Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
File: H0VsxbfOPCB594b-wd-8slJDmUE.mft (raw, json)
Hash identifier: PoSkXYZlIJwwjuWBnx6EjCfIJw9P1E/8tO9rPvPq0QM=
Subject key identifier: FE:BE:5D:3C:EA:6E:68:D7:6C:5E:04:94:59:5C:0B:DC:B9:38:C1:FA
Authority key identifier: 1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
Certificate issuer: /CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Certificate serial: 01967AFB97F6673F89FE2A2FC5B70B47DA08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
Manifest number: 0C03
Signing time: Mon 28 Apr 2025 06:00:30 +0000
Manifest this update: Mon 28 Apr 2025 06:00:30 +0000
Manifest next update: Tue 29 Apr 2025 06:00:30 +0000
Files and hashes: 1: H0VsxbfOPCB594b-wd-8slJDmUE.crl (hash: 4z68ERlG1MF0m51sEeh3fDENLO/ChUS9K1wdnzfA3Rg=)
2: NVrrhbZmq4fJCBokU32i6BZfN2w.roa (hash: wsW18ZwbqgPM3aB7Kh9k48/63qX+j0nBz3Q3dGVomcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:97:f6:67:3f:89:fe:2a:2f:c5:b7:0b:47:da:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f456cc5b7ce3c2079f786fec1dfbcb252439941
Validity
Not Before: Apr 28 06:00:30 2025 GMT
Not After : Apr 29 06:00:30 2025 GMT
Subject: CN=febe5d3cea6e68d76c5e0494595c0bdcb938c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1c:ee:63:8d:ae:1f:0d:32:c1:cf:d5:17:26:
bd:f4:b1:e9:4c:73:b5:ee:78:1d:57:6e:20:c0:2a:
e0:b6:73:02:b2:f1:00:7e:f4:fd:b9:82:e9:5f:18:
1a:d6:a8:3f:73:b8:cb:44:ec:de:89:8e:f3:ef:aa:
c7:e0:81:1f:fb:7d:eb:7a:f2:b6:e7:ac:d8:9e:70:
d2:21:4b:5a:97:f6:4b:60:24:0d:0d:29:95:cf:9b:
a1:08:59:cf:5d:96:99:c8:45:2b:a7:e3:50:54:0e:
97:3a:74:bb:9d:f6:b1:b9:49:35:0b:7b:8f:5e:54:
08:fe:11:c5:e4:aa:93:80:d2:5f:8c:ef:02:10:42:
24:27:66:b9:0b:60:20:fe:e1:c3:cf:49:3f:68:45:
86:79:1a:4c:67:cc:38:4c:cc:00:31:89:ad:bf:54:
89:a0:d2:36:a5:80:38:f7:71:65:f0:ca:33:79:ce:
ac:72:aa:97:d4:b7:c1:0b:66:4d:dc:f8:9f:24:f2:
50:0a:2a:ec:83:7f:4e:21:ee:91:75:a2:b5:77:3f:
5c:cf:dc:8e:61:30:e5:83:24:25:49:24:02:01:43:
d0:f2:bc:84:98:4d:d6:3b:3e:92:3e:60:51:d7:73:
4f:18:04:18:d0:78:ec:2a:e3:22:70:5e:78:d0:8f:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BE:5D:3C:EA:6E:68:D7:6C:5E:04:94:59:5C:0B:DC:B9:38:C1:FA
X509v3 Authority Key Identifier:
keyid:1F:45:6C:C5:B7:CE:3C:20:79:F7:86:FE:C1:DF:BC:B2:52:43:99:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0VsxbfOPCB594b-wd-8slJDmUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/dae290-1b84-4fd0-9072-bd7d3451aa66/1/H0VsxbfOPCB594b-wd-8slJDmUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:14:76:13:10:3d:c2:33:aa:20:55:6e:9a:76:4a:9e:e9:80:
65:c6:6f:32:29:be:f7:8e:d0:5e:65:8b:d8:49:e4:4c:fb:92:
52:21:8b:63:2d:32:c9:92:24:e8:95:c4:e2:ce:d4:7f:5c:0f:
65:ed:a7:19:88:66:fc:a8:fc:97:7d:84:d5:0f:4d:c2:86:ec:
f0:af:75:38:46:f9:5c:d5:ef:ca:dc:17:d0:21:be:17:c6:ae:
a5:fd:67:db:10:36:44:06:b5:16:1f:11:b3:4a:36:42:21:dc:
ab:00:90:71:d9:86:46:34:a0:5b:69:9c:69:c0:73:ae:b9:bb:
a4:b5:75:bf:54:ad:8d:2a:98:8a:7c:de:64:73:4d:f2:e0:06:
21:56:0f:b7:23:8b:2e:0a:80:ca:c3:a2:fa:49:3c:dd:ca:c6:
6b:cf:31:0c:fe:57:1b:0d:d2:2d:85:a3:ab:6e:ba:29:22:77:
d5:ec:d3:07:13:5d:9a:eb:52:37:51:7a:3b:b3:2a:c3:55:a0:
7d:3b:37:e2:e9:17:52:d3:64:66:6c:37:95:a4:2b:23:2a:35:
ae:5b:05:90:06:d7:bf:a2:7c:23:86:1f:08:4a:60:50:2e:26:
de:58:2a:19:a3:41:19:f6:dc:41:76:50:40:9d:5b:36:c7:55:
5c:39:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:31:21 2025 by rpki-client