Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
File: h9mQExRnt30RFit5--OwbKirLTk.mft (raw, json)
Hash identifier: fqHK8BKE24C6sh6Mas8HqljPpkn9d7GzyzUmAePE9Gg=
Subject key identifier: 86:E9:EB:A2:6B:29:9E:EE:86:FF:92:17:1E:6A:B3:91:C6:F6:99:7A
Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Certificate serial: 0196C04B2D5359F09BA260A8B52425BC737F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
Manifest number: 1546
Signing time: Sun 11 May 2025 17:01:14 +0000
Manifest this update: Sun 11 May 2025 17:01:14 +0000
Manifest next update: Mon 12 May 2025 17:01:14 +0000
Files and hashes: 1: BpGdK4vNgugH_zIwdKpTLTonzFI.roa (hash: XCtnPAQsPAejFAsLvLkAMfASQaAA0TQU3hCkuPs7vLM=)
2: XOmOBh50cvCvJmnFjaJhaHYW2sE.roa (hash: 6F6wNjub6rC7wNAaFOeBE6JJ3w2cU7C6GJM4bNB9ZQQ=)
3: h9mQExRnt30RFit5--OwbKirLTk.crl (hash: HLlkE6aOIFokMCj7jHOnNJkn2Kh1934TqHsfIex3xbc=)
4: viZJ1ILrK-Lhvo6EpJnhGu2o9Q4.roa (hash: VBEvk2C209Y5tb0FL9tK/NrEWGQ6MCpm2RIBK/aQkDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4b:2d:53:59:f0:9b:a2:60:a8:b5:24:25:bc:73:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39
Validity
Not Before: May 11 17:01:14 2025 GMT
Not After : May 12 17:01:14 2025 GMT
Subject: CN=86e9eba26b299eee86ff92171e6ab391c6f6997a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:7e:aa:57:9f:ef:47:9c:75:4b:4a:35:3c:
b5:bf:13:12:4b:de:60:ab:eb:54:81:7b:3c:2d:cc:
54:1f:a4:1d:36:b2:5a:c2:f9:16:c0:55:d4:fc:5f:
25:30:b2:f8:88:43:58:a1:b8:ad:c1:08:78:27:b4:
42:11:0f:5f:83:5f:00:20:3b:f1:43:10:20:27:df:
ff:38:34:a1:70:43:ce:97:d7:c7:2a:f8:59:83:98:
f8:9d:13:85:e6:84:22:dc:19:30:a4:7c:9a:84:73:
96:87:28:af:56:73:85:b2:cb:d8:eb:16:6a:73:fc:
43:99:46:4b:86:50:1e:3a:a6:24:c3:52:b8:03:96:
52:32:f3:f0:12:73:c4:dc:7e:bc:0b:1f:15:44:fd:
ef:0f:ee:e8:5c:1c:2b:fc:73:08:f4:56:69:c4:b7:
54:c8:ed:23:8a:ab:da:83:24:a3:cf:ff:d7:6d:3f:
4a:bd:99:40:18:e5:93:87:a6:8d:6f:1e:e0:f3:00:
b6:2f:f7:b3:e3:63:e8:fb:8e:d9:fb:05:0c:8e:7c:
a4:e0:88:ec:bd:26:6b:5b:8d:ee:fd:1e:20:aa:bf:
42:1c:22:5a:ae:79:8d:0f:be:ce:83:cf:ec:71:4c:
2d:13:7d:17:78:ae:b7:95:1a:77:ce:6c:ab:ed:ef:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E9:EB:A2:6B:29:9E:EE:86:FF:92:17:1E:6A:B3:91:C6:F6:99:7A
X509v3 Authority Key Identifier:
keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6d:18:44:fe:76:d9:a2:9c:61:6e:68:91:55:87:38:6b:64:
88:16:e2:2a:3d:d5:3a:82:43:89:14:52:20:98:c7:7b:ad:05:
51:fd:65:e5:45:8d:6a:b1:52:87:d8:f7:1d:e0:2f:d3:51:df:
4d:1a:81:e6:57:b0:2a:bc:05:bd:f3:65:6a:42:41:e7:15:61:
a4:c8:d5:8d:c1:0c:44:6b:3f:e4:02:ca:fb:f6:70:80:d1:b5:
04:86:f4:66:14:c8:ba:76:1f:ed:32:e1:25:60:ee:b0:14:7e:
d6:5b:47:63:92:08:da:79:55:12:39:3e:8c:39:17:64:a4:23:
bb:66:30:c3:46:23:6e:44:2b:1e:d7:3a:47:02:bc:a8:d5:d2:
6c:6d:99:52:cb:33:2d:cb:e7:22:0f:38:f7:a1:e4:25:2c:4c:
be:0f:8c:2b:4f:94:74:ba:3f:06:78:35:d8:b2:7d:d0:c8:24:
c1:4e:69:8b:45:f4:56:cf:9e:b6:e3:3a:c1:b1:66:01:82:0a:
d8:58:34:14:a9:af:2e:7d:94:a1:36:4c:c8:2d:36:4a:e9:9d:
bf:3b:b3:c8:dd:8f:e5:e5:fd:f9:52:9e:e7:82:1c:03:03:d0:
6b:d3:c5:61:c4:29:19:a5:01:92:a5:ba:26:d8:3c:a2:47:3e:
cd:a1:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:01:51 2025 by rpki-client