Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
File: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft (raw, json)
Hash identifier: 4QWsRqsnFmWh3dJnJpoS5QX4KKSN5HuQmUXb3X71pv0=
Subject key identifier: 0E:CA:44:C9:79:F8:AA:F2:39:77:31:86:BD:58:EA:9D:C2:E9:21:7E
Authority key identifier: 87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
Certificate issuer: /CN=8794395ac822dfe01165216c7781ffd61db28d5b
Certificate serial: 0196A088D38BB3FF31F23EAD18200E3980EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
Manifest number: 03A9
Signing time: Mon 05 May 2025 13:00:43 +0000
Manifest this update: Mon 05 May 2025 13:00:43 +0000
Manifest next update: Tue 06 May 2025 13:00:43 +0000
Files and hashes: 1: SalDxwYnKzervGIcZp186xtzhug.roa (hash: EtmDhhah0eA3Tfn8nv8gHra13dzs3VvNRMhkqeNatXs=)
2: h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl (hash: CnYJYKkQH4CR6HIbIlugxOs6NjrwcUYbWWm57WPRElg=)
3: vJ1U4ASLgA44UNL7Z4BBXNsC6QU.roa (hash: UmSdOz5rZ6J32yPtrp522X1fQ0TXmlUWN5/Uf0zeDr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:88:d3:8b:b3:ff:31:f2:3e:ad:18:20:0e:39:80:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8794395ac822dfe01165216c7781ffd61db28d5b
Validity
Not Before: May 5 13:00:43 2025 GMT
Not After : May 6 13:00:43 2025 GMT
Subject: CN=0eca44c979f8aaf239773186bd58ea9dc2e9217e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:b0:5e:a4:a3:a8:46:88:a4:8e:c1:61:1b:
a3:a8:06:f6:cc:9b:83:8c:8e:78:b9:20:24:c7:0b:
90:d9:3e:1c:08:50:0f:b0:7d:a4:be:84:aa:b5:d9:
ff:c1:05:24:b3:95:0a:68:ea:9c:12:3f:17:f7:63:
ba:bd:59:b3:5a:f4:d0:e5:31:93:7e:bf:a3:ed:50:
3f:2f:45:25:20:2a:f3:c8:86:0b:cb:3f:a7:6f:ba:
08:b6:9d:a2:8a:8f:2e:11:01:f4:c6:3b:b4:5a:4a:
e2:55:16:e0:9d:14:2a:ed:2a:b4:2d:b8:dd:ca:2b:
3d:a2:4d:38:66:ce:af:61:d0:6c:42:57:02:94:78:
29:a0:48:7d:31:55:c3:f8:34:ba:18:78:c7:77:19:
ac:91:52:0b:ab:1a:33:2c:6a:9b:c8:9b:95:04:98:
b0:65:f9:b2:93:9c:47:f1:b3:b9:a1:04:7c:50:e4:
3a:f3:b9:f4:95:c8:8f:ab:0f:1f:3a:d7:24:48:3f:
6b:7e:02:5e:73:84:db:6d:55:0d:55:7c:fd:96:72:
1c:32:a4:25:67:74:a8:eb:46:a2:c9:67:00:01:a7:
b2:23:7e:56:88:f5:45:20:54:4d:b4:b1:bd:8f:1f:
ef:e6:3f:dd:35:29:b9:bf:34:45:31:cc:03:da:0a:
30:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:44:C9:79:F8:AA:F2:39:77:31:86:BD:58:EA:9D:C2:E9:21:7E
X509v3 Authority Key Identifier:
keyid:87:94:39:5A:C8:22:DF:E0:11:65:21:6C:77:81:FF:D6:1D:B2:8D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a2a3a4-ab75-49d4-a941-353f9812b1db/1/h5Q5Wsgi3-ARZSFsd4H_1h2yjVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:57:8b:83:3f:6e:73:63:69:bf:11:a5:ed:42:2c:1b:1e:b7:
00:1f:a3:d9:2c:71:f6:6e:be:32:b8:bf:57:db:7e:a9:82:a2:
78:81:e5:eb:33:6e:dd:d3:b6:48:66:a6:f6:66:fa:6c:45:bc:
02:9c:18:3c:7a:33:ab:8b:e0:ed:34:0e:ec:6e:17:57:6c:77:
9f:60:d9:79:bd:99:d7:c9:26:a6:b4:1e:92:df:ba:38:81:e5:
98:d9:d3:b9:53:2e:4c:a0:e3:66:32:fc:4e:bf:d9:4c:89:02:
1f:78:f9:64:de:bf:64:99:6a:dc:57:c0:44:7f:ac:b9:17:47:
c9:8c:81:cd:19:5c:3b:92:04:67:de:a7:09:80:0f:e0:c1:d8:
e5:d5:52:61:25:e5:52:25:d0:b8:ea:8e:9a:86:23:2b:f1:08:
c8:5d:40:3a:b4:2b:2c:0f:de:bc:f8:cc:9a:83:cc:c9:50:86:
bd:6b:c5:ad:6e:af:dd:4d:ac:d0:41:35:01:85:57:47:c7:0c:
ef:31:87:cb:be:19:51:01:fd:19:2c:6f:0c:3f:20:72:fd:4f:
d9:48:0c:e8:78:a4:2d:be:f1:e4:a1:b2:92:0d:20:62:c3:69:
ae:60:b6:12:1b:26:de:7b:b6:12:de:b6:36:7f:85:ba:31:d3:
23:3a:0b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:16:48 2025 by rpki-client