Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: Y/RNPvE6H02JchVAWoMiigUfgSUxA6iEvuemEJm6D94=
Subject key identifier: F2:FB:82:DC:DC:01:F7:4B:77:FD:A9:98:EB:52:62:D6:8B:0E:FB:FC
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 01968247A8EA30EF5B7944D2EED091DFA054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 094C
Signing time: Tue 29 Apr 2025 16:00:56 +0000
Manifest this update: Tue 29 Apr 2025 16:00:56 +0000
Manifest next update: Wed 30 Apr 2025 16:00:56 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: kmWRMerbK6rGiofhqUIm7TypEJs+NpbU8N7aQ6CF0Yw=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:a8:ea:30:ef:5b:79:44:d2:ee:d0:91:df:a0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Apr 29 16:00:56 2025 GMT
Not After : Apr 30 16:00:56 2025 GMT
Subject: CN=f2fb82dcdc01f74b77fda998eb5262d68b0efbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:78:4a:81:b7:47:ae:e5:61:4d:85:ef:6a:
f1:a7:1b:ba:9d:1f:79:d9:c5:83:3a:07:5c:76:23:
c9:a6:dc:e7:aa:a1:05:e5:f7:f7:1c:45:dd:fe:e8:
a1:f6:c6:8c:25:4a:7c:ab:96:07:b0:47:f2:58:9e:
97:8e:59:8f:6b:2b:d4:78:95:89:79:96:df:24:64:
8f:a7:75:48:3d:f0:61:de:46:ce:30:1f:40:f0:e0:
c5:44:d1:3d:2d:e7:a9:6d:12:0b:92:f8:2f:f8:99:
fc:f5:4a:74:11:08:8e:20:24:56:be:77:fb:f2:be:
e5:5d:a9:ee:c6:66:f9:0b:41:66:da:d5:75:71:50:
59:da:4e:72:48:32:5b:a4:c1:e8:f0:12:c9:ec:cb:
22:f9:9a:40:17:34:63:fe:69:4a:e5:0e:6b:8d:53:
c3:8c:2d:54:84:b3:87:31:19:5e:11:a7:67:79:20:
e7:ee:3c:2b:c7:dd:e5:c1:e3:c3:7c:82:9b:63:21:
50:d6:e5:a6:1b:3e:e6:88:2b:2d:d4:8d:b3:44:ff:
b7:21:80:71:38:fc:a6:48:8a:13:67:b0:85:a2:c1:
4b:b3:63:2c:4f:82:ab:1d:76:0b:9c:10:2e:e0:ca:
ee:5f:7a:06:62:e9:8c:d5:59:d2:e1:e8:ea:22:b0:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:82:DC:DC:01:F7:4B:77:FD:A9:98:EB:52:62:D6:8B:0E:FB:FC
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:67:37:cb:a8:42:18:dc:ec:2b:c7:1c:34:6e:bd:7a:10:e2:
95:0f:89:d7:b7:b0:37:61:7e:1a:a5:37:3c:94:3d:11:2b:b9:
6c:ef:0e:2b:1a:88:d6:63:93:c5:15:95:bd:cf:d8:8e:ba:27:
ca:39:5b:8c:c2:e0:b0:59:5e:fb:d6:ca:05:80:aa:d8:e5:e0:
53:02:5b:2d:36:16:58:de:db:73:20:89:ef:11:c1:03:29:0f:
95:21:e2:56:60:76:99:d5:88:a6:c4:61:0d:21:e8:32:85:93:
4a:3a:90:57:bc:82:6e:72:2d:97:f8:e5:06:91:94:a3:38:b2:
db:05:57:4a:f3:6b:92:93:cf:65:ad:ef:8a:d3:1f:c5:15:c7:
01:85:ef:62:e9:95:fe:28:16:da:63:2c:eb:0f:09:11:4f:74:
c5:01:8b:13:a9:52:0f:1e:08:4d:49:d9:48:0c:1d:09:13:08:
23:67:55:0f:1a:ba:f6:ca:4b:90:a1:df:b8:ff:e0:06:37:22:
50:47:27:f8:ee:a4:0d:e9:4f:90:5e:df:28:e2:68:37:b4:d8:
44:d5:e7:7d:3f:44:c8:1b:2f:0f:69:48:64:99:1a:72:39:20:
97:d7:76:8f:e1:68:1d:6c:73:73:29:14:ad:fa:8a:ff:09:e6:
5e:58:ce:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:53:09 2025 by rpki-client