Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
File: H4ls09jRoGmdpSEFXftY3Abd3zU.mft (raw, json)
Hash identifier: FQZjLEIKuNpr2ZUf1YtN030Au+a0+a3jrDLNsMjliyk=
Subject key identifier: 59:02:AA:09:78:E7:6D:E1:7E:18:6A:84:75:25:57:EE:9B:94:51:A9
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01969D88038992DBD23DCA0C72EF23694F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
Manifest number: 1525
Signing time: Sun 04 May 2025 23:00:58 +0000
Manifest this update: Sun 04 May 2025 23:00:58 +0000
Manifest next update: Mon 05 May 2025 23:00:58 +0000
Files and hashes: 1: H4ls09jRoGmdpSEFXftY3Abd3zU.crl (hash: wwVxRc5mAjSALD3iWGRYu3vhdHGZhW1eZzqysCEOnNA=)
2: PGC2gjbo2htZQJwYOmeelo5Z83Y.roa (hash: JFulXR+ljWTJG0RiuMIfac488bMeOxp9OF6JRC9SK3k=)
3: kTvVn_B76BHAkt21A667VWLx85c.roa (hash: RlO7Fkyzwvg6DOaLdLA5nagDWX7X86stBqbWJQSamrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:88:03:89:92:db:d2:3d:ca:0c:72:ef:23:69:4f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: May 4 23:00:58 2025 GMT
Not After : May 5 23:00:58 2025 GMT
Subject: CN=5902aa0978e76de17e186a84752557ee9b9451a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1c:af:bc:14:a1:26:8e:3e:87:c1:cc:6a:0d:
84:1c:5a:e4:99:27:e6:2c:92:d1:90:b3:54:05:c7:
82:0f:c0:b9:cd:cf:65:53:56:2c:0e:e5:4f:65:9f:
d9:fd:69:7e:04:02:65:61:b6:a9:5c:2e:5f:a7:da:
3d:7b:f8:b0:62:d4:d8:56:ff:8e:7c:aa:f9:4c:c5:
9a:d8:34:b5:67:64:dd:d7:47:a0:e8:0f:c7:77:dc:
de:49:f9:1f:d9:a8:8d:b1:bb:e1:6e:82:75:21:06:
a3:c0:7e:80:54:8b:b4:99:27:85:a7:8b:d8:d3:1e:
ba:91:38:f2:5a:f7:0c:b3:42:de:c0:c9:cf:54:fe:
4f:bc:16:b3:b1:31:58:87:d0:d0:f3:42:40:e3:4b:
1c:2a:30:7f:8e:63:e8:0d:3d:98:b4:a4:36:66:b4:
c8:1f:c5:3f:e9:88:fd:4d:78:81:fc:a2:a5:57:0f:
29:ae:dd:4a:e3:60:7c:fd:04:2c:c2:71:90:cf:48:
f9:ae:ad:2b:b8:a8:c6:ab:b7:e3:ab:8f:32:9c:74:
3b:f1:17:0e:df:af:37:90:e6:e7:13:09:4a:a5:6e:
13:d3:ad:b8:4c:78:73:5c:e6:40:d9:36:f9:56:74:
77:4a:d5:91:6c:3d:60:63:be:56:b8:2c:a4:dc:ff:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:02:AA:09:78:E7:6D:E1:7E:18:6A:84:75:25:57:EE:9B:94:51:A9
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:06:bf:b8:05:69:cf:7a:18:7b:d7:89:9e:38:53:37:4a:2d:
75:37:8a:1c:8f:7f:f0:4e:8f:a9:dc:3c:40:98:68:a3:86:c7:
d1:86:8a:79:91:9d:45:07:68:ae:f4:7e:f2:25:5c:ce:c2:4a:
57:3e:d1:53:5c:c3:12:b6:15:0b:54:b5:12:c1:a1:4a:77:b9:
97:b2:2c:49:24:73:98:71:5a:9f:e9:1b:49:54:0f:11:4b:4e:
85:70:a4:ba:6e:08:20:52:c1:08:e4:04:44:0a:49:56:d8:c6:
99:4c:78:6c:97:56:4b:2d:21:8b:54:8a:0f:09:19:65:5c:92:
a3:ee:0f:e3:5d:6e:64:2a:72:1b:54:e8:11:3d:98:4a:40:db:
19:43:30:69:5d:a2:a8:11:ca:bb:bb:4c:11:bd:c6:c3:1a:30:
3d:be:90:8d:53:7d:16:34:be:c7:50:85:ea:af:a8:44:d7:e1:
82:74:f6:55:e2:a2:88:b1:b1:61:b7:b2:b5:95:cc:bb:10:56:
a0:86:4c:e9:79:75:d6:65:69:5a:36:3a:f5:f9:a3:7c:5b:d7:
3b:37:95:c9:42:62:45:3d:e3:19:da:32:f4:ba:01:59:49:f4:
df:57:68:cf:1c:d7:37:8d:5d:4e:e5:83:96:7c:21:76:00:8f:
ed:da:f3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:35:14 2025 by rpki-client