Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
File: H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft (raw, json)
Hash identifier: 62j2LzAEyKgSbrqgS9KQwlUGpyW7jgkoY4nO6rkvpsA=
Subject key identifier: 70:78:92:A9:37:B9:B6:C0:0E:B4:82:3F:77:8A:D2:5E:AA:F4:91:D3
Authority key identifier: 1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
Certificate issuer: /CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Certificate serial: 01968F9540E241D7AFB1E502F3621CBA2F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 06:00:45 +0000
Manifest this update: Fri 02 May 2025 06:00:45 +0000
Manifest next update: Sat 03 May 2025 06:00:45 +0000
Files and hashes: 1: 1k-z_h_ZwS63SDr6uXmM3AXasE8.roa (hash: cdlAENSozIsV23f6Qzr2sxi7P2lHy2WlkfVerTdNtUQ=)
2: H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl (hash: UYJczlqKOJWSRylFV8EALGsV2y4aW9qTvoGmL6m7lp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:40:e2:41:d7:af:b1:e5:02:f3:62:1c:ba:2f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f65ccef140ff30e4d7da9bf70516a03f3cc0801
Validity
Not Before: May 2 06:00:45 2025 GMT
Not After : May 3 06:00:45 2025 GMT
Subject: CN=707892a937b9b6c00eb4823f778ad25eaaf491d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:15:68:89:fa:3f:c0:70:5d:ce:9f:5f:90:e3:
f6:ee:b2:98:5b:c4:bd:43:67:da:b7:4f:a1:e3:9d:
2a:00:b5:b1:03:8d:3d:b5:3c:3a:b5:ad:af:44:26:
25:72:dd:fa:09:2d:2a:d5:76:53:7c:5c:3a:c6:69:
38:c3:04:16:dd:70:5f:44:46:0d:f4:fb:87:2d:90:
5f:a9:4d:68:b1:23:b0:28:4a:52:0a:2a:58:45:31:
73:02:63:5b:9a:b7:33:3d:15:3d:11:a4:4c:93:12:
c5:5f:38:bf:ff:d3:7b:24:93:69:52:37:a8:66:55:
bd:0f:fb:f6:fc:5b:a4:07:c9:b5:5a:84:86:ed:7b:
4a:49:23:07:b4:0b:e6:bb:c2:59:5d:53:95:52:54:
74:c5:36:19:39:f6:f5:06:78:9d:bd:71:cb:3b:6e:
46:d7:a9:3f:87:7a:90:82:3b:68:be:53:d1:1e:73:
bb:cb:00:16:88:66:36:f5:0d:47:4c:17:9b:2a:e5:
c5:0c:c8:d2:66:9a:06:ac:75:1e:95:d6:1c:5f:22:
3c:37:1a:d8:53:1d:ac:75:2a:39:68:4a:28:0d:1d:
39:7f:9f:c9:b6:53:1c:c9:50:74:4d:a0:ea:3c:c6:
3f:52:30:dd:85:a4:b6:2b:5f:81:0f:57:15:1b:e0:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:92:A9:37:B9:B6:C0:0E:B4:82:3F:77:8A:D2:5E:AA:F4:91:D3
X509v3 Authority Key Identifier:
keyid:1F:65:CC:EF:14:0F:F3:0E:4D:7D:A9:BF:70:51:6A:03:F3:CC:08:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2XM7xQP8w5Nfam_cFFqA_PMCAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d6c592-7d7e-49ae-b1d4-40d01a76e25e/1/H2XM7xQP8w5Nfam_cFFqA_PMCAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d2:ed:ba:64:cb:75:7a:88:8f:31:c5:72:d2:41:b5:58:8f:
d7:a9:a8:33:f1:b9:0d:b7:2f:30:bd:cd:39:52:e0:2c:e0:54:
47:4a:ee:3e:fd:b6:b7:d5:3b:41:a5:ca:ce:cc:33:5a:83:fc:
a1:ed:11:2a:6c:3c:4d:33:31:b7:31:a6:9f:a1:1f:71:90:85:
84:b2:b7:99:44:78:fe:e3:68:f2:27:ce:55:0f:d3:89:c6:9b:
61:71:a2:09:d1:5d:f3:e7:50:6e:a2:2e:16:7d:75:94:32:7d:
7d:55:c1:2b:44:de:dd:88:72:00:28:97:84:d4:d5:78:45:20:
c6:98:24:82:c1:fd:1f:39:b0:13:38:74:ab:e0:16:51:36:69:
50:51:aa:71:95:29:45:18:af:c4:5c:6e:6d:cb:26:4f:76:94:
df:8a:35:5c:11:97:30:6f:ce:b2:8e:08:2d:30:b8:95:b6:47:
a8:c9:2e:02:fd:a7:71:7d:29:47:b5:7b:f9:e7:77:21:51:c7:
25:a7:12:e9:14:d5:27:fc:37:7e:48:2e:a5:bb:f6:50:d4:ce:
c1:50:d6:d6:19:72:10:8a:e4:01:fb:05:41:46:4a:f3:89:a1:
aa:54:94:39:e8:60:67:ed:a0:20:79:85:71:b0:53:8b:c1:d1:
56:ea:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:35:12 2025 by rpki-client