Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: YucgU+M3gjtDcgnJhX/ufd20l3lFpelx+OM95tRnStw=
Subject key identifier: B7:C5:B3:59:FB:66:01:3A:56:4B:D7:EE:55:ED:8E:E8:3C:1F:C4:A4
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 01968359BAED7F74C54ECE1B22B14841A65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 21:00:17 +0000
Manifest this update: Tue 29 Apr 2025 21:00:17 +0000
Manifest next update: Wed 30 Apr 2025 21:00:17 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: jJNySp3Z6gzYoJnnRn8DLglMyZY76ReAguxcPze2Jg4=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:59:ba:ed:7f:74:c5:4e:ce:1b:22:b1:48:41:a6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Apr 29 21:00:17 2025 GMT
Not After : Apr 30 21:00:17 2025 GMT
Subject: CN=b7c5b359fb66013a564bd7ee55ed8ee83c1fc4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:98:c2:fc:86:15:33:e0:fc:02:f4:bf:de:
d0:6b:0a:e6:ab:57:05:5b:b8:0a:02:c5:3a:30:08:
50:8f:84:e1:ff:f7:a1:6b:11:96:0f:ac:d6:a9:02:
46:94:a1:dd:f8:73:79:95:22:47:78:41:f2:76:17:
f0:96:58:be:a3:62:8e:ec:f1:cb:2c:ca:86:ae:b7:
ee:67:9f:a2:3d:3e:67:9c:2b:77:64:c1:57:7b:16:
a1:12:c4:bc:10:e1:7c:42:71:f8:44:ba:ea:79:10:
69:85:75:35:f7:9d:93:7b:53:ed:30:90:cd:38:fd:
cb:49:ee:df:69:c4:3b:f7:23:d3:e6:cc:04:e9:3c:
93:1c:61:8d:01:05:f6:5a:3d:78:53:28:c3:4e:28:
e4:f6:6a:2c:2a:4a:d3:2d:e1:e2:50:24:b5:b9:b3:
c3:c7:34:7a:41:7e:e3:0e:2d:2f:d7:3d:5a:41:98:
20:8d:80:da:3d:25:b7:f8:f1:96:a0:c8:73:c3:b0:
fc:e5:ce:0c:a4:f0:0f:55:af:5e:36:88:78:c0:3a:
df:d6:25:6b:7b:76:1c:bf:0c:d9:bc:8c:46:10:a9:
11:55:ad:e8:27:97:bd:8b:d8:21:60:02:7f:93:3e:
0f:8b:d1:ff:49:48:4a:14:c0:5c:c0:e2:2a:d9:9e:
6d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:B3:59:FB:66:01:3A:56:4B:D7:EE:55:ED:8E:E8:3C:1F:C4:A4
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:43:96:3f:86:18:9f:92:bd:b3:77:dd:cd:f6:81:d9:3f:
e1:d0:6e:ce:05:69:a1:74:13:dd:dd:80:10:20:0b:70:c9:c7:
c4:71:0d:d1:62:e7:88:88:59:5a:5b:39:76:fc:1e:2c:a3:5c:
68:de:47:0e:01:7c:ae:71:8e:b2:e1:6c:03:50:ef:78:f4:b8:
07:79:5d:f0:68:6f:b6:d4:26:0f:f4:1c:54:8c:95:51:7c:56:
19:05:3a:93:1f:29:b2:d0:7c:3f:95:2e:31:38:db:59:45:a7:
46:45:2d:69:71:3d:7c:3e:35:e6:39:d4:ea:61:7d:07:bb:b4:
94:18:58:82:a0:76:fa:c9:06:e1:0c:d7:20:6e:dc:fc:68:92:
80:63:8b:d5:6a:44:03:d2:fc:f7:61:9f:87:2d:a6:5e:ee:7d:
dd:11:3e:24:14:24:fa:8a:ab:55:88:4b:5f:a5:30:b5:11:f0:
44:43:e1:c4:56:15:18:1e:e4:ea:15:4e:ce:50:9f:4d:0b:cb:
7c:0f:c1:40:8c:c3:62:f1:03:04:ac:58:dd:bf:07:ec:61:f4:
43:56:ed:35:21:1d:a3:ce:90:6f:35:a9:d9:d5:d2:d2:42:b8:
4c:c7:f7:3f:a7:3e:0b:37:63:7e:8b:83:10:ac:12:8c:c5:07:
d0:00:8e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:44:00 2025 by rpki-client