Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier: TW4ujZb6HzyqX72cznq2ObW5y1kLX/rE32+APP0TwQI=
Subject key identifier: 47:3D:F5:AF:3C:88:18:F9:64:23:3C:4E:6E:5D:5E:4C:58:AE:4A:02
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer: /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial: 0196C45E6244C5C2E5D0CBB5F5DA9686C6CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 12:00:41 +0000
Manifest this update: Mon 12 May 2025 12:00:41 +0000
Manifest next update: Tue 13 May 2025 12:00:41 +0000
Files and hashes: 1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: CjDx/g0jb9YWRLToElhn91v6us+ADT3Xnm7nKCqH3xE=)
2: oyXaOgxI1N0gL-mT4wAa6DfHmfQ.roa (hash: 8sggfPG1wysa3rNvbgw+mJfeUSqlumTtEBYr1asLE8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:62:44:c5:c2:e5:d0:cb:b5:f5:da:96:86:c6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Validity
Not Before: May 12 12:00:41 2025 GMT
Not After : May 13 12:00:41 2025 GMT
Subject: CN=473df5af3c8818f964233c4e6e5d5e4c58ae4a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:12:0c:9b:be:75:24:0e:30:59:00:49:f4:
9c:29:70:fa:2b:b5:ed:05:1a:d9:cf:e8:71:69:d7:
b6:04:90:ab:d2:e2:03:80:30:b9:7e:24:95:af:8e:
fc:3a:6b:3f:53:54:8d:3d:f8:2a:42:51:c3:62:7b:
8a:77:b6:99:34:83:c9:a3:66:38:c0:28:43:ca:29:
8f:ae:fb:26:9c:ce:26:6e:db:f7:0e:8f:0e:89:d1:
e7:03:f2:df:48:a4:ff:1d:47:ac:4b:b1:d5:2f:90:
38:b7:7f:89:3f:58:16:5a:29:e8:f2:b2:bd:35:c1:
24:ac:33:19:fd:63:e9:95:9d:10:13:4f:5d:49:c7:
b5:6e:f3:65:75:28:fa:3c:53:2d:2b:77:00:c5:25:
5d:a5:65:5c:e1:09:db:56:20:50:20:f1:00:26:31:
96:47:f1:b8:84:14:13:10:11:07:54:f5:8a:cb:49:
99:ee:dc:39:8b:3b:90:07:b3:97:a3:1d:30:6f:c7:
6f:b5:54:ea:c1:aa:4e:7b:b1:11:3f:3e:7c:50:a5:
3d:c5:a4:08:27:f3:a9:11:86:71:be:5a:ad:64:e8:
5f:80:33:3f:b1:b9:1a:68:13:52:8d:c0:ae:5f:35:
f1:82:13:4d:a4:2b:f0:3d:45:fb:f1:f4:8f:dc:d0:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:F5:AF:3C:88:18:F9:64:23:3C:4E:6E:5D:5E:4C:58:AE:4A:02
X509v3 Authority Key Identifier:
keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d2:a5:d2:aa:df:34:31:2a:e6:68:4e:cd:bf:86:e4:11:8f:
b3:86:8a:9a:c8:e6:d4:5b:1d:1a:54:19:2e:d3:a7:02:fd:b3:
31:85:02:9f:69:c0:f3:b9:44:5d:06:79:23:99:b2:1e:f0:f5:
67:a4:02:29:55:72:39:c3:e3:8b:4f:db:eb:97:42:39:67:f0:
16:64:50:1f:6d:51:4d:69:a7:50:36:ee:c6:c3:03:9d:b3:be:
18:41:cd:6d:ec:48:89:b2:87:a2:78:ad:52:2a:eb:9f:8d:29:
50:f4:35:8d:e9:9b:5c:3f:f0:6d:6d:51:a1:fa:08:3e:bb:a8:
30:1f:2d:e9:06:4e:93:b6:78:f3:86:cf:09:5a:6c:18:27:0f:
a0:dc:be:a4:6f:cf:db:7c:12:eb:16:22:3b:3a:db:b3:d0:12:
cd:28:97:c3:a4:7a:81:62:c8:12:e6:86:5b:9d:f3:da:4b:c3:
9d:71:1d:75:ac:26:de:07:71:79:92:90:5c:5e:9f:4e:81:55:
f7:62:00:aa:43:d5:26:f7:4e:5a:ab:4e:4f:46:f0:46:d0:2e:
c2:33:57:bc:61:d1:33:be:c1:32:bb:c5:a3:80:2a:0f:c8:89:
01:b8:80:ae:25:37:15:6a:a2:dd:78:7c:53:ca:cb:e0:67:94:
f6:8e:a0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:51:30 2025 by rpki-client