HUowlen6i5N9f6pDdZNyfSOTI.mft (raw, json)
Hash identifier: 8NILi0KTIRvlFXsJJIs2lUhoI51w6K2GeAL2uc2X+j8=
Subject key identifier: 41:19:3E:17:65:70:57:06:E8:70:29:FF:A1:D2:1F:FA:D8:63:A2:E5
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Certificate issuer: /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial: 01965801FC1EF320D1C248C5C671A97D6487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
Manifest number: 0443
Signing time: Mon 21 Apr 2025 11:00:47 +0000
Manifest this update: Mon 21 Apr 2025 11:00:47 +0000
Manifest next update: Tue 22 Apr 2025 11:00:47 +0000
Files and hashes: 1: V-HUowlen6i5N9f6pDdZNyfSOTI.crl (hash: BEwPAq6NEy03xOKilYDKt07ZXz31LzuBkyE40a4Wr/4=)
2: bXJ4QtYhfWp1RnpTQChAp4cUwiU.roa (hash: fSbKrEDwgOdPjCAnblJniiQxtJvOzvNWIo+25OG2EEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:fc:1e:f3:20:d1:c2:48:c5:c6:71:a9:7d:64:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Validity
Not Before: Apr 21 11:00:47 2025 GMT
Not After : Apr 22 11:00:47 2025 GMT
Subject: CN=41193e1765705706e87029ffa1d21ffad863a2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7d:e4:22:f4:57:8c:25:d8:a3:33:eb:37:8a:
5e:46:ab:ab:7a:03:c9:5e:48:88:64:8d:24:c6:54:
bf:a1:f3:c4:b5:8a:ff:70:b4:19:37:3f:93:5e:02:
fc:c5:7a:78:5a:44:09:68:0a:2a:bd:1f:5c:06:d0:
47:88:d1:4f:0b:a4:00:6c:b3:2a:e3:9e:fa:a6:7a:
64:3a:3d:e2:4a:cf:f0:6d:cc:48:08:57:38:a3:2b:
5f:39:1e:9d:db:4f:76:5e:44:12:b2:d3:b1:ca:c8:
35:b3:2e:80:a7:6e:93:85:37:00:86:74:0e:81:96:
58:d2:18:ed:54:18:a1:ed:dc:a2:2e:34:72:6d:cc:
e6:f2:86:2f:f3:b4:dc:16:00:b1:5b:eb:fa:89:d2:
0e:30:88:3a:57:08:8e:e5:5c:00:57:62:a5:0b:41:
be:bc:a9:bb:61:18:31:d9:1b:43:b1:9f:1a:bc:73:
ed:cd:91:ba:d6:41:2e:5d:24:f3:0d:89:2d:d1:b5:
c5:4e:70:6b:42:c7:fe:96:7f:23:25:9e:da:c5:12:
18:1c:ad:1f:8d:89:55:16:5b:ab:00:ce:8a:44:bb:
ae:c8:20:fb:a5:c3:be:3d:94:6b:e7:59:6d:9d:2e:
68:70:f4:20:d8:76:cf:2e:df:14:38:ec:f1:ca:74:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:19:3E:17:65:70:57:06:E8:70:29:FF:A1:D2:1F:FA:D8:63:A2:E5
X509v3 Authority Key Identifier:
keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:fe:eb:aa:40:69:b6:29:98:91:85:d1:71:27:0f:50:61:
7c:1a:cf:b2:13:34:98:ea:80:0e:31:3a:73:2c:11:35:08:49:
38:3a:82:c1:cb:a7:24:17:a5:eb:f7:85:0c:93:82:58:a4:dc:
bf:7f:c0:85:04:54:67:b0:40:83:0d:48:39:83:8b:70:7f:93:
72:47:78:17:ac:91:ab:8a:d6:46:27:78:61:78:a7:c9:19:10:
32:43:39:ef:76:b4:4b:27:43:34:b5:a4:ba:2e:2b:9f:76:1c:
b9:88:80:7e:ba:dd:76:1b:a1:39:83:04:87:69:a6:b8:b9:e9:
a9:a3:7a:75:23:a3:82:94:48:31:30:3d:4a:47:74:d8:a0:48:
5a:b4:8c:b9:5e:c9:34:7e:97:82:85:fd:3e:b9:be:7a:13:f2:
96:cb:4b:fb:3d:8f:f6:47:d0:35:6e:d1:d1:8c:4e:39:fa:76:
72:aa:d4:3b:9a:16:8c:da:d0:be:b4:c7:4d:86:4b:81:16:df:
c4:7d:d3:ea:e2:2b:5e:b9:73:03:57:b7:80:9d:d1:a2:6d:dd:
4c:8b:4d:e3:44:52:22:86:fb:bb:5d:d1:d8:08:9f:e7:f2:01:
28:55:50:7c:cc:b4:f0:1b:34:df:eb:11:b8:11:d0:05:45:aa:
4b:b1:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:51:43 2025 by rpki-client