Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
File: Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft (raw, json)
Hash identifier: 94GziR+Tu9b7BfBcFt3JkwwCpAmBq9Gws+d2ZFLVC9Y=
Subject key identifier: 6C:CC:EF:A6:C1:0D:6B:5F:29:3D:20:0E:E3:03:1A:40:E9:EE:53:DA
Authority key identifier: 1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
Certificate issuer: /CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Certificate serial: 01967DFCC5700BDAC5D1B28CC1361FC40DEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
Manifest number: 0751
Signing time: Mon 28 Apr 2025 20:00:39 +0000
Manifest this update: Mon 28 Apr 2025 20:00:39 +0000
Manifest next update: Tue 29 Apr 2025 20:00:39 +0000
Files and hashes: 1: Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl (hash: yERxfqJyse5G4ap2IhuUF4NOO4e7DfR9T99aZQOUhcQ=)
2: tNV0WLevvOhvE4Dz0Ty7ZfGL67s.roa (hash: gW+2wImKwe5IWbdJKawQnrwYg8cWQ3fvjIqklFDzDgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:c5:70:0b:da:c5:d1:b2:8c:c1:36:1f:c4:0d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f3e3bf560da0b12618b027aaca61fac78d5ff5c
Validity
Not Before: Apr 28 20:00:39 2025 GMT
Not After : Apr 29 20:00:39 2025 GMT
Subject: CN=6cccefa6c10d6b5f293d200ee3031a40e9ee53da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:8b:f2:83:73:bf:26:8c:12:93:5e:d8:ae:
92:ec:3f:bb:8a:1f:72:a0:57:d6:77:fe:1e:e6:f1:
0f:d7:ed:64:4f:aa:2b:a8:ba:82:cf:50:0b:09:fe:
fb:c1:50:54:0e:c1:92:2a:06:4d:aa:c4:ba:3d:84:
55:24:62:24:11:fd:5a:8a:32:cc:0d:fb:02:68:1a:
d2:19:63:9d:8b:d2:4b:2e:0a:5c:f2:09:05:e1:32:
86:79:da:66:67:e7:b5:24:d6:b6:5f:8e:bf:43:0c:
be:59:11:6d:1e:e7:0a:e0:23:ba:28:3d:a8:77:0c:
ce:ee:39:84:b9:6a:45:a9:23:02:fb:63:49:7a:9a:
a0:27:cc:dc:27:c8:df:f7:42:eb:65:84:d4:64:31:
d1:e9:10:78:a3:8c:3d:5c:2c:93:0b:45:ee:93:ea:
89:48:96:04:ce:af:21:8d:8c:7c:d0:29:ed:5e:d7:
53:e4:9d:05:d6:e9:c3:df:1d:95:db:63:33:b8:a4:
dd:c6:a6:da:5f:65:28:43:21:c8:9a:72:80:35:d6:
fc:61:69:d4:42:d4:88:c3:0b:9b:bc:e7:27:d0:67:
4e:c0:15:90:d5:ec:25:27:47:3c:69:d3:fc:13:47:
fe:0e:be:48:de:51:c7:bc:b4:b8:b7:d3:35:6e:a7:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CC:EF:A6:C1:0D:6B:5F:29:3D:20:0E:E3:03:1A:40:E9:EE:53:DA
X509v3 Authority Key Identifier:
keyid:1F:3E:3B:F5:60:DA:0B:12:61:8B:02:7A:AC:A6:1F:AC:78:D5:FF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hz479WDaCxJhiwJ6rKYfrHjV_1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/5db0a8-b8e7-4f44-b03a-ea5731684917/1/Hz479WDaCxJhiwJ6rKYfrHjV_1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fe:9b:66:59:4c:ca:bf:c5:51:c8:bc:74:97:4e:dc:f4:79:
15:08:48:06:f3:60:86:89:ed:62:b7:cc:0d:58:09:48:21:e2:
0f:22:86:64:2c:46:8b:33:36:77:75:dc:ec:72:97:c1:ca:00:
52:1a:ae:2f:ff:a7:f7:22:2c:00:41:f9:b2:a2:da:5e:36:0a:
1b:68:b6:e4:56:c9:3f:51:e9:a3:0d:74:46:31:23:8c:73:7c:
1d:66:cb:fa:ba:ca:a5:32:8e:ba:8e:61:1c:f8:6e:2e:c5:3b:
8e:fd:82:3d:79:7d:5e:fb:aa:4b:30:c0:74:18:cd:d6:fc:ed:
d8:8d:76:63:dc:3d:42:e6:3a:f4:b8:6f:73:66:84:4e:3d:4b:
b0:2b:d6:dc:1b:42:19:c1:f9:d8:2b:74:59:09:3b:c5:9a:35:
11:28:b8:2e:0d:e7:ff:86:1e:32:b3:44:7c:db:96:b0:80:e7:
e1:94:ff:48:74:49:0f:2b:ce:b9:6d:79:f6:8a:67:74:36:65:
56:4a:8a:c6:c7:12:50:2f:bc:03:8d:91:b6:f9:5f:38:24:20:
74:ca:89:2f:43:f6:a9:1f:0a:55:47:74:c0:6c:db:ee:17:a5:
77:74:83:b6:93:23:ec:58:c2:77:6a:87:03:bc:29:a7:a9:a4:
9d:b0:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:23 2025 by rpki-client