Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
File: H8jtRm3i5spZZNHu0PJA3dJR3kg.mft (raw, json)
Hash identifier: k1sDn2RIZX1iHmD4DNI+fYfW95hxudKb4jseo/tQ95g=
Subject key identifier: C8:07:2B:73:27:F2:45:E5:28:8D:16:A0:62:01:EE:F3:1F:31:0F:81
Authority key identifier: 1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
Certificate issuer: /CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Certificate serial: 01969785A6D9B3DCAAA75AB92C4336080192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
Manifest number: 1477
Signing time: Sat 03 May 2025 19:00:40 +0000
Manifest this update: Sat 03 May 2025 19:00:40 +0000
Manifest next update: Sun 04 May 2025 19:00:40 +0000
Files and hashes: 1: H8jtRm3i5spZZNHu0PJA3dJR3kg.crl (hash: G/xyb1Az3ID4E0RuAYypGo4r3Jxfb2XrzOzuSaXZmfI=)
2: nevmretTwrxwqsKKQjHFsjVUEY0.roa (hash: fWFJu1Hs2S96Xtm1+v7RRTX9W7ZYHV7fdQSuyQbPzQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:97:85:a6:d9:b3:dc:aa:a7:5a:b9:2c:43:36:08:01:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc8ed466de2e6ca5964d1eed0f240ddd251de48
Validity
Not Before: May 3 19:00:40 2025 GMT
Not After : May 4 19:00:40 2025 GMT
Subject: CN=c8072b7327f245e5288d16a06201eef31f310f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6e:fa:27:4d:20:f8:68:b7:68:50:d0:98:5f:
e2:6e:f7:38:01:d3:08:35:b3:32:90:7a:14:05:f9:
08:d2:45:88:9d:eb:99:4e:1a:ec:45:4f:30:ed:eb:
54:3a:2c:1b:0a:36:b4:4c:73:c4:5e:8a:47:b0:ed:
87:3c:9b:91:07:cc:41:06:de:b4:d6:83:2d:a6:41:
1d:0c:61:c8:32:a5:35:f7:d4:fc:f7:3c:84:24:bc:
29:f7:74:19:3a:3e:7f:69:9d:ff:b3:74:07:22:b1:
db:41:9e:99:a5:b1:97:71:6a:44:07:82:95:38:bf:
43:41:6a:b3:92:59:86:9c:4e:95:5f:58:d9:11:8f:
6c:fd:9c:12:0f:37:2a:09:ae:fd:32:45:cf:f8:e8:
d2:f7:9d:6b:f2:a0:6f:fd:29:99:0f:8a:75:d5:ca:
fb:c6:14:4c:34:79:e2:68:98:b3:60:00:ff:7e:9c:
8b:26:28:b8:f6:44:e4:50:03:8b:fc:d5:9d:a6:27:
3c:77:29:40:02:42:87:e4:17:62:cb:5f:72:d1:f7:
8e:f8:97:93:48:4f:a2:ca:f8:4d:1f:bb:ad:c3:31:
2f:af:9d:b9:04:c2:e5:cb:1d:e3:80:4b:4f:58:6b:
cf:ca:07:8a:41:92:fd:06:64:87:93:ba:69:5a:7e:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:07:2B:73:27:F2:45:E5:28:8D:16:A0:62:01:EE:F3:1F:31:0F:81
X509v3 Authority Key Identifier:
keyid:1F:C8:ED:46:6D:E2:E6:CA:59:64:D1:EE:D0:F2:40:DD:D2:51:DE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8jtRm3i5spZZNHu0PJA3dJR3kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ca2ace-94ad-44cb-9809-f48d4babd50f/1/H8jtRm3i5spZZNHu0PJA3dJR3kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1b:e0:75:f0:07:8a:5a:1f:91:2f:92:f4:61:60:a6:e5:fd:
b4:58:59:e9:2d:0c:86:2c:50:96:4a:f4:64:99:31:ab:1c:b5:
62:9e:25:90:f6:00:28:8e:d5:df:de:9a:a2:a9:57:b9:58:ad:
2b:44:9c:0f:7d:f8:d0:c6:3d:d5:54:b1:19:6c:b1:69:86:fd:
9e:ff:84:10:f0:bf:61:9e:fc:64:4f:e0:42:cd:10:f9:bd:b8:
c7:c9:94:14:e6:a7:f3:5b:e5:c5:22:31:dc:7c:72:69:40:84:
8c:9c:8e:0a:d0:84:cd:a7:c2:08:6e:d0:48:cd:34:8e:eb:91:
46:f7:ee:f5:54:fa:3f:cb:5b:59:73:35:d1:09:cb:a2:a0:20:
0d:62:1b:9f:e1:d6:5f:03:a3:9d:e8:45:37:5f:cc:24:e4:9b:
2e:cf:f4:c7:a7:ed:f1:73:ae:7e:82:ff:51:48:0d:74:ed:9c:
68:6e:0c:5f:9e:f8:6e:41:e7:25:3a:30:28:83:72:52:63:70:
e9:0e:a3:d2:15:3a:cb:00:49:17:a0:02:65:ad:9e:30:f4:6c:
67:11:00:3c:9f:92:32:47:a2:1d:49:9f:c0:08:8f:96:1c:01:
67:87:30:ec:ff:cc:66:9e:a1:0e:21:f8:24:c3:2d:1f:a6:42:
1f:6a:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:57:47 2025 by rpki-client