Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File: H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier: bzb8Huf/EhVHDmUrwRoBPZd3hHhZsddv16oaG7dICuo=
Subject key identifier: 14:0F:5D:6B:6A:F8:1A:82:BF:9C:DD:D3:FA:29:7F:64:77:1C:5A:CC
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer: /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial: 019676B144F256FD28785A26EBF83B21B075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number: 0929
Signing time: Sun 27 Apr 2025 10:00:51 +0000
Manifest this update: Sun 27 Apr 2025 10:00:51 +0000
Manifest next update: Mon 28 Apr 2025 10:00:51 +0000
Files and hashes: 1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: +R1wj4W0CBrcFmeIXkgOjJGWQHBoR5PzmRJ2LclgkQM=)
2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:44:f2:56:fd:28:78:5a:26:eb:f8:3b:21:b0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Validity
Not Before: Apr 27 10:00:51 2025 GMT
Not After : Apr 28 10:00:51 2025 GMT
Subject: CN=140f5d6b6af81a82bf9cddd3fa297f64771c5acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:10:8c:4f:cf:21:77:e0:d6:10:c5:44:cd:
b2:40:c0:ec:20:69:77:5c:03:06:11:ae:a5:d6:ee:
25:86:e1:ee:af:fc:e4:13:70:9c:7b:44:1a:0f:fc:
ac:40:1f:4c:ac:7a:f6:31:b2:c2:a9:bd:cc:c3:b3:
c1:99:1c:a0:6a:c0:6b:6c:2b:86:e4:67:57:0b:91:
c3:ed:57:32:a7:60:02:1c:1a:2a:bd:4e:5a:2b:17:
40:4c:51:36:bd:3f:cb:fd:a1:dd:45:98:43:d0:cc:
1e:22:d3:1b:7e:d6:66:7f:05:96:bf:49:9c:c1:7a:
ab:31:ae:98:e7:9c:fb:76:8e:ae:18:cc:28:6d:8f:
0c:f8:43:d7:13:58:8b:45:f7:78:21:ec:ce:b6:3b:
b0:66:a1:71:4c:24:fb:f2:0f:54:e7:3a:0b:f5:99:
c8:ab:99:49:57:59:62:42:06:e8:a7:34:a7:9a:d8:
b2:7c:bc:c2:7c:bc:15:da:c0:37:32:dc:97:64:46:
82:4c:93:35:0e:4c:69:c9:73:fe:3e:fd:92:c6:a0:
28:55:b2:07:5a:65:1f:e3:25:c0:07:86:50:9d:43:
f9:75:5f:88:84:02:0d:06:8b:6e:67:e1:0c:fc:fe:
c2:bb:b5:da:e7:4d:2c:d3:fa:5d:1f:df:c1:54:22:
5b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0F:5D:6B:6A:F8:1A:82:BF:9C:DD:D3:FA:29:7F:64:77:1C:5A:CC
X509v3 Authority Key Identifier:
keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:96:1c:12:d6:b3:7f:87:1e:e8:b2:56:fa:45:71:d9:be:1d:
4c:0c:f1:da:21:2d:f1:a1:ba:c8:83:89:4c:75:2f:bf:aa:a5:
c9:4e:3f:1b:fa:63:7c:9c:85:f1:28:28:7c:20:9e:16:79:e3:
50:d5:0c:d9:68:e8:ce:b9:a5:0b:04:5e:60:91:7b:fe:46:0b:
c5:63:bd:88:36:a3:02:bf:ca:83:2d:c5:bc:38:29:79:b7:e3:
90:40:e6:2b:2d:6f:b9:0f:0a:cf:3c:09:b1:93:bd:d1:21:a4:
69:77:20:1a:dd:af:52:17:e3:78:a5:fe:fd:64:4e:f4:4d:c6:
0b:8b:46:ca:c8:d3:14:c2:cc:78:1d:eb:67:c6:e8:bd:37:1d:
ba:89:4a:08:08:fa:05:1e:27:f4:fa:56:0e:d1:a3:5b:9b:70:
93:44:6d:54:9c:3e:7c:7c:11:4a:1b:2e:d1:ae:33:ef:bb:45:
75:fd:b6:2d:2a:50:36:0f:3a:0a:3f:fa:cb:19:3c:7d:51:f0:
5c:f9:6c:ad:76:fb:0e:84:29:dd:f9:dc:3b:ea:fe:f8:af:97:
ab:47:a3:f7:e0:2d:1a:f8:55:ba:83:ca:f8:f1:1c:20:45:ea:
e1:6a:49:f7:48:91:1a:6d:e2:16:44:8a:cb:01:ba:4c:34:56:
5d:ba:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:00:20 2025 by rpki-client