Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
File: H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft (raw, json)
Hash identifier: Vf+qRBlY+73NWS4ZJG5Y0+A+ZFrA60uLOOm12d4RHD8=
Subject key identifier: 6B:21:CD:4D:D7:FF:17:65:E1:B6:30:AA:E2:9F:87:85:23:CA:FD:9A
Authority key identifier: 1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
Certificate issuer: /CN=1f88b5e93522b898e76f45f478443c348f57b916
Certificate serial: 01968E82A2BF57CC031690740CA238528BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
Manifest number: 052A
Signing time: Fri 02 May 2025 01:00:47 +0000
Manifest this update: Fri 02 May 2025 01:00:47 +0000
Manifest next update: Sat 03 May 2025 01:00:47 +0000
Files and hashes: 1: H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl (hash: rMK0vUy0CuOGQ9mFPnPjoIqgjxer+KSIXB7+NCnh+Dg=)
2: ZA-Fsp1hu16PQ0R45Lc7chwtPNU.roa (hash: x0oSuNUvGAEiCqtY/b9NTmD39yaJZU6JXSSkrtRMv7c=)
3: mh0Jg1BQZQFxE7soBuLLkUSUg7s.roa (hash: 3hdKu/KUGUvmqdrOu9SEX01+RMAxxDpDoIMPSPl7lAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:a2:bf:57:cc:03:16:90:74:0c:a2:38:52:8b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f88b5e93522b898e76f45f478443c348f57b916
Validity
Not Before: May 2 01:00:47 2025 GMT
Not After : May 3 01:00:47 2025 GMT
Subject: CN=6b21cd4dd7ff1765e1b630aae29f878523cafd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:70:b3:b8:be:3a:b2:ff:7a:e5:2b:29:e3:
cd:88:5f:e1:ab:ee:2f:cb:7a:81:3b:92:4c:a8:dd:
0c:1c:ed:09:2f:d4:c8:14:01:be:16:c2:49:fe:ae:
ae:08:c4:33:60:6a:46:a2:f1:7a:52:9e:31:a4:81:
4d:0c:ac:ed:03:df:91:73:cd:d1:e6:c7:e4:47:4d:
52:61:91:88:5b:be:0f:ee:14:39:2d:4d:6c:a5:84:
e2:3e:ea:45:57:39:3c:b9:34:af:76:45:6e:6e:fb:
59:68:5e:14:0e:bb:df:c3:c4:72:d5:01:4d:29:73:
07:30:a1:c4:98:50:f6:f0:c6:1e:af:c8:1f:f4:fe:
ed:db:60:88:7d:a4:c4:2f:f6:f1:6c:a6:8d:4c:d6:
24:f5:47:0c:f0:5f:16:cf:2b:79:65:1e:ec:b7:f6:
ab:8e:f1:c5:2c:34:50:2c:d0:d6:df:fe:cf:8b:08:
9f:dc:75:55:d5:74:86:0a:c7:ca:b7:16:ed:b6:12:
47:bc:73:cb:3d:70:aa:bf:b3:74:cf:ea:81:80:64:
16:fd:98:6b:b5:09:4f:39:01:f0:d8:df:07:a6:e6:
ea:14:c3:e6:58:88:61:d5:52:14:e4:a2:d0:8f:43:
3f:b4:be:cc:2b:e8:66:bf:7f:f7:f5:f3:9b:d7:c5:
fc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:CD:4D:D7:FF:17:65:E1:B6:30:AA:E2:9F:87:85:23:CA:FD:9A
X509v3 Authority Key Identifier:
keyid:1F:88:B5:E9:35:22:B8:98:E7:6F:45:F4:78:44:3C:34:8F:57:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4i16TUiuJjnb0X0eEQ8NI9XuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6a01b7-a4ed-4b71-80b6-cd392b0dedcf/1/H4i16TUiuJjnb0X0eEQ8NI9XuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:83:e5:96:34:43:6a:16:37:3a:2e:1c:1a:82:12:dd:33:13:
ff:77:fb:fb:79:75:df:b1:83:d4:b9:71:db:08:02:22:b0:d7:
6b:63:d8:f4:e4:ab:c2:b5:3e:04:bf:f9:19:40:3a:94:cd:7c:
86:ce:7f:e3:d8:83:0e:24:37:94:60:12:89:c4:f7:a1:fc:f2:
4c:1b:3a:1f:0f:5b:b3:f8:2a:98:f7:2c:ee:d5:36:53:d5:76:
31:26:b7:30:0a:34:9d:96:2b:50:54:be:4d:90:a6:74:fe:f1:
8c:27:1c:d9:c3:5a:8b:a0:84:cb:84:f5:dd:dd:5b:5e:80:2f:
4b:45:8f:f1:c2:bf:39:ba:b4:9d:fa:9c:76:fb:af:a5:30:80:
e1:90:98:d3:18:d3:a1:4a:a8:13:a9:7b:e2:9e:3b:4c:d7:77:
67:f8:df:c3:9c:95:1e:7d:57:8d:91:2c:27:be:78:b0:90:0e:
7e:4f:93:5f:69:a9:4c:de:6b:28:a0:02:b6:ab:5a:e0:9c:6f:
46:bc:7e:a2:6d:67:ae:ab:05:20:7f:05:02:0d:8a:19:b9:76:
0e:08:af:c4:53:a8:5e:1a:cb:90:70:31:59:0e:99:23:08:90:
16:80:a8:82:da:41:be:ee:21:db:40:ab:10:a7:0e:9f:98:95:
22:f5:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:26:56 2025 by rpki-client