Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
File: h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft (raw, json)
Hash identifier: FKu+KGjlMndpmTBnAmUVmMuuuvXBNigekrRhMOrDmfs=
Subject key identifier: 9D:16:58:87:E8:8D:D3:82:AF:B4:91:81:C5:74:CD:6C:A5:2F:1B:62
Authority key identifier: 87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
Certificate issuer: /CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Certificate serial: 0196BE25C185375FFC20DA1FEB6A7797902F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
Manifest number: 10E1
Signing time: Sun 11 May 2025 07:01:07 +0000
Manifest this update: Sun 11 May 2025 07:01:07 +0000
Manifest next update: Mon 12 May 2025 07:01:07 +0000
Files and hashes: 1: EqmxfEPR61JZ1PILd4aiLsGlGKg.roa (hash: o+GN8e0CITe+H1MxoXkf/yVp/P7VliN/bKmtLSSdiwk=)
2: h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl (hash: jkgAMudyBcSRrQaKcb+I0WcqL+ACNWZJw+t6O0hDuTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:c1:85:37:5f:fc:20:da:1f:eb:6a:77:97:90:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f45e3a4069d4f5ebd5f6e6421d8d3cabe30921
Validity
Not Before: May 11 07:01:07 2025 GMT
Not After : May 12 07:01:07 2025 GMT
Subject: CN=9d165887e88dd382afb49181c574cd6ca52f1b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:0a:43:18:a7:f5:d7:42:08:6c:9a:0d:57:
28:17:bc:aa:91:91:8d:09:a2:37:6e:e0:42:bd:f6:
30:58:04:74:b4:b4:92:b1:fc:ef:35:b4:84:c9:f6:
df:b1:70:9e:d9:fa:e2:ba:56:1a:39:09:87:6d:40:
87:8c:9c:07:61:b3:7e:9c:1e:a2:21:9b:96:e7:ad:
71:ac:2d:44:db:df:63:c9:d4:c7:35:c9:33:91:90:
72:aa:a1:51:17:22:7d:41:6f:b6:5a:a2:d4:e7:2b:
b6:cf:1f:ad:5e:eb:5d:23:90:2b:c1:d6:9c:58:dd:
85:fb:8b:82:0f:35:d6:61:b1:fc:1f:46:b6:6c:ed:
61:b2:89:42:bb:2d:d1:96:7b:b9:b5:be:b2:27:d2:
26:d3:97:b7:df:5e:68:f5:06:65:a5:4c:85:6f:08:
a3:9b:1f:73:49:c1:5f:41:a3:5b:34:d1:a2:d1:d3:
66:db:43:bb:77:d4:10:cc:28:1a:3b:80:c5:fd:9b:
fc:13:53:6a:22:b5:bf:66:61:7c:96:b8:8b:47:81:
91:7f:aa:f3:b3:e2:e9:22:35:2f:5b:12:40:77:11:
6c:cf:6b:1b:63:1a:ed:c6:02:29:0a:a0:54:d8:c6:
7a:72:93:c7:02:98:be:d6:37:19:1e:fb:bc:cc:1c:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:58:87:E8:8D:D3:82:AF:B4:91:81:C5:74:CD:6C:A5:2F:1B:62
X509v3 Authority Key Identifier:
keyid:87:F4:5E:3A:40:69:D4:F5:EB:D5:F6:E6:42:1D:8D:3C:AB:E3:09:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_ReOkBp1PXr1fbmQh2NPKvjCSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bdfd3-d5a1-45b9-9296-6319bb079c44/1/h_ReOkBp1PXr1fbmQh2NPKvjCSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:29:9d:a5:0b:4d:ff:3b:ed:9c:3d:54:f5:0f:01:16:88:12:
2d:5c:ea:0d:e2:66:06:85:8d:99:51:8b:65:1c:75:18:04:67:
5d:70:fe:55:71:ab:1b:c5:a0:f1:76:37:08:fb:de:48:a9:13:
be:60:18:b1:6e:78:d8:a0:6f:34:d9:e0:78:e3:26:3e:47:99:
27:15:95:ba:84:50:84:92:ed:a0:df:65:96:04:79:53:dc:4c:
f9:70:71:70:8e:a7:8e:ac:5a:68:cf:45:de:ef:03:7c:91:d7:
e0:0f:6f:f9:59:01:d6:70:a2:a3:fe:0a:2b:80:13:13:fe:01:
8e:c4:bf:cc:eb:13:59:1c:f7:3a:ee:d1:66:20:14:eb:34:09:
3a:6b:50:16:77:f5:7b:df:e1:1b:5d:28:15:99:20:85:04:65:
34:ce:4a:20:5d:ac:95:57:65:b1:e4:ed:03:7f:e4:aa:85:c7:
f1:4b:3e:35:48:70:53:f7:bb:49:87:3b:1f:c4:19:f0:c5:8b:
24:43:cb:76:ce:7f:f1:ed:b4:96:b8:8b:ea:3e:ed:2c:e3:a8:
26:97:60:32:d5:83:74:8f:b6:55:79:1b:c6:ae:d5:c1:c2:5f:
42:28:c9:1e:22:2c:22:3d:b4:94:b4:1b:33:f0:7b:f5:cc:4f:
8e:b3:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:42:49 2025 by rpki-client