Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
File: H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft (raw, json)
Hash identifier: PCue7PZVPn1+9QokoUoCx+Cmlcu5F38tGFA59pL2Kgk=
Subject key identifier: FE:EC:63:AB:EA:6A:8C:FF:22:83:F5:14:7F:05:FE:9B:B9:B8:50:E6
Authority key identifier: 1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
Certificate issuer: /CN=1f74988332069e1835246a85a1094125152b3765
Certificate serial: 0196C45E5BE3176FE38A9DA25D0986EAA676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 12:00:40 +0000
Manifest this update: Mon 12 May 2025 12:00:40 +0000
Manifest next update: Tue 13 May 2025 12:00:40 +0000
Files and hashes: 1: H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl (hash: Pje+QRQAiU+ucSJ8r31sMcQUdn1ROCLfbMWtNkFQJIY=)
2: JExy0vnBpyXtQRXrczW-rXsvlvc.roa (hash: uayvEFxY8m7ytIfb/FnA/i1VKT8AyOarqBsheJam/Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:5b:e3:17:6f:e3:8a:9d:a2:5d:09:86:ea:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f74988332069e1835246a85a1094125152b3765
Validity
Not Before: May 12 12:00:40 2025 GMT
Not After : May 13 12:00:40 2025 GMT
Subject: CN=feec63abea6a8cff2283f5147f05fe9bb9b850e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:df:0d:09:9a:b7:df:57:af:8b:f1:ac:49:e8:
83:1a:52:d8:20:b2:72:3d:92:eb:f5:ee:5a:75:d4:
6f:8b:a3:fa:4c:eb:f3:8b:10:23:8d:64:f8:85:5f:
5b:b9:8f:f5:1e:95:5c:52:f4:58:1f:fd:dc:e7:93:
96:32:57:65:d3:95:df:70:b1:78:e0:bb:cf:80:3f:
99:2a:f0:ca:5a:a2:50:ea:77:de:f5:5b:94:b8:1e:
a6:01:c5:c4:ca:e2:19:14:2d:64:44:93:5f:9c:12:
20:ad:c5:ec:82:26:30:81:54:05:0e:38:6f:08:c7:
9d:68:f5:8b:d3:27:99:f9:eb:f8:6c:38:18:ab:61:
c1:a5:37:76:cc:a2:aa:d4:8a:b0:cf:ec:fd:04:e8:
b3:3a:49:bf:1f:56:b7:27:da:38:18:60:e5:17:e5:
b8:34:5b:71:74:f4:e7:e7:f1:a9:76:87:c3:40:ef:
88:22:f4:78:b3:60:48:6f:1a:32:78:b6:b1:c9:4c:
5f:ff:4b:d1:51:fd:6c:38:85:5d:1c:65:76:71:d4:
79:33:9c:5d:74:91:25:3a:2c:5b:42:32:9b:61:df:
a8:a1:30:5f:82:39:bf:40:ca:71:d6:2f:7a:74:1c:
47:80:71:84:fa:8d:45:bb:99:84:4f:7d:b0:28:a0:
e0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:63:AB:EA:6A:8C:FF:22:83:F5:14:7F:05:FE:9B:B9:B8:50:E6
X509v3 Authority Key Identifier:
keyid:1F:74:98:83:32:06:9E:18:35:24:6A:85:A1:09:41:25:15:2B:37:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3SYgzIGnhg1JGqFoQlBJRUrN2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/3fa45d-61b6-4a26-8d7f-8d9d752c4f4a/1/H3SYgzIGnhg1JGqFoQlBJRUrN2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:25:a6:d0:61:6f:4a:42:86:4c:7a:ba:bf:f1:ad:22:39:e2:
d1:14:1e:9e:a7:70:0a:3d:0f:d8:c0:3d:9e:fe:f8:88:b4:29:
38:30:73:26:f9:14:0e:38:6f:27:0e:88:9c:ad:51:ce:e2:61:
3c:de:15:bf:b9:3a:d5:3d:71:a6:ca:16:73:f7:b7:cf:32:1e:
16:ba:ff:8c:80:b5:7f:4b:a3:6f:ec:aa:9b:b8:65:3e:dd:8c:
28:0e:fe:1d:35:fc:5c:d8:74:eb:64:1a:c1:ba:6f:a2:bd:65:
83:e8:d3:79:e2:e1:77:56:22:64:0f:d2:0e:63:69:dc:7b:90:
80:ed:c7:f9:f3:79:04:21:0a:ad:2d:82:57:9b:6a:ec:bc:86:
da:e8:8f:42:61:c1:53:1e:b0:13:e7:b7:e9:bf:ca:65:bb:c3:
13:21:c6:e1:db:0e:e5:8c:ae:d1:c5:37:2a:ff:43:3e:ea:6e:
b6:68:12:af:35:d0:ae:0c:10:b8:07:78:0e:f4:0f:97:e9:fa:
0b:03:3e:81:d3:8d:87:fa:82:d0:c7:36:bd:5c:9d:f7:00:b8:
0d:6f:33:e9:f7:fe:b0:5d:d1:92:2c:bb:89:91:24:f5:0a:44:
9b:f7:4c:c6:41:54:da:05:a7:12:03:be:d5:ed:85:3f:58:35:
ca:bc:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:01:32 2025 by rpki-client