
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
File: H4EMw_0igzjZuWlyXZW7M8TmWkg.mft (raw, json)
Hash identifier: ExNL7AFHVdJeOT4dDeeoNJQLTm3rZBAqiOL88ivxn3M=
Subject key identifier: F4:E9:51:9A:4E:99:F9:58:F8:B8:62:5D:ED:BF:3A:E6:57:EF:C7:61
Authority key identifier: 1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
Certificate issuer: /CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Certificate serial: 01963E789E68F67AA62866F3303B38B6F2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
Manifest number: 0C76
Signing time: Wed 16 Apr 2025 12:00:14 +0000
Manifest this update: Wed 16 Apr 2025 12:00:14 +0000
Manifest next update: Thu 17 Apr 2025 12:00:14 +0000
Files and hashes: 1: H4EMw_0igzjZuWlyXZW7M8TmWkg.crl (hash: d2WIWuE5YoPJ2JokI2YBaApyKpUEFNtYGrQXzjon8MI=)
2: pj_r37O8ymvyjuC6uSrXOKsAL0o.roa (hash: wt8kJLWKI7jt1DkUmOJ01bIYni4fTUbSQrDjjyaL96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:9e:68:f6:7a:a6:28:66:f3:30:3b:38:b6:f2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f810cc3fd228338d9b969725d95bb33c4e65a48
Validity
Not Before: Apr 16 12:00:14 2025 GMT
Not After : Apr 17 12:00:14 2025 GMT
Subject: CN=f4e9519a4e99f958f8b8625dedbf3ae657efc761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8e:be:c8:cc:21:ed:fd:ca:cb:d8:d5:c0:d0:
69:cb:b3:dc:fa:3b:c8:96:f7:f8:54:ef:5d:09:94:
e1:74:41:b3:a9:a6:2f:0e:a9:6f:1b:80:c8:fc:00:
1e:f9:cc:55:0b:c8:63:cf:a1:17:e8:95:d0:97:cc:
3f:71:06:65:92:d3:80:23:92:63:8b:5a:5d:29:06:
1c:81:2a:b0:b5:9d:e3:8f:a3:25:94:89:70:d5:77:
9a:d8:39:84:04:85:cd:85:72:55:e4:49:11:c5:8e:
51:3a:ba:50:95:da:58:a7:6b:39:d6:df:55:55:81:
9f:9c:66:75:b9:0b:66:5d:b8:63:63:3c:50:3d:55:
42:d9:55:bd:31:47:18:58:43:7e:79:f2:f8:71:3a:
a3:ba:56:39:17:95:c2:be:0f:2b:2e:f4:47:40:7c:
1d:be:63:c0:23:44:51:22:22:01:f6:8c:8b:2b:c8:
3a:9c:71:bc:7a:1e:4e:0d:f9:17:d1:2f:7c:6b:ec:
95:46:43:b7:49:11:81:11:2e:b5:ef:7f:37:92:4e:
a0:e5:43:d2:7e:05:40:f1:b5:02:a2:4b:d1:32:b2:
56:79:fe:e2:d9:7a:38:21:fa:c8:db:8a:d2:a0:93:
d1:c8:e6:63:67:b2:2d:5e:2f:a9:d4:ed:de:01:b2:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:51:9A:4E:99:F9:58:F8:B8:62:5D:ED:BF:3A:E6:57:EF:C7:61
X509v3 Authority Key Identifier:
keyid:1F:81:0C:C3:FD:22:83:38:D9:B9:69:72:5D:95:BB:33:C4:E6:5A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4EMw_0igzjZuWlyXZW7M8TmWkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0f0927-c29b-4698-859e-f9c180ba4801/1/H4EMw_0igzjZuWlyXZW7M8TmWkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:70:05:79:48:3c:31:18:e1:3d:fb:99:b4:8a:08:8b:77:
ea:c3:1a:1c:6a:85:50:64:ab:5b:7c:59:57:9b:80:a5:62:ea:
d3:02:47:f4:cd:7c:e2:9d:cd:8c:23:ee:27:19:6c:06:92:a2:
bd:a8:37:97:35:57:c1:52:37:ce:4d:34:f7:59:8b:6a:f2:ba:
78:94:7c:2a:f3:e9:ee:9c:3f:a3:8c:e8:b3:33:c4:41:c8:a9:
39:4c:e6:ed:4a:30:ba:ba:79:e8:5f:13:0e:3b:51:08:e9:3e:
80:cb:b9:62:e3:ed:40:a2:5f:4b:2f:be:74:00:f4:c3:51:2d:
9a:e4:d7:b7:e0:a6:e7:e3:05:e4:4d:5a:3a:29:bc:5c:bb:ba:
95:56:17:5e:14:e3:31:26:95:ed:45:8f:01:24:c5:c8:d0:3a:
c3:cf:64:f6:54:f6:7a:75:ec:7b:f4:59:a5:e6:a3:8b:48:95:
19:dc:5a:53:a0:6f:94:71:cb:14:36:ec:12:93:88:74:d1:3d:
e1:ba:72:72:1e:f6:d8:3a:c0:44:24:17:36:6c:93:ca:f7:89:
d1:8c:1e:09:3c:c7:72:63:58:28:33:5e:32:64:53:47:80:a5:
98:d5:fd:b8:56:e1:ca:29:6e:f0:42:1c:6c:20:a0:b6:de:9b:
76:b6:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:41:17 2025 by rpki-client