Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
File: H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft (raw, json)
Hash identifier: c1D1XXD4pPn+c3LZi8OunzTJF+uFO61+QkrCPmAOVY0=
Subject key identifier: 0F:82:AC:BA:D9:E4:FC:B8:3D:B6:C9:D0:89:45:12:A7:35:3D:7B:14
Authority key identifier: 1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
Certificate issuer: /CN=1f97599f63d787c65b2ef9ff70dd636527404466
Certificate serial: 0196A3F7939214EB195E9B7A033FBB8B2DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
Manifest number: 0C30
Signing time: Tue 06 May 2025 05:00:33 +0000
Manifest this update: Tue 06 May 2025 05:00:33 +0000
Manifest next update: Wed 07 May 2025 05:00:33 +0000
Files and hashes: 1: 9LtCAwdvQTxrsgjAgJBXTY-dexQ.roa (hash: YbPa7xrFRquA6rkXPn/4oW9xs5SCR/ZWuuJuhONwhvc=)
2: H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl (hash: rtPeEk8UrGJQDQfFfkworfUslpsXUO1Q2aXuGT09Aqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:f7:93:92:14:eb:19:5e:9b:7a:03:3f:bb:8b:2d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f97599f63d787c65b2ef9ff70dd636527404466
Validity
Not Before: May 6 05:00:33 2025 GMT
Not After : May 7 05:00:33 2025 GMT
Subject: CN=0f82acbad9e4fcb83db6c9d0894512a7353d7b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:5b:f0:58:c7:fb:84:db:19:b2:b2:98:44:
2a:9f:b1:2e:d8:41:1d:cc:f7:55:65:e0:14:e3:99:
6b:95:ea:1f:b3:ba:ea:39:74:a8:57:4a:01:8c:69:
48:e2:a9:15:66:17:43:37:93:9d:51:25:c9:23:aa:
bc:89:29:ee:d0:ac:e3:3f:02:73:2f:df:d8:5d:56:
b6:94:19:82:b3:08:6e:88:0f:9e:a7:b9:44:36:cb:
b7:e0:ed:0d:ca:45:a5:92:75:7a:82:ff:e4:a0:dd:
a8:a6:cf:12:a5:48:37:d0:0f:87:e2:75:a8:b0:a8:
c1:4a:f9:ba:b0:e0:fc:24:19:7a:8b:c1:25:c8:b5:
58:ee:f1:47:07:61:93:2d:36:08:7a:82:56:7a:9f:
42:c6:0e:1f:bf:38:60:77:63:a1:42:b4:cb:01:95:
f7:b3:70:66:f5:0e:20:b3:5d:ca:35:2a:69:2f:e8:
8e:aa:9c:dc:8e:29:2a:53:cf:de:05:66:56:f7:04:
35:b7:b1:a0:8b:c8:ae:da:cb:8a:bb:12:c0:47:cf:
98:63:20:63:ba:14:10:d7:1d:81:eb:17:e7:81:8e:
2b:d5:0c:fb:30:6e:cf:b4:c6:a0:4c:57:1d:d8:e9:
60:39:0d:8e:0e:b1:c6:5e:af:90:9a:27:3d:d3:60:
54:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:82:AC:BA:D9:E4:FC:B8:3D:B6:C9:D0:89:45:12:A7:35:3D:7B:14
X509v3 Authority Key Identifier:
keyid:1F:97:59:9F:63:D7:87:C6:5B:2E:F9:FF:70:DD:63:65:27:40:44:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H5dZn2PXh8ZbLvn_cN1jZSdARGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a1a95b-4be9-497e-bdf7-7ece7d073651/1/H5dZn2PXh8ZbLvn_cN1jZSdARGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ed:30:56:8f:71:4d:4a:92:d1:6e:b4:58:68:ce:b4:f8:01:
1c:a7:73:00:35:ec:11:a3:7f:de:16:e0:cb:04:f1:d6:ea:f7:
44:a4:90:ba:9f:ed:66:01:14:be:48:0f:41:7b:07:b2:62:48:
b8:09:1a:10:21:de:26:30:18:1e:0c:9f:2a:c1:ea:d8:88:68:
9e:c6:08:8b:3b:5e:04:2c:aa:63:9d:ba:cb:4c:69:03:82:ee:
00:44:73:a3:c1:5f:ec:f7:b4:47:e8:d2:49:73:56:e8:90:cb:
04:6e:25:08:39:f8:a7:57:38:5b:d7:d8:83:69:8a:e2:e5:da:
51:57:93:11:47:2f:31:e4:be:27:5a:7f:bf:4e:47:7e:f3:b5:
9f:26:57:18:fa:b1:19:94:09:9d:03:d1:12:1e:ce:ad:64:1b:
48:c0:08:64:03:8c:ea:f6:35:f6:3d:2f:a9:dd:a6:d4:55:82:
69:e5:3b:67:21:cc:9a:d5:14:91:36:df:24:28:4c:63:90:b1:
ad:ea:02:65:e1:be:9d:ba:07:cb:bc:29:16:c6:f6:a4:b3:29:
36:ce:0a:bb:d2:0f:8e:77:97:8f:d7:51:9c:b6:26:4b:3d:6e:
97:b3:aa:80:0e:48:7c:c2:54:08:6f:8a:76:46:54:64:32:35:
04:0b:2e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:20:13 2025 by rpki-client