Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
File: rh3Biksfv-LCur2Lu0f-H9HPIvg.mft (raw, json)
Hash identifier: 7wUXFNF4vfdzn0g4my31piSqs4cXgMcENE0bJyG7pd4=
Subject key identifier: E4:3F:E4:51:32:C8:2A:94:51:08:E9:87:17:76:33:4A:6E:5F:E7:8C
Authority key identifier: AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
Certificate issuer: /CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Certificate serial: 0196C0EF1EA7604C245FF88F16075D73232A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 20:00:18 +0000
Manifest this update: Sun 11 May 2025 20:00:18 +0000
Manifest next update: Mon 12 May 2025 20:00:18 +0000
Files and hashes: 1: XsL5B3czGNBOzfHerg03TyaBu5U.roa (hash: ISMIcudQZ6/ngajT0MeHKZhAvNpAbEEMDN0b+U1wlIs=)
2: nYmjNrZRKkBKMRuyZNosQ-6fI8k.roa (hash: f30eW/l6+8yoMbQlTrT6KOfEquADaqjJm6m5OwGISv8=)
3: rh3Biksfv-LCur2Lu0f-H9HPIvg.crl (hash: MiMekbab2fkUlXMT9r81iezPZtA1+xfsPh5DcxeV4ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:1e:a7:60:4c:24:5f:f8:8f:16:07:5d:73:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1dc18a4b1fbfe2c2babd8bbb47fe1fd1cf22f8
Validity
Not Before: May 11 20:00:18 2025 GMT
Not After : May 12 20:00:18 2025 GMT
Subject: CN=e43fe45132c82a945108e9871776334a6e5fe78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:1b:d2:85:2d:49:f2:e9:3c:a1:2a:68:9a:
5c:da:79:a2:37:fe:7f:93:ab:27:51:37:41:95:d7:
64:a8:eb:85:e7:2d:40:bf:96:7c:2a:57:ef:c7:17:
b2:4f:24:bc:9d:f1:51:05:d8:8f:d6:02:6a:8d:78:
aa:e3:d8:a2:f8:d4:84:06:f3:f9:cb:ca:f9:d3:c8:
1b:3a:84:99:86:5d:5c:90:0c:55:03:1c:87:cf:f8:
5a:c8:ef:3a:88:60:27:3c:b7:c4:56:5d:c5:11:0b:
20:62:70:8c:43:ca:5d:c3:6f:66:c4:85:68:ad:ed:
cf:e8:22:74:5d:21:5f:4e:34:a0:4a:8b:4f:d3:df:
b6:27:94:a8:bf:27:6c:53:c2:17:18:e3:64:10:b6:
75:30:74:6b:50:07:54:42:77:fa:03:a8:54:24:ca:
2d:e0:19:36:bb:04:c2:87:f4:d6:47:80:fe:bd:87:
16:1a:08:72:22:17:9a:5b:97:f4:a6:e6:8e:76:77:
53:b4:a2:03:fa:e0:00:5f:bb:ed:8d:e5:ce:35:63:
f0:0a:be:51:4f:29:b9:2c:df:bb:34:10:71:49:72:
12:8a:73:55:f2:11:a4:2e:0f:50:4e:f2:e3:4f:39:
b3:56:62:71:7b:c9:19:f5:ba:80:d9:2c:3e:be:75:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:E4:51:32:C8:2A:94:51:08:E9:87:17:76:33:4A:6E:5F:E7:8C
X509v3 Authority Key Identifier:
keyid:AE:1D:C1:8A:4B:1F:BF:E2:C2:BA:BD:8B:BB:47:FE:1F:D1:CF:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh3Biksfv-LCur2Lu0f-H9HPIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0376d1-12ca-4135-9483-8e7149f04a4e/1/rh3Biksfv-LCur2Lu0f-H9HPIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d1:d0:f4:f7:48:c6:fe:8b:ff:52:75:7c:87:99:d1:ea:03:
78:8f:30:34:3f:c6:b9:ec:bc:45:7e:0a:47:fc:ae:51:bd:84:
d9:b4:c8:68:79:88:cc:da:db:83:ca:88:be:39:07:30:09:aa:
ca:4e:99:c8:1b:1a:f1:b5:96:45:79:24:6a:72:22:8b:0e:4a:
79:12:1c:72:78:d9:6b:9b:60:53:1f:55:3c:c3:a9:d5:1d:0a:
53:05:43:d4:40:83:a7:b4:bf:24:ac:af:e4:78:3f:d9:33:2f:
64:f1:e9:c1:b4:17:af:95:b8:e8:de:e0:7b:6d:80:b0:75:84:
7d:ed:af:04:8d:00:07:16:8d:10:a0:a9:88:b9:9e:af:a8:5f:
01:c7:9d:3e:46:a0:29:72:3b:88:d9:f2:50:c3:0e:09:96:58:
44:19:61:22:0d:6a:dd:f0:d4:19:28:68:2a:d0:1e:4b:53:ab:
66:53:ad:50:41:31:de:ae:66:be:88:4d:8c:80:5e:94:b3:3f:
61:6e:f1:83:43:d1:64:e4:fd:eb:5a:f3:f7:d9:18:46:22:20:
b5:c7:e6:9f:fe:17:29:d6:38:e3:67:8f:81:44:a8:68:2e:d4:
3f:5a:95:e9:87:80:32:04:85:c0:d4:40:ec:d3:c2:76:54:9e:
a6:86:a6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:13 2025 by rpki-client