Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: ICyzuGFZmJrdqz0fn4LLzUxSOX2vihfAqcxgv6fzLtg=
Subject key identifier: E5:11:97:CE:92:2D:B4:63:9A:D0:0E:C7:8D:CF:57:1B:12:78:F1:11
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 0196759E719478B9A8B5A9C88D31C10D998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 13D4
Signing time: Sun 27 Apr 2025 05:00:40 +0000
Manifest this update: Sun 27 Apr 2025 05:00:40 +0000
Manifest next update: Mon 28 Apr 2025 05:00:40 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: jWe1vXE285RyQm4dNAWk1AC/RukJpuk0MjfqGkW8NNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:71:94:78:b9:a8:b5:a9:c8:8d:31:c1:0d:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Apr 27 05:00:40 2025 GMT
Not After : Apr 28 05:00:40 2025 GMT
Subject: CN=e51197ce922db4639ad00ec78dcf571b1278f111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:40:b5:8d:c8:a8:df:d3:df:72:c6:c1:91:
c1:53:09:4c:75:da:08:55:a5:d8:69:98:08:75:17:
9b:40:55:3c:05:10:19:0b:c3:63:a5:54:16:a7:6e:
2f:42:4c:aa:5f:cc:8d:c2:f4:8e:1e:61:c0:c0:7e:
3d:ad:b8:78:8e:77:ad:b8:5a:17:e3:27:40:7c:e2:
c7:d0:39:95:ff:c9:54:c8:da:56:b3:d8:5c:6f:57:
83:ce:72:ec:5c:95:40:14:47:0c:6b:9c:d5:f2:57:
fe:41:f1:a8:75:60:65:d6:aa:ea:7b:33:a9:bb:9c:
b7:d8:e0:ba:d4:37:6b:9e:64:7f:89:d6:1b:e1:be:
a1:45:f9:a8:3a:2c:e0:4c:5c:71:c9:4a:e9:c9:81:
4f:04:90:55:db:4b:0c:21:6c:66:d8:35:3f:95:4b:
78:46:91:ac:41:ee:7f:2f:e4:9e:78:be:fd:a4:4b:
56:b7:f9:60:95:ee:02:63:29:9a:83:5c:3f:a9:15:
f9:e8:34:63:9e:f5:25:84:96:e6:81:6d:50:21:f4:
54:64:2a:aa:43:68:35:8e:e6:b2:57:70:d0:23:19:
80:74:28:ed:70:76:fe:55:1e:65:9f:d6:73:59:4a:
c5:0a:2d:7b:ca:1a:d8:84:7b:bc:76:9c:60:a4:92:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:11:97:CE:92:2D:B4:63:9A:D0:0E:C7:8D:CF:57:1B:12:78:F1:11
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:07:2f:37:fc:ee:3b:82:43:db:3e:5c:d7:14:a1:12:9f:2f:
a1:05:94:2e:22:41:26:2e:3a:74:de:e8:d7:49:72:b6:de:38:
77:07:e2:42:8b:79:35:e3:91:51:52:10:91:c1:52:1a:4b:44:
e2:21:67:0b:4b:db:ab:44:1e:f1:76:9c:ad:20:14:71:ff:ac:
44:8c:e4:43:55:5e:e8:25:78:03:a2:f6:9f:a3:68:d2:8d:87:
ec:64:f0:8d:d0:45:24:ee:ec:42:9e:42:ac:d5:9e:74:b4:15:
71:ca:c9:67:6c:cc:3c:53:9f:62:23:8c:95:b3:31:e5:ac:4c:
d8:7a:2f:e2:06:11:40:5d:bd:33:57:81:0f:fa:fe:55:20:68:
32:31:9c:52:48:b2:84:27:0c:c9:b1:be:d4:19:5f:d8:ab:87:
0d:59:bf:c4:4c:fd:a0:44:dc:94:89:88:ff:26:a8:23:49:62:
5d:1d:62:4a:1b:9c:75:bb:04:21:14:72:78:b1:fa:4a:e4:6f:
b2:48:16:95:26:43:c4:ad:64:95:6e:6f:fa:cc:a9:4e:33:aa:
59:08:58:08:33:77:04:f6:fe:38:53:c8:24:d6:2a:95:89:6b:
15:4c:b2:7b:84:26:96:17:9a:78:5e:f6:13:b9:b8:bc:c2:5f:
b3:c1:1f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:05:23 2025 by rpki-client