Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: bx8GTlacyO3ssT6Wva6koNroF53WYKYVSwMj1CMM0os=
Subject key identifier: 8B:69:39:22:90:94:E8:51:E7:D6:A3:B5:69:DC:6E:9A:F2:32:1C:11
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 01968691A166E02FFC73F1030F1A5D01293C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 12:00:13 +0000
Manifest this update: Wed 30 Apr 2025 12:00:13 +0000
Manifest next update: Thu 01 May 2025 12:00:13 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: XWaEf7WW2XSODueSjtvVXjfR6P/Xns5o3uxEltGYLaE=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:a1:66:e0:2f:fc:73:f1:03:0f:1a:5d:01:29:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Apr 30 12:00:13 2025 GMT
Not After : May 1 12:00:13 2025 GMT
Subject: CN=8b6939229094e851e7d6a3b569dc6e9af2321c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:de:d9:c6:ea:87:50:17:d9:2e:76:ec:12:59:
15:85:27:5f:02:49:e5:a3:91:b0:a7:ce:be:87:94:
de:02:ce:39:69:cf:40:f6:bb:78:69:c7:b2:fc:21:
d2:a2:f5:fb:f5:c5:69:6d:a5:1d:c2:2f:f1:d8:ab:
dc:08:dc:31:7d:ca:c3:19:33:11:27:18:47:6e:8c:
b7:ce:ad:21:ce:03:f3:11:5c:68:86:47:59:d5:84:
27:40:b9:fd:ad:66:d1:97:d9:1e:92:ed:87:fc:9d:
47:f4:4e:dc:30:e1:9b:f0:78:fc:32:a6:2f:58:9e:
20:e7:96:49:c8:a4:72:34:68:b4:a5:92:35:62:e8:
12:2a:64:7a:ac:44:ef:be:9d:c9:a9:7a:ad:33:b0:
8f:c0:4f:db:22:d9:e2:e6:77:b1:68:5c:60:04:68:
92:69:7c:23:fd:1b:d1:87:87:ab:a4:a8:76:03:1b:
db:41:ba:b6:e4:35:c0:bf:90:ad:3e:92:b5:a2:ed:
83:72:68:b9:f8:a0:98:7e:38:9f:20:9b:68:b0:d5:
84:66:38:e0:c2:54:45:e5:58:ca:7f:d2:a7:e9:3e:
56:a2:48:10:80:b5:3e:8e:6e:3d:51:dd:6a:65:b2:
47:5d:97:a2:79:bb:44:bd:e9:fd:06:8d:46:51:a9:
c7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:69:39:22:90:94:E8:51:E7:D6:A3:B5:69:DC:6E:9A:F2:32:1C:11
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:47:8a:71:68:7b:e0:41:70:50:41:c6:4c:ca:54:91:e7:fd:
ca:17:9b:e7:9c:3a:7f:ad:0d:f1:9e:bb:bc:92:82:b8:94:64:
0d:64:10:71:47:29:2e:eb:4f:15:60:b1:f0:aa:e0:4a:15:1b:
97:fe:7e:96:b9:5e:11:d9:2b:a5:0f:56:53:aa:31:4c:3c:48:
c1:94:ec:76:c1:55:33:3b:99:3d:a9:5d:e8:6b:d5:9c:47:bc:
56:d0:ce:46:92:00:18:a9:54:55:c8:b1:d7:00:67:8f:db:e6:
bd:71:a0:f8:41:a9:9f:31:09:37:aa:1c:4c:ca:f6:e9:e7:07:
74:d0:12:15:40:a9:58:08:d9:e4:f6:69:87:0b:c6:46:05:2a:
2f:cd:84:53:c0:c9:5b:b3:6f:f6:b9:a4:e9:53:af:38:3c:3d:
6b:53:f7:59:c7:12:80:2c:a1:c3:ac:44:6b:36:99:44:e0:3a:
89:5b:3a:d7:0d:54:c4:ae:1c:89:ae:d6:3b:2b:ee:24:9c:20:
d6:b4:20:28:0e:88:62:56:12:28:d9:f6:f0:9f:af:f0:3d:c4:
e1:b4:e9:8d:46:46:0d:e7:b7:a5:46:63:f5:1d:94:0d:e1:12:
3f:b7:ce:35:e7:cc:03:b3:dc:8c:cc:ff:43:7c:f0:5e:2e:ca:
95:b7:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:22 2025 by rpki-client