Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: YSU4LbImH8U4tOcJQe2aPqshx5CfEquAhRG32dK8pPM=
Subject key identifier: 9D:67:E0:7C:EA:95:A3:7C:B9:4E:B4:46:F5:22:D1:D1:2F:50:F4:2B
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 01967ED8DE588483D5322A0935D4E8766EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 080D
Signing time: Tue 29 Apr 2025 00:01:03 +0000
Manifest this update: Tue 29 Apr 2025 00:01:03 +0000
Manifest next update: Wed 30 Apr 2025 00:01:03 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: v9tWGB3LRDdkkhAE18FHG/q4JZvc4/Q0nBd+KVvMP5k=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:de:58:84:83:d5:32:2a:09:35:d4:e8:76:6e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: Apr 29 00:01:03 2025 GMT
Not After : Apr 30 00:01:03 2025 GMT
Subject: CN=9d67e07cea95a37cb94eb446f522d1d12f50f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:e7:a8:38:e7:f8:d7:35:70:d6:cc:af:39:
fd:89:ee:3b:59:d4:03:df:1e:5b:9a:28:61:60:ef:
28:a0:99:75:c1:95:07:6b:dc:a6:3a:0c:41:7f:72:
d8:9a:7f:85:2c:99:e5:7d:e9:4c:ba:7a:2d:f9:7c:
3c:87:8c:88:64:f2:8f:83:7c:15:1f:2a:8e:79:68:
7d:78:3b:7b:f6:98:29:1d:7c:c8:7a:7b:77:10:86:
f0:0c:cb:0c:49:83:39:91:0d:28:29:ba:3f:68:e3:
70:c2:de:57:94:ef:a8:08:67:0b:78:26:72:51:0b:
26:0f:5b:8f:fd:3a:97:12:f9:2f:43:38:10:94:b2:
29:8d:75:ca:48:0b:4c:66:a5:87:af:d8:e3:d2:26:
6f:25:e4:c8:a9:41:6b:5c:29:a5:5e:ab:fa:1b:e8:
0c:4b:6d:30:1c:bc:69:4a:64:c6:fb:b9:90:ce:38:
d8:1f:8d:4e:30:4e:1f:dd:83:65:78:88:a6:fb:75:
44:68:d4:ad:e3:cd:6a:49:31:b2:1c:3d:e0:ec:12:
ae:a6:06:e5:bf:51:90:1b:cc:7e:e8:76:88:77:fa:
d4:d7:f5:55:5e:1c:d4:a5:69:fd:c9:8b:bb:ee:83:
a7:56:fb:3c:76:c9:af:53:1e:55:2f:97:68:81:91:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:67:E0:7C:EA:95:A3:7C:B9:4E:B4:46:F5:22:D1:D1:2F:50:F4:2B
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bf:69:0f:35:23:a8:9f:71:ca:5a:c3:29:a6:c3:a1:6d:51:
3b:a7:bc:9b:38:c2:cf:96:31:4d:23:f5:a8:67:6b:ba:eb:27:
6c:16:68:47:14:16:5f:1e:33:ea:dd:22:97:a2:5f:77:7f:0e:
40:75:28:7b:17:c7:8e:be:eb:80:4a:c2:17:eb:8d:a6:e8:6f:
00:c2:7a:80:d0:f7:6d:1b:cf:8f:ed:2f:a6:66:21:b1:b9:c5:
8a:27:9b:f4:21:fb:9c:ef:32:5c:c3:ed:81:2c:b4:79:31:5d:
54:22:94:f1:90:31:2d:9c:60:29:1a:ef:9b:6f:01:22:01:5d:
d3:db:2d:6e:a4:8e:4e:67:9a:95:51:0e:fa:0d:3f:30:b4:1e:
8d:a1:9a:37:37:cb:2e:8e:30:0c:5a:d6:63:b6:d9:64:12:9f:
51:6b:9a:f7:a4:78:03:76:18:2e:c8:0b:32:be:03:e4:f1:21:
b7:7b:31:49:46:f7:2c:9f:ea:91:2a:f7:09:89:d6:eb:b0:d1:
af:20:f4:3c:26:b7:ab:c3:46:c4:e3:5b:a0:50:0e:0b:2b:cd:
a3:70:ea:89:67:8d:a0:9f:61:1d:32:0a:78:e5:ad:0b:4d:86:
b6:2f:c4:9c:7c:2d:0c:9f:6c:a2:40:af:74:e6:3c:83:15:20:
de:ba:27:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:18 2025 by rpki-client