Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
File: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft (raw, json)
Hash identifier: 02YJgjtraS+rnz0ycZtaOzzDv08OQVPXewxq/UwOQbs=
Subject key identifier: AC:4C:E4:9F:24:4B:E9:C2:D0:21:45:B3:A2:06:ED:3B:38:30:DF:C9
Authority key identifier: 87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
Certificate issuer: /CN=87e64170f9d82c51670b9a44f329b20613a8082d
Certificate serial: 0196C15D9D4561B979A18B46D86B05ED8A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 22:00:59 +0000
Manifest this update: Sun 11 May 2025 22:00:59 +0000
Manifest next update: Mon 12 May 2025 22:00:59 +0000
Files and hashes: 1: 1-cISFCJjrOXOH13uOfejSN0t07U.roa (hash: CsZ+l20+WvDp7ZAvLuoQUu3eyz/VH/hBFp+Sltnj4u8=)
2: h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl (hash: +JbZ64jv0H/F+m38kr8gxvpQESdOMwSoIUmNinBI1Kg=)
3: w3g4Q6aTfVevp6COhE1618_UEpo.roa (hash: OILWL7JqdZLsWKiYyVkTfZSv9EPE18ajIqjcTio33fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:9d:45:61:b9:79:a1:8b:46:d8:6b:05:ed:8a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e64170f9d82c51670b9a44f329b20613a8082d
Validity
Not Before: May 11 22:00:59 2025 GMT
Not After : May 12 22:00:59 2025 GMT
Subject: CN=ac4ce49f244be9c2d02145b3a206ed3b3830dfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:6f:66:ce:c8:c3:2d:39:29:5c:36:e4:fb:
67:02:2e:d0:7e:d6:eb:fa:4c:9c:82:41:bb:1b:fe:
bd:1b:d5:9b:77:55:58:8f:ad:5f:17:40:fe:4c:b0:
16:2d:76:8f:97:c1:a0:aa:3a:02:82:8a:9a:1c:5e:
93:00:e2:4f:ed:4b:30:1d:d1:29:e3:65:3b:d5:df:
92:09:e3:f3:fa:b6:e0:5b:d4:ef:35:7a:4e:9d:52:
07:9c:3e:ec:b6:11:c2:b9:04:7e:e5:70:75:ae:dd:
49:ae:db:a3:9a:b3:6a:9c:7e:f7:5f:ef:d4:55:04:
e1:9c:da:df:2c:4b:87:c1:df:c2:a2:4d:8c:fc:5b:
77:28:50:48:29:9d:06:a7:aa:75:88:ac:af:23:0c:
b3:ac:01:e0:29:aa:c9:94:fd:d9:9a:5f:2e:eb:5c:
d0:a6:8a:9f:ec:d5:25:7f:fb:1f:5a:8a:18:41:b6:
a2:c2:e6:2a:b6:ee:69:53:0d:b4:52:31:8a:d3:fa:
eb:a9:c1:f0:e1:8e:97:4b:51:2e:b4:c5:b4:6a:f0:
68:02:93:d0:74:bc:62:45:11:6c:a5:3b:9e:3b:36:
c5:ef:a2:e6:5c:3f:3f:df:69:82:65:7c:f8:e3:b5:
f8:29:f1:72:a6:54:7b:ea:9a:c1:3a:2b:1f:b7:95:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:E4:9F:24:4B:E9:C2:D0:21:45:B3:A2:06:ED:3B:38:30:DF:C9
X509v3 Authority Key Identifier:
keyid:87:E6:41:70:F9:D8:2C:51:67:0B:9A:44:F3:29:B2:06:13:A8:08:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/beb29d-f0ee-407a-9702-6e13ccbf4906/1/h-ZBcPnYLFFnC5pE8ymyBhOoCC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5b:9a:77:91:48:10:6a:09:72:4a:cf:10:06:8a:1a:4d:11:
ce:fb:ff:8f:df:74:ba:ca:f7:93:7e:d1:c6:ae:5c:03:c2:e7:
6e:5c:6e:0e:88:0e:cc:f3:05:32:d1:fc:dd:f3:56:c8:ab:13:
78:ff:f8:a5:24:43:42:fd:73:b7:a0:56:1c:ad:22:59:06:c8:
2b:b3:0d:04:61:a1:89:d8:c4:a0:16:d0:81:3a:3e:92:ea:be:
68:23:8d:80:74:3c:16:e3:c0:73:a2:12:d3:8b:3f:c0:90:dd:
61:f9:1f:d1:27:d0:bc:5a:ce:66:10:a9:d1:14:fa:43:0b:a3:
ae:0f:dc:f8:86:35:e7:4d:08:9a:96:dc:7e:23:97:f4:05:7f:
f0:7d:ac:24:8c:39:01:43:76:34:4f:c7:61:17:5a:e8:9d:2c:
e9:4c:81:71:da:12:af:21:e2:f6:bd:4d:e1:6e:37:3e:c8:9d:
e8:c3:ca:8b:4e:e3:95:4c:4e:8e:75:c6:ab:f3:15:37:b0:9e:
99:e3:b5:7e:7e:4f:ef:ac:28:dd:d7:a2:51:87:f2:94:c4:db:
0c:92:af:3b:48:31:48:a6:0e:67:db:18:a3:dd:64:8c:ca:94:
e9:43:4e:3c:fb:7d:39:b8:e9:e0:5b:15:f6:ea:23:b8:de:12:
ca:be:d9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:14:55 2025 by rpki-client