Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
File: H5TRNU5yMGqff5Ufk_UujROkCr8.mft (raw, json)
Hash identifier: Ro62FLt+BR5OzzinGBJUaM2hRfPIM6HTCOvOGLGED0Y=
Subject key identifier: 4C:14:3B:F0:7C:12:2B:4B:93:7C:2C:7B:3E:A5:E2:25:FD:6D:24:2E
Authority key identifier: 1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
Certificate issuer: /CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Certificate serial: 0196827DF33990DD1A53C90986D01F1BA133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
Manifest number: 0D4A
Signing time: Tue 29 Apr 2025 17:00:14 +0000
Manifest this update: Tue 29 Apr 2025 17:00:14 +0000
Manifest next update: Wed 30 Apr 2025 17:00:14 +0000
Files and hashes: 1: H5TRNU5yMGqff5Ufk_UujROkCr8.crl (hash: z7FNEE110yGr7EjqHGrTNjXkMZhGjoafohcuSCkDP1E=)
2: LKhlG3TMTYsgOdNspAeUKjE3FDY.roa (hash: ktutiAHlvXrlvrW8ZLJWK+gJEGiryttMuOJwRo+ROtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:7d:f3:39:90:dd:1a:53:c9:09:86:d0:1f:1b:a1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1354e72306a9f7f951f93f52e8d13a40abf
Validity
Not Before: Apr 29 17:00:14 2025 GMT
Not After : Apr 30 17:00:14 2025 GMT
Subject: CN=4c143bf07c122b4b937c2c7b3ea5e225fd6d242e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:1f:ca:3f:f3:84:f0:99:11:f6:2b:20:5b:
09:74:0d:7f:5e:7c:bb:02:d6:75:ec:4a:8a:8c:2c:
fa:ab:27:6a:7c:9a:2a:b2:38:17:f1:4a:b0:b1:d5:
9b:f1:fa:6f:f2:6d:0f:67:47:16:aa:41:8d:a9:7e:
6f:5c:15:87:d6:ca:01:6d:97:0a:ab:8a:10:6a:96:
95:d3:06:ef:a5:4d:ee:af:c6:d7:5c:1d:5a:6d:1e:
46:5e:d2:00:9c:34:f4:83:26:d9:3f:22:cf:57:b3:
92:2f:30:5d:ed:86:cd:06:66:5f:22:5f:a1:b7:88:
06:80:fc:91:d9:7a:b7:ac:8a:95:73:c9:7a:54:45:
ba:4a:38:f1:8a:48:af:cc:c9:91:ca:c9:5d:82:54:
b2:a2:dc:1d:7d:b5:ce:0b:35:24:ea:05:fa:e6:f5:
2c:88:01:6d:5a:a3:3f:6d:d2:15:a5:e3:41:59:46:
dd:ea:ba:f2:ae:27:6a:00:a4:16:ed:bc:f6:50:af:
b7:77:15:ad:0b:75:0e:d2:41:6d:52:bd:b7:cb:c7:
86:56:ba:1e:15:89:11:17:92:8d:00:da:7f:bd:8a:
df:6a:de:02:9a:00:b4:c3:2f:07:d8:13:75:6e:b8:
54:12:d1:94:ba:37:a7:1e:29:3e:09:db:7a:c9:1f:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:14:3B:F0:7C:12:2B:4B:93:7C:2C:7B:3E:A5:E2:25:FD:6D:24:2E
X509v3 Authority Key Identifier:
keyid:1F:94:D1:35:4E:72:30:6A:9F:7F:95:1F:93:F5:2E:8D:13:A4:0A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRNU5yMGqff5Ufk_UujROkCr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/df96a5-3157-4883-8083-212f893fc835/1/H5TRNU5yMGqff5Ufk_UujROkCr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f9:64:98:16:9d:7d:7e:94:a2:b5:db:14:47:cb:9e:96:fd:
60:02:a3:5b:2c:e8:bb:41:b5:9e:32:30:6c:ee:34:b6:d3:4f:
84:85:98:e4:70:e5:8a:e9:5c:7f:07:c3:a4:d5:a6:7a:f4:50:
17:ce:5a:74:92:3d:af:52:8d:40:69:fe:15:04:21:08:01:25:
0d:ba:74:b8:08:37:d7:c4:0b:af:15:00:23:de:ec:fa:df:2e:
15:c2:61:60:51:21:15:8e:d5:ca:97:9e:8c:34:0f:2d:f7:7a:
bb:6f:28:85:b5:8f:3d:1a:2d:85:25:91:aa:9c:57:c9:a9:53:
3d:ed:d9:c1:f9:e1:49:29:f5:f6:ec:e1:ce:0e:ed:44:4e:0c:
98:d5:02:2f:d9:98:ce:4f:77:0f:c2:31:26:cf:fa:ac:25:a2:
90:77:84:4f:ef:02:f3:68:9d:22:ff:29:21:60:21:8c:bc:66:
92:b3:fb:ae:60:06:c8:2d:f0:cb:bd:0d:65:da:e9:62:7b:b6:
b4:de:c6:99:7c:5c:8b:2e:58:14:6a:3e:51:34:b5:bb:aa:b9:
d3:0e:4b:59:91:9d:1e:fe:96:e4:99:43:2b:bd:62:7e:b5:21:
c6:e0:8a:38:0d:44:eb:b6:c9:f6:c9:7f:8f:2f:cc:15:1d:ff:
29:6f:ae:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:45:51 2025 by rpki-client