Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
File: H1BLG7cWjmgLGVQvj3MDhhRMil8.mft (raw, json)
Hash identifier: jROMI4IhYmYKM2q8Yb5cwAyHRjihCuTiVNN7vuyZA9o=
Subject key identifier: 03:F8:A5:0D:F5:7F:9A:AB:46:67:B0:1F:52:A6:F9:13:A2:11:BA:E1
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 0196BFDD4562AB31505BAEBBF066026134B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 15:01:11 +0000
Manifest this update: Sun 11 May 2025 15:01:11 +0000
Manifest next update: Mon 12 May 2025 15:01:11 +0000
Files and hashes: 1: 1YHm_89mdmO3B6rQNuElV51RHnc.roa (hash: MnfHwqRrOYbX1ON7yZ7M8gI0u2brRrZRizU4+uQlZVo=)
2: H1BLG7cWjmgLGVQvj3MDhhRMil8.crl (hash: Ty7MsamDYf4KAyflkwNXvjuxJOVD0S06Erq5QtnWmKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:45:62:ab:31:50:5b:ae:bb:f0:66:02:61:34:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: May 11 15:01:11 2025 GMT
Not After : May 12 15:01:11 2025 GMT
Subject: CN=03f8a50df57f9aab4667b01f52a6f913a211bae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ca:8a:2c:89:e6:1a:22:14:ff:bd:27:20:7c:
88:11:9d:6d:e1:a0:19:5c:1a:24:2f:20:63:63:4c:
e1:af:ed:34:3f:c1:23:13:47:d7:cf:6b:7e:95:e2:
0c:67:81:80:60:5b:8d:6a:75:a8:c2:11:09:b3:2e:
29:a0:a8:53:b4:98:90:a8:0d:d8:5c:63:6f:f0:91:
f2:6e:19:3d:6e:a9:ac:d4:b8:ed:b4:50:ba:f6:56:
58:80:74:89:ad:4d:5c:75:d6:5d:8f:b9:4e:04:93:
05:3f:c7:89:41:37:20:2e:95:ef:8f:06:ff:af:9a:
57:20:d2:d1:46:27:72:6c:46:34:a0:61:91:45:6a:
59:93:fa:e7:00:98:5c:94:1f:7f:de:d1:5b:c4:9d:
43:b9:d0:72:1b:3c:f2:56:75:eb:0f:77:e1:6f:e6:
c1:11:73:fd:db:19:e4:2e:60:3a:54:2a:b1:17:61:
38:43:6e:3b:00:b1:e1:a3:ac:7e:b5:d5:fc:c4:38:
05:57:09:90:f0:e4:da:7c:97:c5:0c:d1:9b:dd:27:
25:55:69:61:01:5f:af:fe:63:c8:b0:c3:e8:e9:d9:
e7:41:6b:37:30:7c:c2:17:e7:73:1b:34:4f:fb:3e:
9f:23:22:d4:ee:c2:9b:26:51:0b:74:ea:3e:83:b5:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:A5:0D:F5:7F:9A:AB:46:67:B0:1F:52:A6:F9:13:A2:11:BA:E1
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:39:26:8b:d6:1d:df:d1:5c:82:bf:24:4e:80:fb:eb:fd:27:
cd:26:53:fd:7e:40:21:90:b0:bd:70:cb:0b:bc:1a:c1:9f:08:
db:c5:f7:ad:fc:f9:31:d3:a5:08:78:e1:f2:f6:72:19:fb:e6:
96:c0:e6:25:aa:f4:fe:09:65:50:88:9e:28:11:56:9f:ef:6d:
f0:9a:43:ec:88:15:48:2d:65:55:19:ea:49:0f:6c:c6:37:93:
68:bf:aa:4d:7a:ff:be:86:3d:c5:2f:d7:f9:5e:91:ca:c1:37:
e9:fd:42:d5:c9:28:50:4c:f8:60:08:b3:e7:f4:34:94:89:83:
5c:c5:33:fe:35:96:50:c7:12:09:68:7e:ab:70:a2:95:b8:80:
27:a0:4d:c9:f8:d0:49:5f:61:a2:0e:77:b9:fc:a1:66:20:2e:
f2:83:73:57:a3:8f:78:18:55:f9:3f:27:fe:34:fb:8e:2b:17:
58:2a:05:ce:0f:f5:14:85:0f:ce:96:59:d9:3d:cc:9e:1b:bd:
41:28:3e:07:de:c3:ce:e0:16:9d:5d:8f:a2:df:35:b3:f0:26:
c5:80:f6:33:05:2b:5a:82:18:ea:f5:68:fe:ef:b7:b9:91:91:
fc:3b:a9:88:3c:8f:d3:a4:d7:e1:b9:50:03:6a:cd:7b:11:66:
8c:a3:88:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:01:27 2025 by rpki-client