Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: ZttvZ5ZJB/rxu3eJKGvNuzZjjnSMsAHy94+gfVzXY1c=
Subject key identifier: CD:7D:D4:B8:BA:25:61:17:F1:C5:CD:6B:3D:DD:95:29:70:BE:A4:48
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 0196753051A828E0FEDC80C5FD8A21546074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 03:00:22 +0000
Manifest this update: Sun 27 Apr 2025 03:00:22 +0000
Manifest next update: Mon 28 Apr 2025 03:00:22 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: DMZGE2ZnynIdZfCR2+u2m2qFAOh+C1JWIP1wF5OKIRE=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:51:a8:28:e0:fe:dc:80:c5:fd:8a:21:54:60:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: Apr 27 03:00:22 2025 GMT
Not After : Apr 28 03:00:22 2025 GMT
Subject: CN=cd7dd4b8ba256117f1c5cd6b3ddd952970bea448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:51:04:e1:2b:d6:14:e2:80:c2:b9:ca:b4:
13:3c:fa:29:fa:7c:63:33:10:d5:ed:0d:6a:c7:53:
05:91:b2:71:25:00:08:bd:7f:1e:31:51:f7:83:d9:
fd:12:ab:62:de:6f:ce:c3:e7:1f:70:3a:e9:7c:0f:
22:95:92:d7:9f:db:19:1e:df:99:d2:7f:3f:ec:ef:
9c:ba:31:8e:98:cd:94:4e:d5:30:89:7c:89:12:2d:
3e:fe:08:7b:9b:e9:a7:a2:6b:34:3b:aa:8a:4f:02:
a8:2c:65:73:2a:12:f4:ad:f4:e6:7f:76:1c:29:26:
f8:2b:1d:81:d4:f4:1e:a4:2f:1e:a3:0a:20:9a:3f:
23:2e:b8:9e:85:2a:ce:0e:6c:ce:64:37:15:9c:0f:
cb:60:50:30:82:47:1b:fb:db:4d:bf:d2:68:26:92:
4e:50:54:1a:b9:2f:72:e1:b3:24:c0:8c:78:d3:d0:
52:24:17:d4:39:a3:18:34:b7:cb:04:0b:01:e6:2c:
69:0c:c4:23:74:ed:cb:53:75:ad:c9:6e:43:5d:86:
1d:6b:da:2a:fc:20:00:e2:be:f3:7e:04:0b:18:47:
1b:00:29:4d:c8:77:a8:cb:d1:0f:00:a8:da:66:7c:
91:92:ae:85:bd:85:10:b9:c7:09:f4:15:e2:72:99:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7D:D4:B8:BA:25:61:17:F1:C5:CD:6B:3D:DD:95:29:70:BE:A4:48
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:85:85:0e:8b:09:ac:be:8e:d0:c5:4a:66:8f:a8:0e:17:60:
b9:f4:21:8d:ec:e8:7f:df:8c:ca:e9:27:3c:05:ad:5b:12:1c:
7b:6a:6c:75:46:32:eb:47:6b:31:c1:d6:29:9e:e4:3b:ff:bb:
6a:6d:cc:68:65:1f:ee:30:a7:67:87:29:41:34:bd:4d:ef:84:
a1:46:7d:e9:9f:5d:da:f4:6e:e8:0c:e5:21:83:bb:5f:86:c8:
57:c2:44:36:f0:4c:b2:33:d2:44:cd:63:ad:20:e7:f8:47:fc:
1b:d7:9a:ca:a8:3e:6a:37:d6:73:14:54:6b:1c:7b:5d:bc:c3:
10:d4:19:64:cf:8c:fc:92:ba:9c:4d:33:e0:b2:16:3e:a8:a0:
27:6c:4c:ae:21:c2:dc:48:22:ae:90:e5:21:f0:0b:ec:ce:73:
99:f2:df:54:66:43:db:45:3a:57:5c:ff:62:29:9e:2a:cd:b7:
e4:cb:76:6d:bc:59:1d:38:85:7e:46:22:86:c4:4f:7d:a7:dc:
23:db:41:32:95:85:a5:0c:ca:13:f9:65:da:4c:46:44:a4:32:
22:f8:4c:9d:a2:e3:3d:e1:24:a7:a1:92:84:d1:fd:66:d6:44:
ab:fe:b3:98:6d:eb:15:8b:ea:4e:e5:2a:73:a9:02:7f:6a:b9:
eb:34:ae:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:54 2025 by rpki-client