Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
File: H_LPGmIwzWLLPKihvB1KS7QzfB0.mft (raw, json)
Hash identifier: mIJ9WjSiiQRKg20aJ8oW7X26wlbQ2Z+3JE4SmKc7hqM=
Subject key identifier: D5:96:8E:24:4A:E4:64:B1:B1:44:1C:51:42:1E:75:F8:CD:11:69:C8
Authority key identifier: 1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
Certificate issuer: /CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Certificate serial: 0196BCA4E124568FA20C6948EDFCB69197A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
Manifest number: 082D
Signing time: Sun 11 May 2025 00:00:44 +0000
Manifest this update: Sun 11 May 2025 00:00:44 +0000
Manifest next update: Mon 12 May 2025 00:00:44 +0000
Files and hashes: 1: H_LPGmIwzWLLPKihvB1KS7QzfB0.crl (hash: CyoRU3L4WS9iLR1WZi0xcwp3ZD2/i26o148BN+bfhuw=)
2: i7voySudmq1hRw6jZi6dhd7J9Lc.roa (hash: PJGOK5ogq6I9ytndA9V0Wf4xrfCGT+GN8CrZ63d1kO4=)
3: rVsJQEO-mj7mvcsXxH5VgaTW6zg.roa (hash: ua7+fmWA2GW1yW/CrUv0CTWRd4x0VpX6E9M5m//M8gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:e1:24:56:8f:a2:0c:69:48:ed:fc:b6:91:97:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ff2cf1a6230cd62cb3ca8a1bc1d4a4bb4337c1d
Validity
Not Before: May 11 00:00:44 2025 GMT
Not After : May 12 00:00:44 2025 GMT
Subject: CN=d5968e244ae464b1b1441c51421e75f8cd1169c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bd:88:b1:e2:d1:67:36:eb:e0:4b:ef:4d:fe:
b0:48:f3:ff:a1:78:09:2b:b3:28:23:86:fd:c7:4e:
0d:2d:e7:e9:48:c2:d8:68:f1:1b:6f:33:70:84:68:
ab:a0:fc:41:41:0a:1d:3a:74:3d:96:2c:52:ed:e7:
28:21:d1:13:54:f3:df:6c:a1:28:7a:01:02:7f:a9:
ec:ae:f2:b5:0f:39:98:d9:ea:57:01:7c:f9:55:9d:
63:85:6f:5f:58:d7:91:a4:1a:46:2a:6d:b5:5f:35:
ca:ed:70:24:f6:55:29:eb:df:c6:b4:7e:74:d1:3f:
0e:78:2e:75:4a:22:dc:74:55:c6:9d:45:46:db:c2:
3c:0f:f3:ad:15:10:d9:ef:36:ee:98:56:85:43:83:
a1:9e:d3:3d:e8:08:ab:b9:83:b4:f4:b3:06:e4:60:
ad:68:c9:dd:13:03:66:d0:f4:a1:47:38:07:de:c1:
03:23:7a:d1:69:a1:3d:7e:84:5b:91:e6:df:b9:1a:
45:74:2c:60:98:55:c7:23:c4:30:c8:f1:56:96:9d:
c2:79:69:c6:ca:15:29:28:99:bf:3e:77:56:03:1d:
85:6b:1f:36:b7:2f:2e:31:54:ba:74:4d:4d:19:da:
06:1e:79:e3:90:1d:a4:86:09:29:44:93:7b:78:13:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:96:8E:24:4A:E4:64:B1:B1:44:1C:51:42:1E:75:F8:CD:11:69:C8
X509v3 Authority Key Identifier:
keyid:1F:F2:CF:1A:62:30:CD:62:CB:3C:A8:A1:BC:1D:4A:4B:B4:33:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H_LPGmIwzWLLPKihvB1KS7QzfB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6a48a7-0c01-4aca-b431-6cedcf234975/1/H_LPGmIwzWLLPKihvB1KS7QzfB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:41:d3:04:11:26:0d:18:ac:5a:28:b2:01:4c:b2:2f:fe:c3:
0c:91:f1:9f:16:3e:4d:4a:01:fc:a4:99:c1:b1:e3:7b:2c:dc:
06:87:bf:31:ed:47:9e:2e:e3:82:02:d3:6a:ea:1e:63:e5:2e:
8f:62:05:37:fe:06:fe:6f:b4:dc:55:92:6e:b4:e6:d1:ab:e8:
20:c5:4e:2f:59:78:31:92:54:96:d2:78:01:c7:a2:08:f0:ef:
3f:21:ee:d1:63:de:7f:f3:37:53:f5:dc:1b:61:96:e2:b0:b1:
d0:e4:4c:69:f8:33:de:19:ba:dd:42:eb:9c:4c:4c:91:d9:f4:
71:79:f0:d7:8d:68:01:e5:a2:01:4a:f0:86:25:ad:d1:b7:3d:
0b:c9:d1:a4:12:43:f1:7b:87:e7:bf:cd:bd:e6:0c:96:be:80:
90:23:7d:4e:5a:89:d6:91:d1:60:66:ec:cb:e7:18:cd:ee:d5:
fe:01:b1:c7:55:a7:46:85:01:5a:b2:14:a4:d9:38:9f:88:6e:
99:64:3e:09:0a:46:f7:83:d8:0d:c0:e3:a7:a0:ad:6f:c6:34:
00:f6:f4:04:4a:1a:80:22:b8:5e:b3:63:8f:f1:35:31:43:db:
cb:8d:03:10:e1:c3:06:61:8a:b0:23:e6:20:1f:6b:16:fc:aa:
2a:99:01:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:46:07 2025 by rpki-client