Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: ZOUIn+zG5E4zpbq0GUnLPznVw7raFeCyzlXpvvAloeM=
Subject key identifier: B4:7A:BE:E5:62:98:1F:95:1C:11:93:76:44:21:B9:C0:53:3A:84:4B
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 0196881292F707BF3CB068922BD3B1A367A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 10C5
Signing time: Wed 30 Apr 2025 19:00:40 +0000
Manifest this update: Wed 30 Apr 2025 19:00:40 +0000
Manifest next update: Thu 01 May 2025 19:00:40 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: l35wQIBNHN60eB9QfbBVWnYa+pLzgJ9YVWuGFQfiMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:12:92:f7:07:bf:3c:b0:68:92:2b:d3:b1:a3:67:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: Apr 30 19:00:40 2025 GMT
Not After : May 1 19:00:40 2025 GMT
Subject: CN=b47abee562981f951c1193764421b9c0533a844b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2b:6e:d6:f4:0e:54:1d:c6:2b:2b:3b:3e:da:
b3:a9:5b:bf:d1:33:8d:51:c1:97:5f:51:99:8b:0c:
8e:60:39:d9:ca:bf:5d:b9:19:b2:91:05:8e:82:7c:
4a:90:75:98:c6:0b:9f:fc:12:c7:8f:45:02:8e:8f:
d1:8b:f0:d1:d1:3f:82:fe:40:1a:48:39:74:1a:1a:
6d:96:dc:29:16:57:5a:c5:8a:fd:b9:88:88:e6:30:
c5:07:b9:ca:91:36:47:7b:ec:d2:e1:28:2c:aa:67:
7e:63:78:ac:d8:77:96:c6:20:e3:2b:d9:d0:0e:4a:
6a:23:9a:2f:e8:25:3f:aa:21:71:62:aa:e7:ac:1d:
85:ef:79:2e:24:e7:72:a3:73:36:eb:46:aa:02:a4:
6d:0a:af:cf:57:ae:ba:b1:5b:27:46:08:d6:ab:3b:
fd:5e:7c:7c:b1:b5:48:61:38:6c:90:ad:e2:c8:69:
9a:8b:c5:ee:a0:05:d2:7e:13:08:f0:fc:36:4a:25:
d0:29:a3:c4:67:53:5f:44:5a:52:13:0f:36:5f:e8:
c4:57:96:62:62:78:8a:66:ac:1e:21:fa:74:c5:88:
c9:a1:52:2f:97:23:4a:e3:fe:ed:0b:e2:40:b7:39:
fb:a6:eb:82:0e:f3:9e:67:8f:83:5c:48:35:a1:63:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:BE:E5:62:98:1F:95:1C:11:93:76:44:21:B9:C0:53:3A:84:4B
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:31:2f:7d:6e:0a:d8:39:db:a5:59:a8:30:26:3c:41:73:52:
8b:c9:e4:30:c8:6a:51:e4:f4:e7:62:6f:73:8e:e9:ab:74:48:
6a:3d:cd:da:76:e4:ed:dc:ee:92:5f:e6:99:3a:3e:09:bb:9f:
17:35:19:6d:d2:3d:a7:b3:f9:7f:fd:f2:5a:52:1a:ad:f3:eb:
ec:4d:00:53:5f:c0:4a:e2:55:16:12:4a:56:26:1c:fe:65:a6:
6e:2a:ce:c1:ab:14:76:ac:b9:9e:73:8d:31:90:16:dd:1c:d5:
b2:de:f8:13:82:36:8a:7c:90:9d:6b:64:df:cb:ce:95:59:a2:
7b:2e:60:00:66:78:05:a5:bd:72:0e:aa:69:d4:cb:19:25:a4:
96:bf:29:77:c4:06:11:c5:7a:3c:59:aa:88:e0:f3:f7:98:70:
16:e9:98:f0:6c:60:c9:31:f4:df:d7:2e:12:d6:83:49:d0:5f:
cd:fa:b0:72:ee:44:f2:a8:3c:99:e5:7f:ae:33:4d:fb:9c:40:
72:77:5b:53:d4:45:a2:61:a5:4f:a1:ae:06:dc:52:44:31:c7:
84:d0:74:e0:a3:f9:35:1a:89:81:b6:81:e4:1c:3d:cb:7f:35:
18:3c:17:d0:39:1d:d2:68:5a:c3:d3:a3:50:3c:66:f6:48:11:
5d:03:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:29:04 2025 by rpki-client