Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: +gcMJS+eECzxBR2hS8/IC5eOaTJNFebDxpC1a4fISiM=
Subject key identifier: DD:16:DA:E9:4C:EE:6E:7D:C7:E2:65:6A:F0:03:71:AE:C3:83:02:F0
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 0196C9F266FC69CC3F1AED57186F552C37A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 04D8
Signing time: Tue 13 May 2025 14:00:28 +0000
Manifest this update: Tue 13 May 2025 14:00:28 +0000
Manifest next update: Wed 14 May 2025 14:00:28 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: lgLvUU0++eeMzMA51gj9Iy6Z22gT2RHpYcZ+64WgDvk=)
2: neQhSGrd27w6Xn2chZDgwEsCrLI.roa (hash: 1tkSubS/cwYJgj12QwQ+XvFzRT5l/tNW9QOj+Oo5EeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:66:fc:69:cc:3f:1a:ed:57:18:6f:55:2c:37:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: May 13 14:00:28 2025 GMT
Not After : May 14 14:00:28 2025 GMT
Subject: CN=dd16dae94cee6e7dc7e2656af00371aec38302f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d5:d0:56:f2:85:b8:d2:74:6c:9a:83:57:a2:
fc:b3:b0:4e:bd:48:7b:02:4e:d6:aa:f3:9a:29:a4:
ed:9e:78:cd:51:09:9f:d7:86:97:87:27:68:78:43:
1c:75:e3:43:a2:bf:e1:f9:2a:03:cc:5a:d6:a8:c3:
a4:e3:c6:1d:e9:4f:0d:c8:5b:b9:71:dd:25:5b:d7:
d2:4a:35:4a:a6:e9:19:5d:04:6e:b0:7a:c0:45:56:
54:70:2f:ea:91:b2:4a:9e:3c:f7:57:0d:9a:d0:9d:
00:da:cc:03:7e:18:19:b0:e4:45:5c:16:99:3e:fb:
62:03:49:e2:d8:d1:17:91:38:c7:76:08:a1:fe:4f:
9d:52:2f:68:a0:1b:80:f8:93:fb:bb:b3:1a:32:5b:
aa:f9:59:7b:5c:91:50:d1:6f:8c:33:25:28:bb:5a:
b3:0f:7f:cc:5d:d4:3e:d5:16:67:1b:96:8d:70:26:
ce:ed:74:3a:8b:88:8b:cd:8f:2b:71:e7:73:5b:13:
96:4d:13:a6:a7:fd:92:04:a0:fb:ff:12:aa:fc:ac:
ac:e0:c6:71:f3:07:dc:3e:96:66:8e:31:a9:a5:5c:
4f:16:89:50:2e:b9:35:a9:84:dc:ae:bf:db:f2:d7:
3f:a6:ac:04:fe:58:61:04:87:e0:9a:8b:19:60:57:
ea:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:16:DA:E9:4C:EE:6E:7D:C7:E2:65:6A:F0:03:71:AE:C3:83:02:F0
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:f3:9d:32:23:3d:75:51:be:42:67:26:16:21:22:b1:cb:
25:05:7a:db:37:74:78:5e:b0:5e:d0:0e:d8:ad:04:30:57:26:
78:26:e4:f2:83:5e:af:07:df:f8:56:8e:65:04:51:0d:d7:f2:
c5:ca:5b:5d:2a:75:a7:74:13:ff:9f:af:65:58:2d:a6:1e:5b:
b7:dc:85:de:10:28:14:63:44:42:6d:b9:a6:1c:48:e6:a5:72:
76:c2:a4:c8:52:69:b2:fd:21:94:23:e2:6f:c6:40:6e:db:5c:
12:17:1c:9f:ba:27:36:8c:55:5e:02:2a:01:4f:6e:d0:bf:bb:
f3:4f:b5:d9:25:f5:7b:34:de:ce:d9:0b:1f:7b:1d:e2:bc:13:
fb:52:c2:7f:92:0e:56:fc:be:2b:34:a2:e3:27:b2:cd:cb:cf:
16:e6:4e:f0:b5:e8:9b:fc:ed:20:ac:1b:7d:22:39:46:91:6e:
75:34:f8:41:b2:4e:4c:dc:5c:1b:1c:49:6b:1b:61:c2:25:53:
ab:08:e9:09:ed:97:a3:c7:a9:f0:de:84:2b:4a:e8:be:68:d6:
2c:22:58:8a:d3:9e:d7:d6:5e:90:ac:ce:1d:13:db:c4:54:e8:
bd:47:da:e8:75:be:89:9a:35:a7:0f:7f:9c:20:3c:e6:e5:1e:
46:8d:56:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:06:45 2025 by rpki-client