
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
File: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft (raw, json)
Hash identifier: 5fI907prsb928JHDsdE2l+LRCATYOyVR/0rNi8gJIqw=
Subject key identifier: 7D:B3:46:F3:54:44:99:9B:03:6F:16:F9:B3:76:F1:E8:85:8C:5E:8E
Authority key identifier: 1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
Certificate issuer: /CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Certificate serial: 019683FF6E653772C9225388E68E8DA5508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
Manifest number: 13E5
Signing time: Wed 30 Apr 2025 00:01:17 +0000
Manifest this update: Wed 30 Apr 2025 00:01:17 +0000
Manifest next update: Thu 01 May 2025 00:01:17 +0000
Files and hashes: 1: H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl (hash: d+N78WHGyzylw+9i4x7hYp/HQGOGL+jW2CeWf3+bE0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:6e:65:37:72:c9:22:53:88:e6:8e:8d:a5:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f8cd5bda34610adafed1fed43a22345f0767e7f
Validity
Not Before: Apr 30 00:01:17 2025 GMT
Not After : May 1 00:01:17 2025 GMT
Subject: CN=7db346f35444999b036f16f9b376f1e8858c5e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:8f:bc:c5:46:01:f4:82:c8:fe:fc:e0:f9:
dc:5e:33:df:2b:ca:c1:90:9c:2d:d0:9c:53:c4:78:
09:fb:5b:81:91:9e:44:62:37:0a:6f:dd:15:ec:94:
33:f0:c0:bc:97:9f:06:18:a6:3e:a8:d8:39:08:51:
ed:87:43:86:b6:57:2a:1d:65:e0:df:18:e5:49:02:
4f:98:85:69:12:e5:0a:5b:23:39:62:b2:40:b4:d5:
51:40:fe:70:ba:86:5d:2a:11:68:7f:65:16:b8:f7:
6c:b9:fa:34:55:9e:a4:81:63:10:4e:ab:a3:53:b8:
2b:f7:cb:39:44:09:84:a8:f5:fb:b0:1e:65:d7:ea:
38:a1:4e:ed:a8:f4:f8:c9:67:da:39:7e:df:50:21:
1f:ef:d9:ee:3d:ff:6d:68:57:ce:94:6c:4a:2a:5c:
c2:69:62:eb:de:ea:16:b3:79:95:6b:ee:cb:9e:94:
aa:4e:43:90:ff:fe:f1:2d:06:db:05:54:a8:78:ab:
d1:fd:49:06:aa:f3:91:b0:2c:4c:95:45:f3:99:5b:
0d:a3:a7:89:8c:ea:94:d7:e2:d8:a1:ee:13:aa:b6:
c2:7b:bd:27:55:48:9d:2d:69:10:c9:cd:a0:3b:78:
57:65:0a:2e:bf:d7:16:65:49:21:8f:3e:0e:f8:14:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B3:46:F3:54:44:99:9B:03:6F:16:F9:B3:76:F1:E8:85:8C:5E:8E
X509v3 Authority Key Identifier:
keyid:1F:8C:D5:BD:A3:46:10:AD:AF:ED:1F:ED:43:A2:23:45:F0:76:7E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/49c630-80d8-4955-ba6e-ee6dbfa98d2e/1/H4zVvaNGEK2v7R_tQ6IjRfB2fn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:89:b6:be:99:4c:5c:fe:18:fc:1e:ab:8f:0a:fe:ac:ff:ab:
46:0b:15:a2:11:bf:7c:06:f9:5a:c1:b1:0a:e1:90:f3:7e:04:
67:40:d8:f0:a5:72:96:39:d3:05:51:85:22:43:8c:95:88:fd:
2a:12:9e:21:24:15:90:14:5f:cf:81:43:d6:ee:fd:1c:c3:c4:
f5:3c:8b:26:d4:66:f9:06:cd:70:79:2a:ee:a5:a4:63:6c:35:
36:d4:58:c4:8d:b2:52:29:29:69:83:5f:6e:32:ce:7f:eb:20:
03:d1:6c:69:52:1a:ed:51:55:e4:ae:47:80:14:ac:e3:37:19:
aa:4d:94:fa:5d:6a:0a:18:9e:d4:ce:14:15:2a:2b:4a:c0:f1:
6c:78:53:26:14:e4:45:91:7a:87:91:9f:ec:42:85:b5:42:ab:
cb:e1:fb:0b:3f:e2:06:2c:cb:16:cc:e5:d7:d6:86:15:66:65:
1c:63:b2:14:19:01:42:98:5f:de:08:03:5b:dc:e9:9a:0a:37:
9d:9d:46:1a:0c:27:ba:5e:16:a1:05:bc:ef:d2:14:99:39:15:
60:a8:5c:07:fc:84:8e:85:41:d7:73:e7:32:70:08:29:db:c1:
49:38:87:5f:2e:82:2e:d1:b1:69:86:f0:61:44:38:fe:cb:f7:
f6:cf:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:07:17 2025 by rpki-client