Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
File: H9X-9pK0wtIr3QMfq_pxELezboE.mft (raw, json)
Hash identifier: tBUJMbSs4zn4DFK9xRwGy6bxeuMBHxGPl91oXbMp/fw=
Subject key identifier: BB:8F:94:BB:1A:E1:DD:6A:C2:C5:F2:DE:06:4D:37:9A:9A:46:65:15
Authority key identifier: 1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
Certificate issuer: /CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Certificate serial: 019688492154F34E179F453A625F928389E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 20:00:16 +0000
Manifest this update: Wed 30 Apr 2025 20:00:16 +0000
Manifest next update: Thu 01 May 2025 20:00:16 +0000
Files and hashes: 1: DLMTOoacedomtvAfOo_wUgsg7ZM.roa (hash: CuMafo/kjG1kejlU1ti10/bQ5ADJP+5OLOjwOYxRNqo=)
2: H9X-9pK0wtIr3QMfq_pxELezboE.crl (hash: FFvGQ15U1GRXL5vPu311LyNKZ2Yre6C5Vuh2mVNqEhI=)
3: KySbiR-MGliV0HnEusiYoVPq_Tw.roa (hash: Tom90ESsjuLbQCudFU+oOzUxWbGr9ZgqEwEe4qv+gmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:21:54:f3:4e:17:9f:45:3a:62:5f:92:83:89:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd5fef692b4c2d22bdd031fabfa7110b7b36e81
Validity
Not Before: Apr 30 20:00:16 2025 GMT
Not After : May 1 20:00:16 2025 GMT
Subject: CN=bb8f94bb1ae1dd6ac2c5f2de064d379a9a466515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9b:b1:44:48:d1:c9:95:63:79:a4:94:22:07:
35:38:db:63:5f:e3:20:06:f7:8e:fd:96:2f:d8:6d:
7a:71:51:14:ce:25:cb:0f:95:6c:cb:fe:70:bb:42:
a3:7d:fa:f7:00:ad:4d:92:5e:74:4b:30:cd:05:20:
50:9e:8b:03:1d:54:97:3c:d8:cc:20:70:27:bf:b5:
83:f8:3a:24:80:9a:5d:55:7b:0c:76:1e:1b:dd:8c:
6c:3f:16:ea:f0:48:eb:2e:e7:9d:10:98:76:70:5d:
bb:ff:19:62:36:19:e5:e1:ef:cb:96:4b:91:07:c6:
f4:dc:e4:e8:02:0f:52:f9:79:4d:2e:47:a4:57:4d:
ef:3a:39:24:fb:d1:a9:ce:89:98:37:a0:81:7e:52:
8a:65:b4:a8:75:99:3a:58:a5:97:db:65:08:33:db:
fc:8c:98:3d:cd:c1:e0:1b:5b:45:74:8a:e7:e7:9a:
60:76:d9:a1:af:d5:65:9e:6f:c0:c0:8d:f2:6e:7b:
ea:e0:00:35:e9:32:5a:af:7a:d8:13:0d:e3:1f:0d:
36:c7:40:74:0a:30:49:4e:1a:95:ac:8f:3c:78:46:
0f:e6:8b:dd:fb:40:72:b3:ff:2c:1f:08:0f:0c:7c:
9d:7e:41:77:a0:e5:74:7e:ec:0e:13:45:4a:83:92:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8F:94:BB:1A:E1:DD:6A:C2:C5:F2:DE:06:4D:37:9A:9A:46:65:15
X509v3 Authority Key Identifier:
keyid:1F:D5:FE:F6:92:B4:C2:D2:2B:DD:03:1F:AB:FA:71:10:B7:B3:6E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H9X-9pK0wtIr3QMfq_pxELezboE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/48e1ae-90e8-4e42-af3d-5101be5dd615/1/H9X-9pK0wtIr3QMfq_pxELezboE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:50:29:58:55:d4:c0:e2:a6:b0:80:5d:73:b0:2d:02:e9:c3:
72:15:c8:4e:8c:76:a4:26:96:15:23:97:46:64:cc:45:0c:d2:
c2:2c:7b:63:5c:76:6f:8e:45:8f:4d:25:60:97:83:9d:94:aa:
59:c3:f6:a9:d4:87:e2:b7:9f:f7:0b:e1:44:5a:f3:64:e1:a8:
41:ca:d0:25:0d:85:d6:00:8a:0c:8b:fe:cc:62:11:31:b0:26:
6b:d0:bd:55:57:c2:b8:c2:93:1c:a0:4e:4c:32:03:eb:0f:39:
ae:d3:e2:e2:fe:6c:bc:16:fb:c6:f2:7a:53:55:b0:d8:f3:d6:
76:c6:18:fe:b9:1a:a4:65:9d:db:a9:c6:31:2d:6c:19:ca:59:
c8:5a:11:e3:bf:73:2f:a0:77:97:81:93:8e:09:ee:fe:3c:bd:
54:bf:fc:ad:20:d3:a5:81:44:f4:8f:5c:80:f5:62:a6:f3:b8:
8d:e2:82:71:e9:d8:a5:cc:8e:cc:e1:75:2d:6c:e8:d0:14:89:
f7:9d:8b:74:4b:d3:68:db:e8:10:cc:ca:f0:38:d3:4f:fc:30:
d5:0d:b0:a8:99:5e:20:5f:b4:20:fd:d6:3c:84:11:5f:76:c2:
1d:18:8c:24:52:33:58:c7:62:28:46:bb:e9:5a:6c:52:fa:c2:
37:5e:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:10 2025 by rpki-client