
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
File: H2fPHKLeoy_NlwLdJRDra_K2hhA.mft (raw, json)
Hash identifier: u5j0qY9vzQ30YLx56JsKIpGcCojfhHS4mavr3TTao4c=
Subject key identifier: 61:57:8B:E4:29:5D:E2:4F:93:F5:26:07:FC:6A:9F:0A:79:99:21:E5
Authority key identifier: 1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
Certificate issuer: /CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Certificate serial: 01964FA3922E53E6F152AA4227BBD8C1A720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
Manifest number: 049D
Signing time: Sat 19 Apr 2025 20:00:41 +0000
Manifest this update: Sat 19 Apr 2025 20:00:41 +0000
Manifest next update: Sun 20 Apr 2025 20:00:41 +0000
Files and hashes: 1: 39yFNcs_aiMECPSY8yer3c7rqfs.roa (hash: kt8DxoHHJV7b65racNqYI0+ZGEt7nNXcd8uoIQ2X++s=)
2: H2fPHKLeoy_NlwLdJRDra_K2hhA.crl (hash: Fcsn1Gu5BrB0/qHbQGtKQUlAA1m4SCH62LIrGvcKNV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:92:2e:53:e6:f1:52:aa:42:27:bb:d8:c1:a7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f67cf1ca2dea32fcd9702dd2510eb6bf2b68610
Validity
Not Before: Apr 19 20:00:41 2025 GMT
Not After : Apr 20 20:00:41 2025 GMT
Subject: CN=61578be4295de24f93f52607fc6a9f0a799921e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:88:5d:87:0a:9f:60:93:1b:4e:49:8d:ae:
5c:72:42:ea:62:fe:f7:8b:2a:e5:b5:c4:09:0f:08:
29:2c:7e:71:93:2c:a5:70:9b:3c:80:e4:3f:3a:de:
ea:72:42:2c:6d:82:f0:f4:8e:4e:a9:b5:7f:0e:79:
4b:aa:9f:e2:96:1f:9c:64:aa:36:0d:c4:aa:d3:92:
d5:f0:b7:b7:e0:06:e0:ee:a8:e1:90:20:26:f4:15:
e7:7a:1e:a7:7f:5e:e2:a7:4f:96:c7:ee:f1:c3:3f:
ac:8f:e8:24:5c:af:f8:32:ea:3d:f9:68:c6:6f:36:
3d:e0:05:61:a2:ed:0d:aa:f8:a9:7c:68:12:09:04:
1d:7f:ac:99:b8:f1:b5:06:03:d8:5c:b5:4d:f5:2f:
d3:0a:3e:2d:d3:54:5b:1f:3c:48:a5:ad:39:e5:2c:
2b:3d:91:43:b5:86:5b:7a:35:04:26:46:3d:d8:97:
33:4a:1c:7d:aa:4a:ad:c8:d7:9e:e4:23:7b:ae:ee:
26:7f:63:72:6e:0d:cf:73:cd:6f:b0:df:51:45:5b:
24:be:9c:76:e0:95:53:1b:cd:0f:69:ba:63:38:62:
6a:39:c0:b6:5f:85:0e:3b:9f:9b:6f:48:1b:00:8a:
aa:12:68:80:85:ec:f7:05:ef:3b:5b:ea:8b:ce:ba:
7f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:57:8B:E4:29:5D:E2:4F:93:F5:26:07:FC:6A:9F:0A:79:99:21:E5
X509v3 Authority Key Identifier:
keyid:1F:67:CF:1C:A2:DE:A3:2F:CD:97:02:DD:25:10:EB:6B:F2:B6:86:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2fPHKLeoy_NlwLdJRDra_K2hhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3cb4d6-f32c-4130-ae0e-badbe840977e/1/H2fPHKLeoy_NlwLdJRDra_K2hhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:80:91:a8:93:e6:9a:27:66:16:2c:0e:34:f0:41:81:94:
37:39:fe:d9:ca:4e:e3:ba:24:62:85:9d:5f:7f:1b:36:f0:72:
cf:be:12:0e:2b:9e:9f:ab:d6:6f:71:d5:73:43:bd:b6:39:b9:
2d:44:20:86:c3:c9:2b:21:46:af:46:4f:c8:38:7c:c6:2f:fc:
f0:6a:91:eb:f1:46:29:ce:d5:b1:9b:26:b0:a8:18:1c:fa:d5:
31:d6:bf:e1:42:da:32:11:41:ed:8a:3c:10:be:0e:25:96:5f:
35:1d:1c:7c:72:e2:ae:e0:fb:70:05:51:e4:0c:5e:78:a1:fb:
74:31:b1:3b:15:4a:5b:e4:a7:8d:b7:b4:01:48:b1:e5:52:ba:
9a:82:7e:38:04:38:7b:fe:a7:c9:ce:5a:52:cf:ac:37:1b:15:
d3:3f:d0:bd:20:1d:fa:97:da:e6:94:be:2c:cb:9d:6e:61:39:
08:68:f1:5a:b6:4c:92:a1:25:92:5b:19:71:d7:0d:a9:0e:81:
d3:2d:94:1b:41:75:8a:98:bb:da:b9:40:8d:e1:b2:34:9a:f4:
06:15:d2:fc:82:c6:fe:c5:f9:5a:76:14:30:cc:ee:57:76:f3:
5f:fd:78:67:fd:2d:1b:c8:4b:94:9b:36:47:af:ca:4f:fa:a2:
91:55:bd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:54:02 2025 by rpki-client