Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: zNwTENJQdqjD2aw6GVfWiU+ytnichCb+pk9ZRtETZDE=
Subject key identifier: BE:27:24:10:0C:05:85:9B:7C:CF:8B:F8:66:C3:F2:D4:70:D7:34:6A
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 01968391C3484526D0256ADE3EC143D6139B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 22:01:30 +0000
Manifest this update: Tue 29 Apr 2025 22:01:30 +0000
Manifest next update: Wed 30 Apr 2025 22:01:30 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: JCbm+C/oCGYTnF+nWnhvnvf5uf/2dUGTq6GluT6b/sk=)
3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:c3:48:45:26:d0:25:6a:de:3e:c1:43:d6:13:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: Apr 29 22:01:30 2025 GMT
Not After : Apr 30 22:01:30 2025 GMT
Subject: CN=be2724100c05859b7ccf8bf866c3f2d470d7346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:49:38:4c:fa:00:cf:bc:ad:7e:90:ef:2b:
3e:67:41:45:18:70:f5:6e:f4:aa:62:7b:c6:c0:28:
38:49:e4:ef:ee:d2:3d:df:a8:8e:23:25:23:a0:4f:
cf:af:3e:2c:80:3c:a9:be:c3:3a:4c:61:aa:a0:7b:
05:96:8c:de:c2:b5:7e:34:de:51:aa:3a:67:c1:3a:
e0:c9:07:c5:59:12:1b:cb:fd:d6:47:0e:66:c8:cb:
6d:a9:cb:d4:b8:a7:61:d3:d8:04:75:34:23:fe:5e:
05:5a:d8:64:aa:1e:62:62:38:c3:3f:91:6f:68:ef:
82:14:b0:22:74:73:e7:dc:f0:76:23:77:c6:90:44:
ea:e1:88:b6:af:f6:fb:8a:8e:22:aa:6d:40:55:b1:
95:a8:f2:1a:b6:f7:8a:6f:90:cc:7b:75:d3:f7:c8:
1a:4b:fb:ae:cd:2c:32:13:6e:cd:7d:a2:4a:97:02:
44:6d:e8:54:4b:a6:a4:6c:68:bc:20:15:22:df:42:
34:d5:6e:77:a8:4a:fd:e4:c2:4d:66:73:62:64:9d:
04:0b:fb:22:b9:3d:14:9d:64:2f:8e:df:9a:14:af:
04:ad:8c:d0:22:45:a7:80:da:54:7c:93:52:8e:59:
67:fa:3c:d3:46:af:a8:05:de:df:a9:40:b2:64:2e:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:27:24:10:0C:05:85:9B:7C:CF:8B:F8:66:C3:F2:D4:70:D7:34:6A
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b2:51:3e:32:27:65:86:42:82:6d:3d:b5:3c:d8:47:fc:f3:
f9:c3:54:c1:e7:7c:7b:c1:11:ae:64:0e:ea:94:69:f0:3a:37:
b8:d5:55:9e:64:d0:76:5f:30:52:bc:24:9d:13:8a:96:84:69:
ab:71:2a:2b:56:04:5f:25:ef:97:df:45:31:7d:56:ba:3e:0f:
45:1c:2d:ff:a0:bd:7f:81:99:a3:06:77:13:32:84:09:74:80:
d6:1a:36:1b:28:73:84:86:06:51:6a:1e:16:c9:0c:b0:d8:f8:
a4:26:70:9f:35:87:46:38:96:b2:b5:6c:7a:c0:c1:8b:18:2c:
8f:d7:f1:24:6e:aa:c6:60:9e:2d:f3:c0:18:dd:43:5e:b4:6d:
5b:30:ff:2a:7f:41:d4:46:b9:2c:fd:76:45:d0:95:6a:72:ac:
c6:cd:36:0e:a8:25:ff:86:d0:1c:20:9e:2e:6b:dd:b7:e0:a3:
db:6d:c6:81:92:71:05:86:64:b8:74:97:a3:41:a1:3d:b6:07:
ad:8b:bf:8e:5e:b5:fb:4e:d8:57:5c:3e:b2:16:15:3c:e9:b0:
08:95:71:4d:7c:40:5b:3b:47:f4:08:34:ed:71:27:37:82:92:
30:f5:e7:23:87:a5:e0:5c:a5:2e:2c:88:14:b4:c4:28:57:23:
b4:07:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:49:12 2025 by rpki-client