Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
File: H3OdITpDj2eLMiqPj4Ti2MeBSso.mft (raw, json)
Hash identifier: zo7p0faqbABHtwJwLpwZ6kTgb0apRjVhT0PrkW7H+Mk=
Subject key identifier: 47:8A:DE:87:37:5F:CF:85:CE:89:4A:3D:D7:38:41:AD:45:C9:0E:75
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 019678686C95F5231D7DD8BE05F74AD3CDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
Manifest number: 151A
Signing time: Sun 27 Apr 2025 18:00:31 +0000
Manifest this update: Sun 27 Apr 2025 18:00:31 +0000
Manifest next update: Mon 28 Apr 2025 18:00:31 +0000
Files and hashes: 1: 2SchzzJaAzexW7ZHgOgzy2lmxNs.roa (hash: RiHYijJvu/N31/d02O4Q6+rMxWrRtxzNnGoQBv8G2nQ=)
2: H3OdITpDj2eLMiqPj4Ti2MeBSso.crl (hash: 2t+CjdTC+vVUFGXf8IfkP34hAV3IBzXMlqdxZre+Xsw=)
3: WlXI-iwoMwDNSzHCK_zDY3koVSA.roa (hash: smiKZ03dyUbxU4U4rGUY4/4dYERRUQa1juzBxJQFPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:6c:95:f5:23:1d:7d:d8:be:05:f7:4a:d3:cd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Apr 27 18:00:31 2025 GMT
Not After : Apr 28 18:00:31 2025 GMT
Subject: CN=478ade87375fcf85ce894a3dd73841ad45c90e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:a6:60:e1:e9:7d:e0:50:ae:d3:8c:0e:1e:
72:80:76:c9:d9:2b:f5:51:48:17:c6:b4:8d:77:ef:
8b:6e:1c:6f:db:48:a5:06:3c:92:e5:2b:a6:56:eb:
4c:f1:ea:cf:c7:b9:68:6f:47:de:f2:ac:05:55:80:
1d:ae:ac:5b:e4:36:76:b5:83:00:5d:f5:fb:9a:ba:
c8:da:f8:9a:66:6b:fe:70:7c:75:ad:2c:67:19:3b:
3a:83:39:f4:17:87:d5:45:82:0f:68:6d:16:74:e9:
7c:b5:42:bb:ec:5a:87:f9:41:6f:62:cb:5b:5f:96:
9e:41:56:4d:da:88:65:32:25:42:dd:71:ed:56:43:
06:1c:86:50:e8:b9:e7:2f:58:b0:b5:44:be:be:90:
dc:22:29:aa:3e:59:d9:31:87:c1:4e:55:15:6d:43:
e1:d9:99:e6:e3:e9:8a:f8:9e:e9:b4:a8:57:17:99:
d1:3c:fd:ce:64:45:05:69:97:20:35:09:d6:aa:75:
d4:d2:7f:3b:c1:7f:9d:c2:0a:2b:5a:e6:e2:60:1a:
0c:48:11:67:df:da:bb:cf:e0:90:19:20:e9:93:81:
03:fc:65:bb:dc:c4:1a:10:c5:5a:10:5e:e6:a4:4b:
76:ea:3b:01:c2:63:09:2a:ac:5c:3c:15:81:04:76:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:8A:DE:87:37:5F:CF:85:CE:89:4A:3D:D7:38:41:AD:45:C9:0E:75
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f4:49:7e:2d:7e:89:ff:0e:d3:bd:72:a8:3a:01:dd:05:38:
9a:e3:04:27:7c:1a:48:86:25:2c:ce:f2:ce:10:04:28:94:3e:
ae:30:16:de:ea:58:ed:bf:9c:b1:90:f0:36:ec:93:85:ec:47:
d2:44:a6:b8:fb:5b:76:6d:35:a9:98:3e:aa:dd:9e:36:af:ec:
5c:47:cf:11:6a:8c:79:7d:01:07:0a:18:a5:d3:09:04:e0:e0:
fc:2f:8e:bc:47:1c:1b:bc:31:67:3d:29:5d:94:36:3f:42:4c:
35:fd:04:aa:97:2d:af:c5:4f:ba:35:ce:93:25:c2:2e:c6:f0:
4b:c4:8e:93:48:e9:97:b5:74:d6:b6:b4:7e:ac:2f:02:39:e7:
a9:f8:8a:2c:bb:11:1d:c2:04:88:96:db:2b:5d:cb:56:a8:c0:
b3:94:75:ae:5c:32:57:4c:98:f5:48:b0:26:a2:f4:2e:3a:18:
bd:f0:2f:2e:3e:b8:da:9f:b0:52:14:d0:73:72:79:bf:4e:7e:
54:5e:1c:30:8f:47:db:76:25:05:18:5f:4a:ef:ca:d2:b3:08:
4d:fc:ea:e3:65:54:0a:a9:f4:90:d6:ce:f7:d1:80:d1:e0:26:
b4:20:58:49:b1:d4:28:a8:a9:bf:45:a4:ca:0f:f7:3b:59:a0:
96:c4:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:43 2025 by rpki-client