Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File: h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier: cWOeGh8JLF7Ae0m+InptdIhPgELKyTTBSN4GZW0j6a4=
Subject key identifier: 19:D6:74:B6:97:61:35:71:6E:06:57:98:99:A5:32:0C:E6:E5:67:60
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer: /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial: 019681A2808E76E3CB6850E76C6CC2AA81F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number: 127D
Signing time: Tue 29 Apr 2025 13:00:32 +0000
Manifest this update: Tue 29 Apr 2025 13:00:32 +0000
Manifest next update: Wed 30 Apr 2025 13:00:32 +0000
Files and hashes: 1: DC457V004ebo_81e4fxQUpZs59k.roa (hash: koGSw3MBz9AwS+zqOmOgemnpgRcxTDfkN77KAf52zbM=)
2: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: fUYr9/nAk6NngSEbMdahB1bXIyg00+tv4qjHqhVwMF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:80:8e:76:e3:cb:68:50:e7:6c:6c:c2:aa:81:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Validity
Not Before: Apr 29 13:00:32 2025 GMT
Not After : Apr 30 13:00:32 2025 GMT
Subject: CN=19d674b6976135716e06579899a5320ce6e56760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:7e:f8:55:a1:cc:62:77:c1:83:1e:91:f7:
ea:4b:39:ca:99:e3:5c:30:a4:e0:a9:87:bb:b7:84:
64:c9:8b:64:7b:21:38:5f:c9:eb:01:38:af:eb:c8:
ea:1c:58:56:23:ba:4a:c0:a1:de:b3:de:c0:c8:3d:
7c:e6:56:a3:77:5d:b6:95:28:19:64:b3:53:9f:0d:
aa:de:4b:82:f8:10:bd:dc:92:13:9d:87:bb:1a:45:
28:cc:ec:f1:bc:3b:2f:49:52:fe:07:82:73:07:7c:
f5:c5:98:6a:a5:50:0f:5f:a3:d0:db:33:47:d6:19:
f1:e7:d5:aa:30:0c:6d:3c:5e:79:c5:0e:a1:97:1c:
eb:bc:bf:8b:b2:62:bc:b4:e6:5f:c0:93:c2:09:e0:
d4:52:a0:31:ee:c6:3d:fb:ba:53:a8:5d:3a:58:d0:
e5:5d:57:91:fe:0d:b9:48:f4:a3:75:89:8b:e0:51:
ae:94:11:1b:dc:37:9c:1a:13:9b:5d:71:ea:9e:99:
ed:44:1d:d4:31:e4:62:52:47:5a:43:fa:6d:d4:95:
68:0f:3e:c3:bb:09:0f:64:86:38:9c:2a:32:33:cc:
11:bf:af:a5:ba:f5:0e:25:2b:7b:6a:98:d9:21:33:
83:2f:67:69:a9:48:30:7f:26:0e:be:0c:5c:ce:e8:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:74:B6:97:61:35:71:6E:06:57:98:99:A5:32:0C:E6:E5:67:60
X509v3 Authority Key Identifier:
keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d1:ed:ce:07:ae:2c:3f:d1:5e:b7:f5:b0:0f:7e:06:4d:71:
45:f6:6a:68:22:f6:e0:a9:c8:25:f2:5e:c4:44:87:5c:c8:e6:
39:fb:a6:96:d8:11:35:bb:86:ce:72:75:3d:85:ae:b5:0f:e0:
dc:20:0b:a2:e7:01:66:a7:ad:46:72:69:0c:b5:01:2e:fa:f9:
68:32:db:fb:7e:ea:cd:f5:7f:fd:59:46:5e:26:88:3c:ed:66:
65:ec:f1:7a:a1:18:15:65:29:fa:6d:3b:d4:fe:5e:a2:70:53:
18:cb:9c:f3:d0:78:bb:01:59:3a:e0:95:7f:7a:da:89:45:6b:
f4:9b:2a:2b:c3:e1:c5:19:c9:0d:88:c6:ab:a5:c3:5f:fc:01:
75:80:3e:85:e3:a4:9a:ca:01:be:ac:77:8a:40:a2:70:5e:3e:
a2:72:ab:71:31:af:3f:39:54:48:62:3b:27:f9:45:05:90:3f:
3d:2e:68:fd:41:df:b3:26:d6:64:e2:b8:c1:91:af:da:1e:d9:
e0:c5:3a:e7:cd:6b:de:ca:e1:ca:bc:45:f3:94:0e:fd:17:fd:
7d:fb:a9:dd:38:79:7f:dd:31:a4:4b:2f:14:90:94:59:29:e9:
d5:3b:1d:fa:18:ec:92:46:f5:dc:51:e5:17:3c:0f:e5:b4:7d:
09:a7:26:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:20:46 2025 by rpki-client