Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier: 8whMB87y11NVkXsb6eh9uwHqCysg1laib9herMdrOrc=
Subject key identifier: 13:04:E4:11:F3:95:E1:68:50:16:49:41:B7:46:F0:38:B4:1A:65:2C
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial: 0196730B041C2002AFBDB9A82CC155AB80D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number: 03D5
Signing time: Sat 26 Apr 2025 17:00:23 +0000
Manifest this update: Sat 26 Apr 2025 17:00:23 +0000
Manifest next update: Sun 27 Apr 2025 17:00:23 +0000
Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: JSC3rpH6LV+WLCkNuqHydYydEBjOYA3mdBXakzUfuLI=)
2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=)
3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=)
4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:04:1c:20:02:af:bd:b9:a8:2c:c1:55:ab:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Validity
Not Before: Apr 26 17:00:23 2025 GMT
Not After : Apr 27 17:00:23 2025 GMT
Subject: CN=1304e411f395e16850164941b746f038b41a652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:80:d2:40:bf:c5:7c:1c:d1:2b:08:f7:2c:
d8:d4:d5:b1:eb:91:6b:4a:c5:95:7a:29:fe:c3:67:
fc:51:09:f5:53:48:77:ab:5b:02:50:20:5a:9a:03:
cf:f7:f3:28:30:b0:c9:b7:22:2a:dc:59:91:10:b5:
37:b5:b3:0b:e9:4a:51:44:5e:ae:dd:1d:6b:01:8f:
c8:94:d7:e6:80:db:6d:0c:33:52:e1:27:80:d2:b3:
af:0a:1c:c8:35:4b:5f:c2:cf:88:a4:b6:ee:dd:04:
f4:a2:0a:42:2c:5c:f1:ce:60:c5:cb:68:9d:c8:15:
30:25:bf:60:d3:3f:c0:8e:0f:bb:ae:cc:2e:5b:f7:
90:cb:17:fb:33:f9:6e:35:73:33:7a:a7:7f:87:a4:
92:28:91:18:e1:a7:bf:a0:cc:c9:b5:e6:be:b5:6d:
9d:23:11:7c:a7:05:6f:9f:58:40:99:58:86:25:ab:
04:1f:f8:65:7e:8e:1f:07:c9:1e:8c:47:8e:23:3c:
eb:d0:e0:99:ad:99:5a:8b:76:8d:73:e5:5e:d5:b2:
f4:1b:bc:4e:92:7d:95:0b:37:ee:fd:19:00:a4:4b:
68:a6:80:d6:18:c6:11:db:4f:19:17:39:55:dc:7e:
1b:25:72:d7:2e:54:e8:ec:dc:eb:98:8e:c5:c1:d0:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:E4:11:F3:95:E1:68:50:16:49:41:B7:46:F0:38:B4:1A:65:2C
X509v3 Authority Key Identifier:
keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:59:a7:ed:93:39:e5:8e:ad:30:36:47:7d:2d:02:a5:cd:49:
e4:d9:dd:64:e9:64:5d:f3:86:0f:b6:b6:82:84:46:c7:e4:39:
ce:be:2f:a8:02:b8:a2:6b:1f:06:ff:12:11:33:29:ba:01:b7:
c7:e4:50:1f:c4:6f:02:57:36:97:d7:f1:15:6a:83:73:39:2a:
5d:05:ec:09:2c:2b:97:f7:42:1e:3f:3d:35:c0:c7:22:27:73:
00:c2:15:05:9d:98:ce:5c:63:64:f4:60:73:0e:cb:a0:c7:99:
04:b2:22:9e:29:bf:19:e1:2a:36:c5:6e:e6:c2:f4:58:2b:39:
d4:9e:78:d7:b4:d6:dd:40:01:ec:61:fd:35:5d:db:f2:0f:26:
ad:e6:84:2e:d0:0f:90:a2:87:7d:45:70:d3:9a:f6:b5:79:bd:
49:1a:a7:38:2f:78:b2:bb:9a:99:a2:3d:4e:37:c4:d2:92:ec:
c3:9a:0e:90:2b:5b:cc:75:29:fc:62:7c:5e:cc:c2:e0:18:61:
35:ab:e3:45:53:65:87:e4:9e:de:bf:2f:7d:e6:61:84:be:f9:
7a:3f:4e:fa:c5:c1:d1:b9:cb:07:14:ee:3a:48:6c:3d:2d:22:
9f:67:84:62:c0:cc:22:6c:af:40:68:ec:fa:98:d5:ca:d9:9f:
8e:32:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:08 2025 by rpki-client