Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
File: H0MPwJpxOySayqdniRHo0eMjOv0.mft (raw, json)
Hash identifier: Xix8J06O9pzyxJ++d9j2Q5z6fEdkryNoVx/7hFDTH7A=
Subject key identifier: 81:F7:8F:94:D8:8B:64:87:91:95:E2:68:73:AE:4C:07:53:B8:3E:4E
Authority key identifier: 1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
Certificate issuer: /CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Certificate serial: 0196794456D207B3EE460543702BBF65635E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
Manifest number: 135B
Signing time: Sun 27 Apr 2025 22:00:43 +0000
Manifest this update: Sun 27 Apr 2025 22:00:43 +0000
Manifest next update: Mon 28 Apr 2025 22:00:43 +0000
Files and hashes: 1: H0MPwJpxOySayqdniRHo0eMjOv0.crl (hash: WMAbCiQsFKzrgLQ6h33fjoXNaVoRdThNmI3n/AuDO0I=)
2: z1mTOG8VE9-v8P-Co5yPmIlf6B0.roa (hash: qAv01E+pevkkYz421oysRUur++ptzgLO7RhPrCkAgu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:44:56:d2:07:b3:ee:46:05:43:70:2b:bf:65:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f430fc09a713b249acaa7678911e8d1e3233afd
Validity
Not Before: Apr 27 22:00:43 2025 GMT
Not After : Apr 28 22:00:43 2025 GMT
Subject: CN=81f78f94d88b64879195e26873ae4c0753b83e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:a1:3e:84:eb:3b:5e:2b:7c:e5:6d:3b:3f:
61:3b:f8:8d:18:59:74:92:44:4d:c3:08:65:97:6d:
29:45:96:fa:4f:e3:bd:0e:4c:3c:79:24:fc:0c:72:
30:49:ad:71:b7:e2:47:ea:c9:b5:45:23:11:e6:19:
80:bb:a9:39:db:b7:6a:30:ad:df:42:33:cd:6d:55:
1a:31:d5:e2:d5:8d:1e:2c:66:ae:25:e7:0d:70:2c:
cb:24:f8:7c:9b:ae:ac:71:d1:d1:45:03:0e:bd:24:
27:e3:fa:28:cb:f9:72:51:c0:70:14:2b:44:5b:3f:
44:b6:db:54:5c:c8:e5:ff:80:2b:41:fd:fa:f3:59:
e3:6b:0a:81:85:00:56:d5:36:81:11:00:a9:6a:1c:
f6:a1:0d:73:eb:d4:cb:58:0b:fc:71:5f:72:d1:4c:
e2:6d:99:22:19:0d:ed:11:2f:6b:c2:9e:c0:10:e1:
a2:96:ef:28:8c:e4:33:cb:5f:0e:e9:ac:6c:20:fa:
dc:24:c3:6c:e1:a4:0b:c4:6c:55:c0:21:49:10:a5:
0c:60:8c:52:2f:04:a1:99:76:1f:0c:d3:b1:80:86:
3a:58:dc:c9:22:6d:6c:45:34:66:ed:67:e8:3b:53:
c6:84:da:12:32:37:c1:cb:3b:61:bf:0a:b4:de:35:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:8F:94:D8:8B:64:87:91:95:E2:68:73:AE:4C:07:53:B8:3E:4E
X509v3 Authority Key Identifier:
keyid:1F:43:0F:C0:9A:71:3B:24:9A:CA:A7:67:89:11:E8:D1:E3:23:3A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0MPwJpxOySayqdniRHo0eMjOv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/26761e-7c6f-488e-a21d-be3917c5e2f7/1/H0MPwJpxOySayqdniRHo0eMjOv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:aa:9d:f3:a0:c7:e5:dd:f9:36:9e:fe:d4:f9:fe:3e:38:d3:
ca:70:ad:e4:e8:32:dd:8a:5e:02:ce:5a:a6:89:fa:39:a3:06:
d7:32:16:21:c8:86:25:a0:55:50:26:08:87:ac:3e:5c:0c:2f:
72:f6:9d:17:cd:d7:08:8d:dd:ea:03:0c:3d:68:2d:e4:59:29:
bd:75:ab:26:94:2d:32:83:f7:1a:9d:1e:3d:ea:01:b3:54:14:
90:ea:a8:f1:27:e7:6d:53:9d:71:22:5d:a5:75:fe:03:43:79:
7e:bd:8f:1d:9e:56:6d:13:41:1e:e2:4d:9f:89:e2:e7:85:b3:
76:df:a4:d9:a4:b6:50:49:d4:63:f8:0a:a6:b8:46:27:c5:49:
9d:35:b3:2e:32:bc:c0:3f:3b:65:0d:15:8e:83:31:90:6f:0a:
47:cf:08:c4:56:53:18:6e:d2:f3:b1:fb:f2:fc:28:61:a6:77:
82:d9:35:a3:18:e4:2d:4d:50:de:24:ac:31:7a:7b:86:5b:fd:
a0:57:8a:31:12:54:a2:94:9c:86:d2:02:94:7d:f5:0c:dc:45:
aa:cb:37:4d:4a:bb:d5:96:81:12:00:5c:4a:de:34:a0:8c:8a:
ac:41:43:ac:59:5f:c5:f8:a4:f9:3a:75:24:7d:31:35:e2:94:
09:f3:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:36:35 2025 by rpki-client