Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
File: H5TRopzOJhU7k0-0fC7iFnS7hcs.mft (raw, json)
Hash identifier: RL0lmn1uKK0rjY1chnEAY99YcQmSUPTAr7mGGnzXyk8=
Subject key identifier: F1:FF:3B:4E:F5:92:30:02:FC:43:39:B2:40:B9:A7:6C:24:88:4D:AA
Authority key identifier: 1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
Certificate issuer: /CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Certificate serial: 0196767A989964FA10E5A794245825FD4707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
Manifest number: 11BA
Signing time: Sun 27 Apr 2025 09:01:07 +0000
Manifest this update: Sun 27 Apr 2025 09:01:07 +0000
Manifest next update: Mon 28 Apr 2025 09:01:07 +0000
Files and hashes: 1: H5TRopzOJhU7k0-0fC7iFnS7hcs.crl (hash: WeQYb0voxC86TRCiHHvQjR/TvhVdcZy5rNpx+vygJ/w=)
2: YYH7gX5PCoeeZlfZBkDnE5fZPGw.roa (hash: UwEIySf0ujQ0bIXU2dedyQ3b/IuoBDp7UIw7LsZq4qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:98:99:64:fa:10:e5:a7:94:24:58:25:fd:47:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f94d1a29cce26153b934fb47c2ee21674bb85cb
Validity
Not Before: Apr 27 09:01:07 2025 GMT
Not After : Apr 28 09:01:07 2025 GMT
Subject: CN=f1ff3b4ef5923002fc4339b240b9a76c24884daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:c5:1b:44:51:fa:0f:86:da:06:59:90:ae:
02:e0:4e:87:26:7f:02:9a:d8:3a:3d:e3:f5:80:53:
bd:76:a4:dd:b5:ad:41:cc:60:5d:43:67:72:3c:67:
03:5e:a3:52:ec:77:25:88:fd:c4:b3:5c:5b:87:e0:
8a:84:b6:f9:a2:a6:04:f2:8e:a7:06:b8:87:e9:ad:
c7:4d:09:10:5d:1c:09:0c:b5:81:bc:6c:0d:6a:2d:
88:80:0b:9c:48:1e:02:63:2f:08:02:de:4c:db:88:
57:19:b5:88:03:28:2f:63:a6:4d:40:9d:7f:52:82:
9b:48:43:b4:f4:4b:3d:ad:7f:ce:f5:a0:d2:af:82:
36:c6:71:95:9a:f4:04:47:6b:a7:4f:b8:35:23:55:
75:a8:82:ce:78:62:d2:d0:ff:a4:28:1c:0e:62:f4:
1a:b9:02:6c:01:1b:73:4e:c8:a0:0c:6a:13:31:d0:
dd:a9:19:23:c0:0b:2d:e3:59:61:ad:6c:1e:86:68:
cd:ce:16:7e:1b:3f:2a:41:b4:c6:7c:db:30:7e:22:
71:77:b6:b3:de:ab:8a:2c:93:4c:b9:e3:89:9f:8d:
b5:88:ab:f5:8c:95:6e:27:e4:32:48:fe:cc:9e:cc:
48:34:fc:40:fb:d1:ca:dd:ca:b1:53:53:b4:69:e4:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:3B:4E:F5:92:30:02:FC:43:39:B2:40:B9:A7:6C:24:88:4D:AA
X509v3 Authority Key Identifier:
keyid:1F:94:D1:A2:9C:CE:26:15:3B:93:4F:B4:7C:2E:E2:16:74:BB:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5TRopzOJhU7k0-0fC7iFnS7hcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2cb63f-1613-459b-8115-554cabb9ad05/1/H5TRopzOJhU7k0-0fC7iFnS7hcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:9a:7d:4d:41:18:a2:12:f2:aa:cf:94:63:c2:ca:9f:41:
d8:71:14:8a:39:4a:fc:97:ba:5c:25:f2:6a:4b:1c:55:f2:68:
d3:73:d2:18:85:31:1f:6b:d7:14:53:af:c1:e1:02:ad:d2:c9:
d4:7a:1b:55:c8:3a:30:eb:d0:8b:2e:93:82:82:39:5b:b1:5a:
59:2e:89:b6:1b:0a:90:49:51:7c:a4:5f:3e:8b:d9:21:5d:cd:
ca:bd:d7:96:ea:e5:9c:c1:0d:ea:f8:41:da:22:87:59:5c:9a:
b2:a8:87:c1:5f:df:8c:1a:b9:c6:08:ed:73:81:75:e8:26:a2:
54:7e:78:12:08:a4:d2:59:2b:e2:f2:ca:7f:38:9e:3e:df:4d:
0d:4c:4c:32:31:07:2a:44:c3:d1:1b:d2:31:b9:de:7a:29:2b:
f6:9f:c3:03:81:13:e0:31:5c:ab:29:a5:25:76:4f:73:21:33:
b1:4d:65:86:8c:56:41:3d:f7:81:ce:1e:39:6e:e1:bf:af:bc:
4b:ff:62:25:b0:2f:3d:d5:3b:a8:dc:e2:14:4a:f0:8f:5c:1c:
c3:5b:6f:46:1b:39:2e:f9:df:8b:fb:15:7f:65:3c:1f:d7:54:
56:71:ab:af:f1:17:66:f0:45:05:6b:83:7b:28:65:df:75:48:
02:22:cc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:12 2025 by rpki-client