Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: JntF7hgnWZjGQiVxhLcd0K7u0ZuEVCjDcMYNGBmiINc=
Subject key identifier: 0C:F8:94:8C:65:65:67:98:B6:36:56:D9:2F:EC:9A:A6:8B:3E:5B:04
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 019681345D9C93AC46311302ACE93C9C0F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 11:00:14 +0000
Manifest this update: Tue 29 Apr 2025 11:00:14 +0000
Manifest next update: Wed 30 Apr 2025 11:00:14 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: dEgOrA8E828bqMykoe+jzCNVKnRcv0y8Gi1eMTwZmXg=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:5d:9c:93:ac:46:31:13:02:ac:e9:3c:9c:0f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: Apr 29 11:00:14 2025 GMT
Not After : Apr 30 11:00:14 2025 GMT
Subject: CN=0cf8948c65656798b63656d92fec9aa68b3e5b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:fd:0b:bb:ff:f0:4f:4a:a5:87:94:58:79:
74:d6:13:8d:68:f8:d3:8b:4c:8e:5d:c3:3d:b4:97:
ad:2f:31:4b:45:6d:3e:b5:51:2a:1f:f6:80:5a:85:
f1:70:e9:e4:d4:77:84:0c:5e:05:a6:98:59:eb:c2:
39:4c:11:c8:df:bf:df:5d:93:62:88:fd:4d:51:b5:
e7:e3:33:09:0d:3d:26:78:59:82:c1:cb:64:5b:c9:
e4:29:96:bd:3e:db:a5:7d:d8:8f:59:a3:0e:20:de:
c3:a3:84:63:38:f7:95:c5:85:f4:65:4d:f6:95:86:
ca:93:49:87:a9:d2:88:42:8e:41:b3:9f:a1:b8:9a:
80:f9:48:08:93:cb:02:ce:f0:eb:69:e8:4e:d8:57:
5a:71:69:69:f2:d9:79:16:a2:6f:06:f8:54:7f:c2:
a1:dc:38:df:b1:43:0f:a2:c6:a3:dd:b5:c2:4a:f4:
c9:bd:61:7b:73:20:bd:1c:9f:22:1b:9a:8c:6c:3e:
49:18:8f:13:68:43:f8:24:23:e1:0c:f5:d3:28:3f:
5d:89:0f:83:f8:48:5b:49:1c:e7:04:46:b8:64:45:
a1:04:4d:e4:23:a0:d2:48:d0:3d:dd:22:42:e0:12:
e1:ff:c1:22:fd:1a:71:b9:63:c9:87:c2:90:7c:d4:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:94:8C:65:65:67:98:B6:36:56:D9:2F:EC:9A:A6:8B:3E:5B:04
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:05:9d:e7:08:27:3c:c2:d5:96:70:10:41:a5:fa:cf:74:53:
53:34:61:4c:ac:e3:69:ce:04:70:ae:56:24:18:bb:0e:d9:c5:
df:b8:8a:8f:03:69:92:70:e4:fa:c3:a8:c4:c0:a0:bc:be:02:
8b:36:83:b4:e7:88:bc:4b:9a:dc:8f:83:9a:ff:f3:21:97:62:
d6:9e:ed:85:bd:fd:8b:97:80:48:c0:ae:e4:04:67:17:cf:44:
7d:7c:36:bb:0d:38:a6:15:58:11:d2:f8:e7:fd:0a:cf:5c:a7:
a0:ac:68:e9:1f:e0:fd:41:e9:5a:42:a2:03:4a:e6:52:15:d4:
21:db:61:5f:fd:23:e7:16:60:0c:44:76:84:d2:fc:d6:c0:33:
2a:70:26:e1:71:60:e5:5f:ed:a2:02:c6:dc:22:ee:c3:66:61:
b6:20:d6:78:2a:85:70:28:3a:36:df:eb:af:9d:9c:e5:70:b9:
55:5c:e0:93:6c:31:98:65:41:b7:c3:c9:7c:7e:ff:b1:90:a7:
26:54:e1:42:10:b2:3a:48:71:70:c6:1c:03:7e:80:62:4d:61:
20:00:ad:29:3b:8f:39:1d:94:ef:fe:2d:ee:42:87:b0:e1:17:
5e:4a:93:34:21:fa:cb:5a:86:4a:7e:2c:9c:58:ac:ef:d7:99:
e9:c4:7c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:13:57 2025 by rpki-client