Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
File: H8WVWUC711Vd8KLkFzefxEfvDNw.mft (raw, json)
Hash identifier: 9KS1Oq3yseRl3k5Q6lzIUbqhZwQGXPxCl2etqU2Bd+E=
Subject key identifier: 00:90:2C:C1:5D:E0:63:79:8D:F6:ED:C0:22:C6:EF:D2:89:0A:2A:8B
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 0196BAB67F67D9D1CB8F4BC085FAEC84CCDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 15:00:44 +0000
Manifest this update: Sat 10 May 2025 15:00:44 +0000
Manifest next update: Sun 11 May 2025 15:00:44 +0000
Files and hashes: 1: H8WVWUC711Vd8KLkFzefxEfvDNw.crl (hash: ft9shiIK5je7K9yEBmMwTnEbFQ+7Kfvmv9p/vNlkUl4=)
2: I-qnYe3pCJJC6GLKlhRXNSOnj7Q.roa (hash: MvvvcuaQB3Ptunhg27MnEt55o6So5bq1V197PASnWPY=)
3: mMhmcSnBtPYU48zDanAOHPsakbk.roa (hash: Q7SwxYVQV3nbpcnCiOpdRYrjGyoIJC6VBvUMsqX3OXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:b6:7f:67:d9:d1:cb:8f:4b:c0:85:fa:ec:84:cc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: May 10 15:00:44 2025 GMT
Not After : May 11 15:00:44 2025 GMT
Subject: CN=00902cc15de063798df6edc022c6efd2890a2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:a4:02:8b:71:5f:7b:1d:f7:12:b3:e9:23:
d7:a8:ee:e6:22:a2:b7:20:b9:48:40:4f:b3:08:88:
05:ce:e8:ce:2d:2e:39:d0:76:24:ac:3b:1b:fe:aa:
51:a5:62:69:ff:e4:5f:44:62:d0:e2:ae:17:f5:40:
13:63:b0:26:57:b9:52:0d:0d:80:9d:8f:2f:df:ea:
e6:55:50:56:19:2e:2b:41:a7:12:92:27:3b:d2:6a:
f6:8c:4e:8e:15:59:4f:f6:ed:32:f2:55:3b:3e:24:
7b:31:6c:9c:d6:51:9b:6a:0f:49:71:57:e2:24:9a:
19:9e:14:8e:6c:30:f1:8c:65:ff:c8:48:fe:84:97:
73:e8:b0:7a:71:c5:73:c5:22:a5:aa:73:bf:a2:21:
7b:50:04:54:04:ff:ec:52:f9:e0:ad:f7:ba:65:80:
a2:d6:d9:d6:09:dc:6d:37:d4:6a:e9:ed:83:14:06:
9c:a3:e9:db:07:50:27:8d:81:d9:c7:43:18:f7:e0:
69:fb:f6:96:5f:20:10:17:68:99:ad:e0:ac:c7:f6:
59:d3:86:d7:3f:d5:22:61:75:26:da:ed:68:1b:df:
be:b9:4b:45:80:57:d9:b4:ba:11:e9:20:8d:2c:a6:
ab:d4:b7:d4:b9:bd:a1:6c:f9:40:a1:da:9b:a6:7c:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:90:2C:C1:5D:E0:63:79:8D:F6:ED:C0:22:C6:EF:D2:89:0A:2A:8B
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ee:11:bf:78:68:79:ac:8e:0c:ad:82:2d:ae:97:1d:e2:1d:
69:fc:bd:9b:92:42:6c:2c:2c:ab:94:84:b2:73:e8:de:7f:3e:
2b:de:c8:e8:53:bd:e9:19:a0:16:44:97:19:a0:a2:29:37:a0:
b7:dc:98:55:04:95:84:fe:80:08:ce:38:3c:c2:5a:d9:48:74:
4c:ed:ac:58:18:b0:73:7b:c3:4d:13:7e:ab:ea:0e:5d:ac:b2:
17:14:ea:a7:ba:2e:21:e3:5e:6a:73:9d:37:e9:72:7e:b7:6d:
e1:1d:d2:83:2c:80:cc:01:4c:f7:18:fc:ab:b2:a4:8b:46:8a:
e5:c6:61:16:21:2d:c7:af:96:86:30:66:2d:d3:a5:67:71:49:
f0:c4:9b:2f:61:98:d5:41:95:08:29:9f:3d:cc:df:21:cc:3e:
2b:6b:47:6d:55:d4:e3:61:85:8e:b1:49:14:dd:d2:05:cb:98:
9d:ce:b1:9a:a4:1c:b8:ca:48:7f:90:19:d5:bd:bb:0a:c3:57:
3e:d4:95:70:12:d2:62:85:73:30:cb:01:02:da:2e:3d:31:0c:
e5:7a:ac:47:f5:5a:62:24:8b:12:db:c0:9f:30:eb:db:0d:9a:
3a:b9:f7:85:66:25:f1:42:04:cf:19:af:a8:aa:cb:b0:20:e0:
91:40:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:41:27 2025 by rpki-client