Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
File: H0guXkEsHeu3dt7fr0XDMXTnZC4.mft (raw, json)
Hash identifier: NlaRKMsltZiNfpW+i8C3efXdFOqa2dXZrnpbXAHr5aY=
Subject key identifier: 25:F6:94:69:98:0E:16:AC:2E:BA:63:FD:A1:E6:AA:23:99:E9:0C:71
Authority key identifier: 1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
Certificate issuer: /CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Certificate serial: 019674C2ED067DF4C92C98D1978B3456B8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
Manifest number: 0359
Signing time: Sun 27 Apr 2025 01:00:53 +0000
Manifest this update: Sun 27 Apr 2025 01:00:53 +0000
Manifest next update: Mon 28 Apr 2025 01:00:53 +0000
Files and hashes: 1: H0guXkEsHeu3dt7fr0XDMXTnZC4.crl (hash: uglj3ZF++dPUqpEe/DReGEigizvlRuqnZwr+q3HpuhI=)
2: StsIBWXPkUmDPSa1M3nyv0UDUR4.roa (hash: rqGYqeTGV9tyOvnudhslVeQEEchE0GwN6rysMNZqs1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:ed:06:7d:f4:c9:2c:98:d1:97:8b:34:56:b8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f482e5e412c1debb776dedfaf45c33174e7642e
Validity
Not Before: Apr 27 01:00:53 2025 GMT
Not After : Apr 28 01:00:53 2025 GMT
Subject: CN=25f69469980e16ac2eba63fda1e6aa2399e90c71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d0:7e:ae:7b:ac:5d:5e:52:4f:8a:99:59:2c:
52:d3:e4:8a:fa:ca:1a:06:71:2f:1a:2a:75:6d:bf:
7a:cb:41:3b:fb:5e:af:dc:8b:38:40:51:b3:e4:5b:
c6:f6:79:26:dd:7a:55:ee:82:2e:cd:b3:3b:26:5e:
6b:7d:21:19:14:af:1f:50:0f:13:5e:91:ab:87:e4:
be:da:f1:63:5e:c0:70:0d:88:df:df:cb:62:02:2c:
c1:1e:42:80:a8:85:a7:7a:a7:ca:08:36:30:67:3e:
e1:99:b1:3e:fa:5d:c3:34:a7:a4:ee:e7:a1:5d:76:
ac:35:d6:3c:9f:18:b5:42:fc:d4:4b:91:51:22:ad:
53:2a:b3:75:63:65:1a:94:a8:cd:04:37:0e:b8:e8:
46:69:ce:1f:9b:0c:5f:45:3a:9d:2e:c8:32:03:11:
25:3c:2e:16:14:19:00:24:1f:d3:c8:be:9f:08:8d:
99:0f:0b:ee:01:5a:ec:b8:c4:67:0f:c3:78:6c:ea:
2c:c9:a3:6f:ba:78:8e:98:86:2d:2a:ad:ee:4a:e3:
98:65:1a:7b:4b:76:c1:42:75:f0:7c:c2:b3:dc:dc:
43:6a:79:fc:d7:c6:88:9c:d0:32:55:9a:bb:ec:a0:
ec:c6:cc:e5:f8:cb:3e:3e:3d:af:43:d0:a0:ce:ae:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F6:94:69:98:0E:16:AC:2E:BA:63:FD:A1:E6:AA:23:99:E9:0C:71
X509v3 Authority Key Identifier:
keyid:1F:48:2E:5E:41:2C:1D:EB:B7:76:DE:DF:AF:45:C3:31:74:E7:64:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0guXkEsHeu3dt7fr0XDMXTnZC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7dde96-10dd-4323-81d2-d2e3372ac29c/1/H0guXkEsHeu3dt7fr0XDMXTnZC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:d5:ca:3f:25:55:7b:61:e0:dc:5f:8b:63:cb:a9:14:b8:
f6:0c:74:37:fa:01:b3:4e:07:c3:60:7e:6c:bf:6e:db:32:69:
04:91:6c:16:52:06:d2:e8:de:b5:85:94:22:4c:bb:b0:52:46:
28:a9:95:1c:28:5b:f5:87:cb:63:3d:c8:dd:03:43:70:2d:49:
e3:7a:44:e3:34:2d:14:13:43:aa:cc:8f:8e:26:af:67:fe:14:
3b:94:54:2f:c6:02:65:a3:79:32:21:62:b8:fb:8d:90:73:9a:
a9:79:75:dd:13:f7:d5:ad:01:43:09:f4:15:ef:d8:d1:7f:f9:
8a:9f:9b:45:b1:66:90:64:49:96:03:63:7e:67:0f:9d:10:76:
c2:72:13:92:1d:7a:91:c3:0a:46:d5:f6:86:6b:12:61:2a:b7:
2d:32:46:17:47:90:03:05:2e:24:0c:da:35:44:82:6e:3e:f2:
53:23:93:de:28:96:20:f7:79:e9:11:15:fa:52:88:d6:48:92:
91:bb:f5:31:fd:3e:0a:cf:7e:0b:59:10:b5:40:c5:eb:e9:09:
01:d8:6f:17:44:c7:aa:80:64:7b:80:5b:67:fa:c6:9c:8f:19:
1c:f8:c3:f0:91:ba:d2:eb:39:e5:97:f7:29:ee:ef:74:e3:8a:
d7:b9:ca:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:53 2025 by rpki-client