Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: exzFUypll7aYVPIibBxayMv4uSwWWHhJqR544uAZK3c=
Subject key identifier: 30:2D:A5:F2:AD:77:CF:CC:04:9D:34:C1:79:8F:EA:FE:7D:01:C8:C9
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 01967DFC6D6A5FBB3075A0375E32EAF32CF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 043B
Signing time: Mon 28 Apr 2025 20:00:17 +0000
Manifest this update: Mon 28 Apr 2025 20:00:17 +0000
Manifest next update: Tue 29 Apr 2025 20:00:17 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: 5+yUElJRKxX/GLzQjUU993wk32YusoK9qdC6cHxE/74=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:6d:6a:5f:bb:30:75:a0:37:5e:32:ea:f3:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Apr 28 20:00:17 2025 GMT
Not After : Apr 29 20:00:17 2025 GMT
Subject: CN=302da5f2ad77cfcc049d34c1798feafe7d01c8c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:fc:0a:f6:6b:68:f9:a9:0f:7e:df:38:37:
c9:dd:d4:97:ab:0f:41:12:2e:aa:f5:fd:d4:6e:3f:
9a:02:b0:7c:b7:6b:cd:e5:2c:29:69:5d:4b:68:ca:
30:75:28:4f:8a:0e:8c:eb:af:8a:e9:a0:43:20:8c:
41:21:1f:97:47:b5:4a:b9:f2:6f:94:cd:26:bc:22:
4b:d1:1e:f5:28:ce:75:d2:76:7c:f4:f3:70:1e:24:
38:27:b5:1d:cb:b9:1a:63:a2:01:5d:5f:6f:5a:3a:
fd:d3:cd:1e:0a:cb:43:1d:6b:a7:5c:84:d8:13:5d:
44:50:66:ae:d3:17:98:09:f8:12:0d:5e:5c:dc:74:
f2:86:c2:76:30:4b:fd:f2:70:91:a5:c6:a9:ea:7d:
fe:63:57:9b:ba:cf:20:c4:e0:2b:94:67:bb:39:7f:
04:0e:68:5b:91:ef:3b:19:99:fc:5e:3f:12:2a:01:
91:79:c9:0c:43:26:ea:45:92:1f:48:4f:08:9b:76:
3f:22:8e:96:15:64:78:79:0e:16:bc:89:eb:d5:b0:
84:81:09:5b:57:af:0d:fb:d8:66:b3:c2:cd:55:f6:
57:d3:28:4f:88:07:30:65:08:03:b1:c1:6b:a7:ff:
ab:22:de:26:dc:07:12:a4:6f:27:5e:aa:7f:4f:03:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2D:A5:F2:AD:77:CF:CC:04:9D:34:C1:79:8F:EA:FE:7D:01:C8:C9
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:23:9e:8c:46:a9:bc:60:18:80:fa:da:e7:2f:87:d2:05:bd:
63:0b:d3:40:ff:98:98:a7:e0:ee:49:2c:9e:26:35:38:db:b1:
be:74:c1:05:49:32:b7:e2:fe:21:23:c6:28:ea:5c:68:9d:8d:
b6:73:07:7b:8c:a7:a6:98:32:7f:66:41:64:be:08:54:23:9e:
27:5a:95:9c:6a:33:6e:04:3a:8d:9d:ad:6b:ac:df:9f:72:fd:
a4:b9:5b:01:ad:d6:85:08:8f:59:34:4e:02:3b:0a:32:c8:df:
7b:ed:a6:bb:f0:64:f0:0c:62:01:8f:7c:95:10:43:84:ac:64:
be:67:3e:b4:99:e5:e9:31:e3:98:82:5f:06:81:9f:a6:f8:78:
10:85:9d:33:0d:97:5c:69:51:4a:ce:21:22:2a:dd:0f:34:5c:
d2:d0:d6:6c:9f:98:6d:bd:f7:43:32:63:1f:d0:92:5b:2e:7b:
34:ff:f8:08:07:a6:0c:18:dc:ef:ad:1c:11:2f:e2:6e:9d:3b:
57:27:4c:5a:03:1b:a5:a1:54:6d:71:d2:ea:ce:b5:04:39:cd:
43:7a:70:fc:02:70:99:70:2a:d3:e7:e2:db:06:72:80:ba:76:
7a:47:fd:78:33:88:77:85:f1:da:74:b8:77:16:12:34:d5:a8:
db:43:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:15:03 2025 by rpki-client