Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: 7qWvrBVt1MEBG1jKtm6UhqI173r4uL0/8XNCmWU7p7A=
Subject key identifier: D8:64:1B:12:A6:13:E0:40:22:AD:FB:08:71:C6:D2:81:37:CC:3C:38
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 0196BC36E4DA035BA3758956B6F52EFDBB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 096A
Signing time: Sat 10 May 2025 22:00:36 +0000
Manifest this update: Sat 10 May 2025 22:00:36 +0000
Manifest next update: Sun 11 May 2025 22:00:36 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: 9XAoS7sNOn7t44NsfzO8HwAp2MohyNBHSq6fTMgikqY=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:36:e4:da:03:5b:a3:75:89:56:b6:f5:2e:fd:bb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: May 10 22:00:36 2025 GMT
Not After : May 11 22:00:36 2025 GMT
Subject: CN=d8641b12a613e04022adfb0871c6d28137cc3c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:a9:5f:9d:e1:ce:ca:3a:3d:58:ca:85:b9:
38:56:dc:5d:dd:a7:f4:19:3c:22:8f:53:d1:bf:dd:
94:b6:8d:e6:77:a1:12:0e:6b:a6:40:04:b7:f5:bb:
d7:8a:83:74:ae:74:28:4b:35:4f:b5:f6:40:a7:0a:
52:33:e8:6d:8a:93:7c:7b:cf:d3:6a:e8:66:65:b0:
41:fa:ec:c2:e5:bb:57:87:6e:4b:3c:bd:b5:33:ed:
2d:83:83:8a:ba:20:f9:98:d4:b2:cd:06:e9:83:65:
b3:f3:6c:36:58:09:34:30:32:b8:37:18:bc:99:3a:
11:6a:10:04:ed:9c:8c:da:b1:57:60:d1:da:62:51:
54:22:42:96:06:fb:90:7c:f3:0c:63:1e:90:5d:78:
de:58:7f:83:6d:ec:7f:1f:a4:0d:06:18:2e:31:7a:
37:8c:46:61:4a:dc:ec:ae:d0:23:9a:b7:5c:44:f0:
43:97:84:d9:da:2f:c6:9d:77:ea:77:b1:da:be:ad:
ad:8a:58:ed:6b:ac:5f:9d:8c:98:20:1f:a5:ea:83:
50:ef:b6:5c:96:ad:e6:32:33:6d:a8:0f:13:ee:3b:
2c:90:ee:f6:21:29:d7:69:36:44:76:f7:02:72:86:
1e:f3:45:88:65:3a:9c:5e:c9:99:58:bb:ee:b5:ea:
5a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:64:1B:12:A6:13:E0:40:22:AD:FB:08:71:C6:D2:81:37:CC:3C:38
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:94:02:5b:d2:6f:92:fd:9a:f3:f4:08:64:58:a8:32:5f:c8:
8b:86:7f:66:85:72:30:11:76:fd:bc:6c:7b:7f:75:59:d3:93:
bc:31:16:f5:20:e4:93:a4:5a:fd:78:77:33:fb:ad:4e:64:47:
a6:c6:95:0b:54:24:9f:9d:df:f0:9c:9d:2c:6b:13:1e:e6:09:
55:31:a0:33:8f:80:7e:75:de:90:2b:6f:a0:45:7b:94:c9:a0:
79:0b:b8:cc:ee:a1:88:dd:a6:99:71:70:2f:5c:95:12:0e:c0:
8d:6e:36:10:0f:47:1c:be:ce:76:e0:b7:8a:c4:11:7e:f2:47:
1a:77:12:89:c2:65:81:05:14:e7:37:74:50:eb:cf:95:6f:a8:
1b:4e:df:9c:8a:3c:b4:9e:9b:51:98:c5:2b:0b:3f:52:f5:df:
ad:fb:11:eb:db:b8:79:04:40:c6:30:7d:ba:3f:50:34:53:a1:
19:ba:a5:88:95:7c:2c:35:6b:63:17:39:04:58:93:94:d5:52:
46:42:94:ab:1a:3c:b2:a5:3f:7a:de:dd:2d:2e:05:3a:00:5b:
32:dc:9b:ad:ae:48:d6:57:dd:11:b8:cd:54:c0:cf:25:b3:f6:
e0:d8:91:5a:07:85:0e:c1:ab:d6:aa:1d:6c:d7:91:f4:e0:6e:
fd:2b:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:09:29 2025 by rpki-client