Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: nQoCdAuca+g/hD/uhziggIMepyFGYX4LXQTztCFzrZI=
Subject key identifier: CE:9E:61:EC:AD:18:4F:FC:F8:95:03:89:CB:D7:AF:EC:AE:10:89:D0
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 0196759E71E4FECE2386CD192F182182608A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 0588
Signing time: Sun 27 Apr 2025 05:00:40 +0000
Manifest this update: Sun 27 Apr 2025 05:00:40 +0000
Manifest next update: Mon 28 Apr 2025 05:00:40 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: uKbfIJfc/CwAPyF+2+5pB6pOkTGMVC6OqarAQm7jpqE=)
2: vNb5RJ1NWF9KAT0KbsLINglMmW4.roa (hash: jXTgKmQPGBZpjKgqqLkxLQhegQk4xAz/b6i4eexj5wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:71:e4:fe:ce:23:86:cd:19:2f:18:21:82:60:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: Apr 27 05:00:40 2025 GMT
Not After : Apr 28 05:00:40 2025 GMT
Subject: CN=ce9e61ecad184ffcf8950389cbd7afecae1089d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:ab:7e:1f:71:85:d8:2e:30:b5:ce:c7:99:
13:bf:97:e4:dc:6e:ba:9b:f8:32:81:0e:94:57:71:
76:a6:bb:c1:d2:bb:23:df:0d:38:60:70:6d:5c:ed:
56:61:9f:1d:36:c0:f4:4e:69:b2:24:4d:37:3e:9a:
c4:c7:94:16:1e:09:99:68:bb:cd:5b:57:bb:c2:03:
9d:f1:1b:7a:39:07:2a:c0:6e:6f:00:64:f2:ca:81:
28:e5:03:73:ac:da:73:24:7d:51:fc:01:4a:38:6c:
b1:65:a8:54:48:ad:31:8b:52:b9:25:ce:7c:bb:f8:
9d:ba:72:24:8a:0c:2e:a4:55:44:f8:c2:9a:52:e6:
8f:34:e4:c1:14:51:72:af:c9:a6:74:e9:57:87:a9:
24:cb:c0:6d:8e:34:13:3b:6a:bf:72:b9:33:3d:68:
fb:4e:47:53:a2:ab:12:fb:0f:70:47:f9:1f:56:19:
a9:8a:5d:01:9b:f0:02:06:03:2a:a7:88:60:f4:0b:
ff:da:45:8e:95:ac:e8:f2:c3:7f:7c:b1:0c:05:c3:
ad:79:45:75:b5:86:12:c8:76:cc:e8:88:6e:30:d6:
52:09:c3:4b:3d:57:bc:cb:a8:6b:91:67:4e:9c:04:
d2:3d:53:44:7f:ea:68:d2:8c:24:50:49:fc:ea:86:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9E:61:EC:AD:18:4F:FC:F8:95:03:89:CB:D7:AF:EC:AE:10:89:D0
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5d:15:a8:3f:6f:ed:ec:29:93:03:d5:60:91:93:47:a9:90:
e2:4d:31:e6:7e:53:1e:d9:99:a1:b2:3d:bd:1b:4e:2a:f7:54:
ec:ea:b0:1c:6b:8b:93:de:18:cb:6e:ec:5e:47:b6:b3:6e:be:
61:81:40:54:92:ae:03:c8:96:87:ba:4f:40:9b:36:a4:64:22:
14:fb:28:95:28:6c:e2:fd:aa:c3:07:46:70:82:0c:2b:77:26:
84:10:fa:b6:72:38:07:dd:17:db:16:7d:ba:c1:73:9f:77:73:
d3:09:23:17:a7:4c:23:36:e7:96:6b:af:98:6d:27:4d:f3:d7:
44:eb:0e:86:ce:b9:89:77:b2:82:8a:59:6b:25:07:52:80:3d:
d4:91:ee:47:b7:01:fc:7a:39:66:82:ca:8a:cc:01:c6:4c:48:
04:ac:2b:43:27:d8:53:06:1b:94:74:81:24:6e:c1:d7:34:52:
1a:1c:19:d6:6c:1e:c3:bd:d3:72:38:52:e1:56:52:16:8c:ec:
3d:a4:46:2f:f5:c1:f4:e6:57:c7:e4:91:f9:fc:0d:41:75:f2:
a8:22:8c:b2:7d:c7:26:b1:89:66:7b:bf:2e:0d:3e:84:ef:59:
49:5d:c1:35:e9:17:27:64:1e:36:fd:51:3d:d1:d7:b8:52:fc:
e9:00:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:58:09 2025 by rpki-client