Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: ZnaifZYGET2cURRuc3Dg2J89nEc486NxFETQFKOkQcs=
Subject key identifier: EF:65:F8:17:0D:81:2A:B4:C8:F1:1A:0E:EF:FE:5E:15:21:4B:88:09
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 019680C720D9203E94A6A8CCE78EE087EE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 09:00:55 +0000
Manifest this update: Tue 29 Apr 2025 09:00:55 +0000
Manifest next update: Wed 30 Apr 2025 09:00:55 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: asQ3ZjNr6FWzyLVUHRc/OTHl0qCPoRClmkTsFlea4Tw=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c7:20:d9:20:3e:94:a6:a8:cc:e7:8e:e0:87:ee:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Apr 29 09:00:55 2025 GMT
Not After : Apr 30 09:00:55 2025 GMT
Subject: CN=ef65f8170d812ab4c8f11a0eeffe5e15214b8809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:e4:52:57:79:0d:b7:91:0f:e0:e6:bd:2d:
b2:15:39:98:af:b4:ba:5c:a9:4e:c4:8b:48:10:cb:
54:63:8e:f1:cf:fd:32:2b:0a:b2:20:71:55:2a:48:
7e:a1:8a:69:26:7a:88:0d:df:2b:15:a2:22:c6:6e:
06:c0:b8:de:84:ad:6d:66:be:08:ed:8d:56:70:47:
08:d1:db:66:c2:10:8b:13:cf:cb:80:3b:6d:34:b3:
c0:74:3a:24:54:61:84:ee:e0:bf:83:5f:6b:46:52:
e8:83:6d:ba:cb:2d:7e:2a:8e:c9:10:d3:b6:f7:92:
9f:e8:16:dd:ef:15:f7:ee:9a:0d:5e:36:a2:8d:ec:
1d:f3:06:1e:dd:00:4d:11:9b:0d:c1:5d:e4:5e:7e:
f8:b7:0f:3e:bd:4d:d8:00:70:1d:3d:ed:40:47:fe:
5c:9b:24:05:48:fa:f2:b2:0c:8b:99:ea:fa:a8:3c:
59:a3:bd:3d:8f:e2:35:33:89:2d:37:11:79:b4:e0:
69:3f:bd:9d:ff:13:55:d4:d8:49:8a:e2:1e:39:24:
47:61:cf:86:f8:93:a7:79:b3:5f:2f:9c:ca:fb:8c:
21:6d:5b:22:b7:46:9a:ca:bb:7e:e3:ca:45:09:4f:
56:d7:44:e5:24:ef:4f:d7:45:25:38:2c:8e:ce:4d:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:65:F8:17:0D:81:2A:B4:C8:F1:1A:0E:EF:FE:5E:15:21:4B:88:09
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:7c:a9:a3:fd:4b:9d:1a:63:84:01:3e:d4:4a:43:08:5d:75:
45:48:63:5d:d3:e8:d9:0d:8e:45:f8:7a:a6:8d:fe:d5:a9:34:
98:d8:72:ba:8d:8b:48:12:18:71:7e:c1:bc:74:64:bf:ae:1c:
ac:ea:d0:ac:9b:db:01:ed:50:ef:96:1a:ed:63:2d:90:75:61:
28:6d:fe:a9:bc:4d:d3:c9:67:9f:03:66:73:8e:2a:31:b4:61:
77:fc:e1:2f:6c:df:01:16:e9:d9:a7:e0:72:38:46:3d:be:5f:
5f:88:e3:0e:7a:97:33:26:73:00:75:66:72:aa:1c:62:68:b4:
67:4a:d1:99:8f:f4:75:08:60:eb:bb:8d:8c:51:7b:dc:f3:b0:
30:6e:da:c1:7f:8a:ef:34:ef:0c:ff:1b:25:77:7c:80:be:c9:
27:40:a0:9f:ca:19:6d:ba:f9:2c:2d:8d:cf:4f:93:d3:1d:60:
93:fa:8f:b6:aa:1b:d2:dc:a7:0c:03:dc:71:3c:0d:e0:ce:12:
5e:69:b2:31:ab:4d:2a:f3:69:e1:51:8d:63:5d:e2:44:6a:8a:
b3:83:eb:ba:53:a6:a0:53:ad:8e:f1:fd:4f:5e:d5:22:2b:2e:
69:eb:7f:aa:61:04:62:fe:21:8a:4d:fc:94:8f:a6:36:1f:50:
97:d2:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:55:10 2025 by rpki-client