Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: nnJKRC0BvAGC1hmLCYtvueR/8zPylpGu9Q6qE1eQNsY=
Subject key identifier: 50:C9:8F:C8:3F:CF:C7:BD:E6:89:D2:40:E1:51:2F:A0:8D:3B:4E:6D
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 0196808FD8EE9221110B8AF47895267C18B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 109B
Signing time: Tue 29 Apr 2025 08:00:32 +0000
Manifest this update: Tue 29 Apr 2025 08:00:32 +0000
Manifest next update: Wed 30 Apr 2025 08:00:32 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: qslZLHSsJGvVW6Q8Ushy5y8PhhMxFE6hNSRXu+jUrA4=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:d8:ee:92:21:11:0b:8a:f4:78:95:26:7c:18:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: Apr 29 08:00:32 2025 GMT
Not After : Apr 30 08:00:32 2025 GMT
Subject: CN=50c98fc83fcfc7bde689d240e1512fa08d3b4e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:5c:f7:0f:d1:e5:36:ba:14:26:7e:06:0d:
f3:01:5e:30:f6:c9:78:71:73:1d:c0:64:1a:83:50:
fe:d5:ff:71:57:aa:b5:55:b5:c8:c3:9f:55:4d:57:
df:d1:77:71:97:54:0e:4e:24:fb:e7:91:fe:b2:8d:
f3:8b:83:74:46:0f:25:57:92:cc:bc:0a:1c:1c:79:
b7:e2:1c:dd:4b:b5:e1:95:59:15:08:92:0e:87:a1:
c0:69:b6:97:73:c9:ff:27:51:fd:3c:4e:ae:a8:d0:
8e:f7:57:b6:12:51:23:60:d3:4b:c4:31:92:8c:f1:
71:83:7a:81:57:a9:4b:1e:34:e3:71:24:a1:da:3d:
92:f5:ae:c8:45:0f:28:d0:c1:5d:97:7e:ba:3b:eb:
af:02:42:55:c4:8e:ca:14:c9:95:35:40:88:fc:f7:
2b:f6:46:48:68:db:b9:45:01:f9:e3:d2:55:ed:18:
70:6c:a1:cc:61:6c:c8:01:93:5f:96:7c:66:3a:2e:
60:ea:22:83:23:b5:82:13:bb:2f:d4:fd:46:c4:5f:
81:12:cf:72:29:bc:c1:db:1c:77:66:0f:94:46:1d:
02:0f:68:03:a2:3b:e6:72:5a:56:9a:6c:0e:ed:13:
0a:ba:eb:60:cc:cb:c6:9b:26:21:59:c8:26:12:57:
32:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:8F:C8:3F:CF:C7:BD:E6:89:D2:40:E1:51:2F:A0:8D:3B:4E:6D
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:85:e5:d1:70:bb:05:8d:1d:f7:83:04:6e:7b:2d:0c:9d:c2:
13:3f:19:56:12:78:ce:b3:14:7b:46:78:6d:90:12:9c:fa:ff:
cd:bc:36:9f:35:8d:a9:b9:01:01:fd:53:a2:97:6a:06:e5:9b:
7c:9c:91:2c:05:4e:3a:54:98:4d:9e:fd:a0:9f:70:65:a1:d1:
29:5a:f5:0b:bb:b2:5b:0a:2b:56:dc:67:62:12:15:72:fc:90:
69:f3:67:8e:00:d7:86:18:04:14:f7:e5:5d:bc:9b:37:92:36:
c9:01:a4:61:c3:ae:ee:ae:f4:b2:2a:04:c1:d5:4f:15:56:cb:
06:86:0e:27:2f:0d:fb:c0:1b:f2:92:36:c2:cc:11:5d:36:4c:
1f:1d:c5:96:01:8a:98:16:66:4c:0b:68:30:14:9a:31:76:03:
bc:5b:68:98:2b:1b:4a:ba:0a:60:89:58:0f:71:24:ea:59:3b:
38:27:62:d0:4d:f3:dc:9d:fd:f3:18:ac:00:69:0f:ec:67:2b:
52:af:86:45:42:fb:03:8a:4a:69:1f:76:7c:69:bf:ce:a9:f0:
9f:07:04:44:6c:17:3a:37:73:22:06:a1:00:2e:4b:06:b6:ad:
f6:5b:52:b9:81:6b:42:36:de:b7:d8:f8:56:25:ff:83:d2:76:
53:ed:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:01:55 2025 by rpki-client