Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: lNdMx8uvuI3jD9zGePJL+uWkEX9aV1a/1Q7GZL1GGvY=
Subject key identifier: 4C:54:8F:18:35:93:39:21:DA:D1:DF:D1:D5:2F:24:9C:03:9D:63:CD
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 019673B020B04331D8ECCE2C19222CA07A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 11AC
Signing time: Sat 26 Apr 2025 20:00:44 +0000
Manifest this update: Sat 26 Apr 2025 20:00:44 +0000
Manifest next update: Sun 27 Apr 2025 20:00:44 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: NEMFT/f2I1yGF4g5SCUYQYW+2r/gJhoQ6T6ONHWrQts=)
2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:b0:20:b0:43:31:d8:ec:ce:2c:19:22:2c:a0:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: Apr 26 20:00:44 2025 GMT
Not After : Apr 27 20:00:44 2025 GMT
Subject: CN=4c548f1835933921dad1dfd1d52f249c039d63cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:2c:db:c8:d3:8a:38:32:67:05:6a:50:fd:
30:13:e4:7f:73:74:8b:53:52:81:68:dc:8f:5c:89:
1b:45:e9:c1:0f:07:21:34:a8:cd:e7:08:a5:30:01:
6e:05:64:3b:42:d8:98:59:d5:0f:41:18:a4:a2:3c:
b1:bf:0f:bb:23:13:2e:8f:f7:ff:79:ca:4b:56:b8:
19:cf:54:81:17:83:b2:db:94:38:e6:61:d1:4a:70:
96:89:bc:f0:9e:75:1a:db:85:e7:6a:35:cc:0f:2a:
1b:10:c6:96:87:01:f5:31:13:ba:66:f1:a8:e0:f0:
07:8a:d2:b7:31:93:77:6e:45:1c:ac:4d:64:ba:c9:
92:72:37:70:7b:71:7d:25:5b:2c:42:bc:16:10:9a:
4f:a4:ff:00:e8:43:f4:7d:dc:35:ff:97:89:90:23:
05:5b:a5:30:62:d3:bd:81:f4:b1:72:60:19:44:a9:
f9:74:4b:5e:d0:fd:fa:bf:2a:72:8e:aa:e7:8b:ad:
59:00:8b:f8:41:7b:0e:b1:19:36:43:21:b7:d6:2b:
e0:55:75:ef:47:57:f7:53:1c:10:ea:64:ec:26:fe:
73:ce:ba:3f:52:e3:85:30:d1:28:fd:55:7e:7f:8b:
cb:e7:c5:16:bf:d5:db:20:64:bf:a1:3a:7a:6a:fd:
8a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:54:8F:18:35:93:39:21:DA:D1:DF:D1:D5:2F:24:9C:03:9D:63:CD
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:19:d3:7c:24:b4:67:42:d1:89:fe:06:b8:74:bd:c0:26:51:
a7:67:39:91:a8:b5:1b:8c:e5:f6:73:64:31:ac:3c:68:6e:45:
2d:9e:f8:eb:66:64:b3:8d:81:95:55:58:31:e0:0e:b8:7d:e1:
81:12:e3:0c:21:21:2c:a5:f3:31:07:35:0a:a3:63:c5:0a:c6:
6c:ae:4f:06:e9:3a:9d:db:0b:fc:17:18:7f:6d:f1:25:6d:3b:
35:ce:fd:ee:51:a3:69:20:06:1d:9a:b9:11:a3:36:61:f9:6d:
8d:56:2c:b3:fa:4f:27:1f:48:52:fb:4e:72:68:4c:98:99:5b:
b8:f6:df:e8:ca:9e:4b:82:6d:0f:1c:15:22:b5:78:f1:4c:e1:
e7:9b:42:86:e5:51:3e:b7:cf:24:c5:34:55:48:ed:b9:eb:a3:
44:ee:19:c7:23:d6:0f:86:15:98:9f:82:d3:e4:f0:91:d7:bd:
6a:fb:1c:33:40:52:80:d9:2d:9a:89:47:f6:b9:53:b1:ad:95:
de:dd:01:c4:f0:18:4e:34:ac:ef:ab:18:6c:ec:3e:a2:41:ea:
57:d1:44:ed:5b:5e:a5:88:a4:f4:38:8f:a3:67:75:57:ef:d8:
2f:56:93:85:ad:14:bf:41:e0:80:a7:80:bc:3f:7f:36:05:a0:
d1:1d:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:33 2025 by rpki-client