Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File: H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier: 7HJZxl56OiBgieRsLXhYC+Kf8HRZ3/6Pkn3Z6CU4mZ0=
Subject key identifier: 88:BC:FB:7F:18:74:0B:7F:1C:81:41:A7:6E:D4:EB:AC:9D:2A:0B:7D
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer: /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial: 0196BC36C1A5133303B87386E15D6497CE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number: 0589
Signing time: Sat 10 May 2025 22:00:27 +0000
Manifest this update: Sat 10 May 2025 22:00:27 +0000
Manifest next update: Sun 11 May 2025 22:00:27 +0000
Files and hashes: 1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: 347g/ZrQg7MR0DJUTgSROPH14VE58t1jTT4S0Jm0vsc=)
2: HcCGVf1c2Ti9Q8GpR181zKxoK-4.roa (hash: epMyekEuNY8Rw5EQGjHEPi8q6cf4LUx00XdGU4u6gyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:c1:a5:13:33:03:b8:73:86:e1:5d:64:97:ce:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
Validity
Not Before: May 10 22:00:27 2025 GMT
Not After : May 11 22:00:27 2025 GMT
Subject: CN=88bcfb7f18740b7f1c8141a76ed4ebac9d2a0b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:46:a7:55:b7:19:bd:da:3a:b9:e6:37:e2:
fa:ce:80:3e:ba:36:28:f5:96:74:63:ff:a7:5d:97:
69:e9:8a:d7:1a:9b:d1:31:7f:23:c3:a7:2c:aa:bf:
b1:72:67:5c:e6:31:ed:ab:87:b1:eb:f9:6c:91:81:
e3:07:bd:47:1e:8b:76:62:09:45:d0:5b:51:a2:9d:
65:3a:8a:06:de:32:cd:25:83:eb:19:98:b5:a6:f3:
b1:99:90:99:d6:e0:fb:d8:73:e8:05:35:8c:e9:a2:
49:87:c7:1b:8f:47:3a:46:14:8d:15:3f:5b:7c:df:
c1:aa:11:53:08:39:41:e2:fa:f3:27:cf:db:96:4d:
c0:81:8b:cc:82:36:53:e6:60:a3:35:e7:32:92:a3:
c4:e2:a3:21:39:20:ba:a3:0b:76:1c:ac:53:3c:ac:
e8:2e:4c:57:f5:5e:b7:b6:79:c1:7c:07:5a:cd:81:
30:9e:77:be:d5:bc:1c:45:a1:c2:d2:1d:1b:4d:46:
86:ee:8e:c0:c2:1c:c2:82:64:07:fa:f2:ed:ff:5a:
7b:80:9a:f9:3e:f7:49:11:e9:2d:73:14:11:8c:3b:
87:fd:68:01:4f:26:fb:77:c3:f4:75:2a:ed:94:76:
88:c2:5d:50:38:fc:5b:1b:83:36:e2:df:52:a0:84:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BC:FB:7F:18:74:0B:7F:1C:81:41:A7:6E:D4:EB:AC:9D:2A:0B:7D
X509v3 Authority Key Identifier:
keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f5:61:60:18:5b:a8:26:6c:bb:5d:6c:6c:f7:1a:c9:f0:c5:
a4:f2:45:e6:b8:2c:6d:ab:3a:c6:43:f4:e9:ba:24:55:6e:d9:
33:28:01:a5:1e:22:b9:92:bb:1e:04:b2:08:aa:0e:19:4d:e2:
b0:73:a3:69:23:d6:93:80:de:a9:2e:84:d9:53:93:21:1c:e5:
60:f9:53:fc:cc:49:9d:b0:7b:34:8d:3e:69:6f:b4:26:b3:40:
b8:95:70:1b:d1:64:7e:85:c6:8f:27:8d:78:a3:2f:03:c0:b0:
37:66:b9:3e:64:71:5b:43:fd:cb:4b:a9:1b:e2:1f:ae:56:dd:
1b:e5:e5:9c:bc:d8:83:81:ae:ea:09:92:e0:86:48:1c:44:18:
95:0f:ec:54:4b:43:75:aa:f1:9e:ba:be:c4:ce:76:18:a0:88:
c9:0c:4e:ae:71:0d:b0:12:50:0a:c6:cd:0a:08:75:1c:42:bc:
25:ad:9f:6f:c2:38:90:e8:4c:55:d9:58:f9:d3:78:b3:06:c6:
3f:4e:03:ed:c0:4b:59:29:65:c3:07:98:09:67:bb:6a:4e:80:
4b:07:99:27:fd:bd:bf:42:a8:ac:5c:53:20:5e:cc:a6:d6:93:
4e:98:59:5a:70:17:12:84:ac:da:56:82:14:77:09:b5:b0:02:
04:da:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:20:41 2025 by rpki-client