Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
File: h0HsF9wDCbE9iKZ-oi3Luyak46E.mft (raw, json)
Hash identifier: KfJJ1xTB6e+/3sey46XQgxW4bcd5YkbSO9ZPbjwtP5E=
Subject key identifier: 20:A9:14:45:16:11:8B:A8:12:DD:A2:64:27:A0:8D:B0:20:9C:1B:E6
Authority key identifier: 87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
Certificate issuer: /CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Certificate serial: 0196759E8A84B7ABFE6AB4789B418D7C33CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
Manifest number: 083B
Signing time: Sun 27 Apr 2025 05:00:46 +0000
Manifest this update: Sun 27 Apr 2025 05:00:46 +0000
Manifest next update: Mon 28 Apr 2025 05:00:46 +0000
Files and hashes: 1: cASyfuH0abUwpn-V7hmuZSIQ09c.roa (hash: U2HpSDc4zJjb5yR4FxelHkJvS6rW6HvOOx+N/+WSuMk=)
2: h0HsF9wDCbE9iKZ-oi3Luyak46E.crl (hash: eKXXjAtmzhNf5JT8I8hclT6NCAGncnNnifhTij19Ryw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:8a:84:b7:ab:fe:6a:b4:78:9b:41:8d:7c:33:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8741ec17dc0309b13d88a67ea22dcbbb26a4e3a1
Validity
Not Before: Apr 27 05:00:46 2025 GMT
Not After : Apr 28 05:00:46 2025 GMT
Subject: CN=20a9144516118ba812dda26427a08db0209c1be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:63:00:ac:dd:cb:a0:ae:28:ab:8b:c6:c3:54:
07:69:ca:40:36:78:5b:95:fa:05:d7:0d:f7:c7:12:
b6:0b:f2:90:e7:2b:d5:93:d3:0a:d9:6d:cf:16:d5:
42:be:72:c6:b7:45:e7:0d:b4:c6:ef:44:b0:65:82:
27:d4:ab:e2:e7:56:58:39:4d:2b:b1:cb:a6:ee:7d:
49:88:69:3b:6d:b7:5a:3e:c5:0c:e1:18:3d:3a:e7:
91:1e:f3:b4:58:7a:85:81:da:70:6d:a2:33:d1:d0:
21:8d:25:8d:3d:e3:74:0c:e7:7b:a4:54:f7:33:fc:
1f:5a:33:3c:c0:a9:06:0c:b6:e4:a3:05:89:07:8b:
84:f2:4b:73:d1:a1:08:4e:ce:9a:41:95:0b:0e:1a:
e4:e2:36:18:95:3a:11:90:31:b4:45:2c:e9:54:63:
69:a4:5b:18:13:94:9e:da:f3:f1:68:a0:ca:d9:33:
bd:75:f1:0f:88:68:aa:1b:71:d2:d2:be:0e:80:f8:
05:f5:3f:a6:24:36:db:7d:b6:b9:5c:7e:31:6f:13:
13:dc:f5:f6:8c:d1:17:60:0f:c3:e8:5f:d1:11:db:
a1:6a:90:26:ed:cc:5d:59:14:a5:55:ff:61:ea:aa:
3c:40:51:09:ee:ad:b3:01:3e:7f:8f:e8:ee:35:7f:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A9:14:45:16:11:8B:A8:12:DD:A2:64:27:A0:8D:B0:20:9C:1B:E6
X509v3 Authority Key Identifier:
keyid:87:41:EC:17:DC:03:09:B1:3D:88:A6:7E:A2:2D:CB:BB:26:A4:E3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0HsF9wDCbE9iKZ-oi3Luyak46E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3266f1-7c88-4f59-b566-1ac4a4007db4/1/h0HsF9wDCbE9iKZ-oi3Luyak46E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d1:c1:e4:34:34:50:a5:f6:17:4f:4e:fc:4e:11:f0:b4:38:
54:8a:38:bc:4f:1d:32:5e:39:90:b5:90:33:6c:56:20:76:2d:
8c:8a:9d:24:75:c3:69:f4:f4:dc:4b:12:84:8a:93:9f:b5:16:
c6:2d:52:cc:db:ad:11:a4:65:a7:6f:b5:02:bc:1c:34:13:79:
2b:97:9c:76:02:7a:09:06:4e:65:47:62:32:9e:1f:fa:ff:5d:
40:9a:e7:73:0f:c1:a3:17:4e:b8:c4:b1:d7:20:48:10:fc:85:
fb:c1:f4:0c:8d:42:11:42:0f:2f:26:19:d1:76:73:f7:ea:15:
0e:24:c8:5c:d7:00:2b:5f:e7:5d:c6:5d:95:2e:de:2c:eb:bd:
4f:2e:fc:d4:39:b1:ba:ca:ec:6f:32:cb:a6:e5:2d:1a:61:14:
5e:a3:c8:47:4e:1c:83:7f:c1:19:56:4d:e8:f2:e8:65:79:02:
be:c1:05:f3:28:2c:1d:82:3b:1b:9f:6c:9b:1b:f6:6f:29:b5:
90:1e:39:8c:9d:8b:a1:9b:41:ec:e5:e3:63:e6:c1:3b:e9:91:
71:22:f9:91:6a:ab:f7:df:6d:f2:56:d6:6d:fd:96:24:21:7d:
92:ea:ec:94:f4:b4:6c:30:ee:18:78:09:b3:10:0c:e8:6a:7b:
53:24:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:15 2025 by rpki-client