Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
File: sH-v24bTjze_DCbT8nMf3vaxTko.mft (raw, json)
Hash identifier: iUaB2cCiAC8eNQieKM66Tw0i3lTWwe4KJVH+Ym+qFHk=
Subject key identifier: 7B:B1:21:BF:80:B8:1F:85:E6:74:74:D1:6D:E1:3C:EA:AB:0C:42:EB
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 0196428D2FC14DF2EFDB01754188C3EFCCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
Manifest number: 0651
Signing time: Thu 17 Apr 2025 07:01:11 +0000
Manifest this update: Thu 17 Apr 2025 07:01:11 +0000
Manifest next update: Fri 18 Apr 2025 07:01:11 +0000
Files and hashes: 1: 6JrlKE6-D36PVGMwp7ew7z1aOA4.roa (hash: T1fYyT20nJ5YneHKV99StH98ng47eu4G5rhmxnPt+y8=)
2: sH-v24bTjze_DCbT8nMf3vaxTko.crl (hash: YEIlbnDhmV8wUWzG6ixc/X/K1UU+jqp1QmeU8JZnklI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:8d:2f:c1:4d:f2:ef:db:01:75:41:88:c3:ef:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Apr 17 07:01:11 2025 GMT
Not After : Apr 18 07:01:11 2025 GMT
Subject: CN=7bb121bf80b81f85e67474d16de13ceaab0c42eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:81:89:dc:eb:ad:df:ff:e6:2c:d5:62:e9:
20:cd:4a:ca:6b:1e:31:e4:15:bb:18:08:da:21:f0:
96:6b:92:27:46:13:28:72:9f:0b:04:91:86:2a:cd:
0b:09:db:1e:1d:0e:72:07:74:07:74:89:d8:ca:4b:
6f:c8:24:6c:21:59:90:d1:ea:43:39:94:12:24:47:
dd:6d:50:d3:ca:e5:f3:69:cb:e0:e0:d6:16:89:52:
32:73:2d:a2:25:56:21:8a:5e:55:c3:36:33:88:f4:
84:7f:a7:8a:c8:70:9f:85:4b:cf:f1:6e:80:9e:15:
32:c0:41:57:e8:b6:88:17:f3:c9:ad:0a:97:ef:b5:
e3:d1:fc:2b:2c:8b:53:a9:a0:2e:af:4a:4f:76:3e:
07:95:03:d8:27:c8:76:f4:fa:74:5c:42:b9:58:73:
70:69:a0:21:46:17:a0:d2:e1:26:f2:35:81:9e:f4:
59:99:61:10:6e:ee:4c:27:67:59:28:35:92:5a:a2:
47:bd:7d:db:e7:1f:06:8c:47:27:40:3a:69:ec:8e:
43:d8:f9:58:f2:0b:4c:d9:d2:f7:aa:bf:c2:d3:58:
d1:08:6d:a0:e9:10:d2:cd:16:7b:17:c1:d6:9a:6d:
b6:3d:d9:80:66:6d:ff:0a:3e:70:db:76:ea:30:89:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B1:21:BF:80:B8:1F:85:E6:74:74:D1:6D:E1:3C:EA:AB:0C:42:EB
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0d:b0:87:f2:1d:0c:64:08:50:e8:bd:fb:c6:c4:fc:c0:0a:
5d:46:76:70:64:ef:be:53:c8:38:b4:4d:ed:95:c3:bb:d5:11:
87:3d:c5:86:45:52:59:14:4f:78:6e:cf:f0:2a:54:02:c5:99:
49:94:02:7d:41:61:35:a4:eb:cb:9a:fe:1d:80:8e:3a:c6:40:
fe:77:21:9a:81:db:1f:b4:dc:c6:31:3f:52:e1:b5:35:b1:4f:
f1:e9:30:04:07:27:be:60:69:c7:65:a1:27:f5:c8:ab:ff:62:
e6:7a:c9:f4:5a:65:6a:74:0b:c9:c2:fa:c0:ac:74:bc:3c:39:
9a:60:8a:c3:33:8b:ba:03:a2:92:1b:f1:40:02:2b:ea:a7:13:
e2:ce:35:07:0f:17:01:9d:07:04:82:ec:fa:89:96:e0:a2:0c:
f6:fb:7a:b9:06:d9:e2:41:7e:5c:a6:21:39:07:98:fd:14:84:
ee:43:95:83:38:a8:c0:b7:ff:42:11:8c:2c:fd:1e:78:db:1a:
2f:70:68:d2:5b:e5:6f:a1:18:b7:c4:ce:40:44:eb:b2:ca:50:
bd:48:43:c8:83:b9:c2:8f:0f:6c:d7:11:d7:9b:48:2f:af:e5:
4e:c8:4d:ca:30:cb:9d:6a:7f:f6:3d:e4:9a:d7:c0:c8:02:99:
d2:e6:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:37:00 2025 by rpki-client