Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: ABy7jl+HvBWxuIn/bIig6owitU8dbcn/4n7hjQrCr6o=
Subject key identifier: 79:85:EF:4C:AE:C0:C6:F1:B1:7B:7A:02:83:3B:85:1D:2B:5D:20:0A
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 019688EE3DE6DEBC61EA5F1F2315D99DBD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 14AA
Signing time: Wed 30 Apr 2025 23:00:36 +0000
Manifest this update: Wed 30 Apr 2025 23:00:36 +0000
Manifest next update: Thu 01 May 2025 23:00:36 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: LlOccIJDjQnjq6D7bnS2mUTSGyEFOy26BB4WdFQmoOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:3d:e6:de:bc:61:ea:5f:1f:23:15:d9:9d:bd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Apr 30 23:00:36 2025 GMT
Not After : May 1 23:00:36 2025 GMT
Subject: CN=7985ef4caec0c6f1b17b7a02833b851d2b5d200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:aa:8e:c5:68:b8:45:b7:8c:04:4e:82:6c:
cc:fa:e6:74:18:cf:c3:6e:77:fe:af:0f:ce:2a:aa:
de:31:33:68:17:3f:45:5b:b6:63:d1:ba:73:0d:dc:
11:79:10:d5:82:77:df:cb:35:49:37:dd:c4:90:ef:
9f:ff:54:db:6d:b8:be:a4:0a:4f:3a:fe:4d:e7:44:
45:e9:bf:5c:6b:77:62:3a:b2:01:23:e2:3b:1f:37:
3d:0a:62:fd:3f:75:fa:44:43:bf:e0:8a:4b:a3:e7:
ed:cc:35:42:a5:c1:0d:bb:5f:42:4b:8e:d7:ed:b1:
3f:14:03:14:ce:c2:d4:25:33:a2:38:c7:08:40:2d:
bc:ac:f0:5c:68:f7:17:3a:db:ac:2c:36:07:d2:8d:
a8:ae:bf:15:39:44:84:e0:33:95:d5:eb:d7:1b:38:
95:63:bf:94:41:ce:ac:02:8e:91:56:8c:36:49:1e:
69:a5:65:3f:eb:68:e4:90:42:e6:9b:d1:63:11:52:
7d:33:62:78:97:76:00:68:c3:19:6e:02:68:ce:c3:
d2:e9:e2:21:94:03:3b:41:78:d5:e5:db:6d:2e:67:
37:46:ea:5d:34:31:d6:a8:bf:bf:5d:d9:57:42:a3:
66:d1:1e:a2:81:34:2f:a5:de:ee:5c:6d:6b:c0:b8:
07:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:85:EF:4C:AE:C0:C6:F1:B1:7B:7A:02:83:3B:85:1D:2B:5D:20:0A
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fd:77:f0:ef:ca:29:04:00:62:01:d7:ff:b5:33:03:4b:ee:
15:dc:35:7c:3a:12:e0:b4:8e:5b:01:8d:4d:f9:98:c4:22:af:
92:7d:41:f4:2d:07:0c:87:46:f3:ea:f4:5e:95:55:99:12:f1:
94:c7:81:06:f5:89:a4:30:ff:8e:24:c0:ca:b1:6e:c2:8f:23:
93:eb:81:52:60:aa:9d:c7:9a:b3:17:38:32:26:ed:f2:4d:9a:
d0:27:7d:2e:c8:20:6f:dd:db:d3:14:56:78:27:b5:18:b0:ca:
f8:5e:48:99:55:66:46:27:b7:88:af:99:2f:b5:1c:50:71:ab:
12:48:a4:26:62:76:16:a9:b2:e4:c0:85:ef:eb:9a:dc:79:d3:
ab:22:88:e2:37:c0:09:aa:a1:09:7c:59:fb:1e:42:20:fd:b8:
80:03:80:d4:d4:a0:fa:b5:2d:d2:80:6b:68:5a:df:70:4f:0a:
68:c2:ce:42:af:ec:c2:f4:9d:c7:9c:ee:32:ff:aa:04:c2:f6:
3e:95:4e:74:fe:a0:25:d2:ce:db:de:61:86:89:6b:d6:f4:c6:
95:b2:9c:0b:6d:67:43:4e:4c:52:08:f7:74:56:3b:34:65:01:
e7:43:eb:0e:b6:80:c0:b5:9b:c3:71:c1:89:de:d3:66:63:4c:
1a:b8:79:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:07:50 2025 by rpki-client