
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: wXqCnmFGBKVb96EMDh0NcRz8YKSku9VZGGh5fOtYtuQ=
Subject key identifier: ED:16:70:44:51:C5:13:EB:46:8D:64:16:3A:60:61:12:B3:14:EF:59
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 0196C9174CC7BBF0B61CD4511FC919EB9572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0B42
Signing time: Tue 13 May 2025 10:01:09 +0000
Manifest this update: Tue 13 May 2025 10:01:09 +0000
Manifest next update: Wed 14 May 2025 10:01:09 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: lA5Zs0mnARwnLmiLzm0QLJsWjvpdFDFExYJcgmaQvKw=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:4c:c7:bb:f0:b6:1c:d4:51:1f:c9:19:eb:95:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: May 13 10:01:09 2025 GMT
Not After : May 14 10:01:09 2025 GMT
Subject: CN=ed16704451c513eb468d64163a606112b314ef59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:20:43:36:89:e0:8a:0f:f6:91:9e:f0:e6:
1f:e9:ea:ee:10:4f:a2:2a:29:2a:69:91:af:c4:b5:
08:af:18:17:24:f2:56:e3:c5:e5:26:c3:d1:77:ac:
78:00:17:9e:a9:86:3a:01:6f:7d:cb:1a:3f:8e:e0:
a8:13:dd:2b:af:b1:5e:b0:96:5b:bf:3d:4a:58:87:
19:c3:aa:63:07:8c:ef:b4:83:b2:81:ec:b7:0f:be:
ac:f9:b1:83:d8:27:c0:1e:39:f8:ec:6a:d4:f3:df:
53:50:98:c4:2e:17:c0:4b:48:28:df:86:99:bf:37:
3b:50:43:58:e5:c6:59:e8:dc:ec:0e:46:8f:cc:74:
a2:21:d2:2c:65:d7:ab:1e:0a:b0:07:fb:b5:ca:e7:
69:b6:9a:28:50:b6:13:2e:97:dd:c0:5b:a0:b9:e2:
d1:72:0b:2a:e8:ce:15:5f:a6:a9:7f:d6:76:53:6f:
fd:51:90:32:c2:60:5b:06:d8:bb:85:45:42:74:2b:
b3:1f:e9:5e:76:21:4f:7a:90:00:38:5d:23:6f:ff:
a0:87:1a:d9:47:23:14:3f:a9:5c:f3:05:71:69:26:
6e:8a:43:53:64:8b:cb:27:69:14:18:2f:30:04:0d:
41:1f:87:82:8d:72:9c:8f:35:64:13:7c:4e:5b:bc:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:70:44:51:C5:13:EB:46:8D:64:16:3A:60:61:12:B3:14:EF:59
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:72:a8:3d:15:f2:e3:02:49:0f:48:96:d1:2e:62:eb:46:c0:
26:80:28:9c:f6:13:e8:8c:0d:c8:30:6a:31:d7:f8:fd:69:0f:
ec:32:50:c4:1f:37:cf:48:66:8e:60:c3:67:13:ec:1a:f8:33:
61:a6:78:11:f0:9f:27:24:01:12:c8:21:f8:03:de:c2:16:54:
f1:34:1b:c9:98:1a:fc:cd:9c:46:4c:ba:5e:f9:67:dc:4d:1f:
19:15:e9:8d:f1:d8:cf:df:5e:66:6b:52:76:ab:c0:a1:81:38:
54:f8:3e:c7:0e:58:47:cc:02:b1:03:41:19:b3:cd:ea:88:08:
2e:1d:ef:4e:2d:2d:23:26:19:19:52:e5:18:cb:e7:d5:a0:46:
83:ff:04:80:3b:fa:69:10:d0:29:d8:86:40:90:d5:2b:04:f8:
8a:3f:ce:18:b0:bf:45:45:5c:be:5a:44:3a:bc:e0:8c:c0:f6:
6c:41:78:07:33:53:a6:d3:11:04:5c:6c:a0:19:f5:4e:2c:bd:
1f:83:f4:bf:36:72:5f:8c:d3:c8:9a:32:5b:5c:86:1d:99:e3:
3c:0e:41:c7:68:f8:e1:36:31:39:bb:b4:ee:7d:7c:4d:74:83:
d9:d9:ec:4b:19:8c:44:2b:d9:17:d9:38:52:6a:ac:02:78:4a:
77:20:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:28:19 2025 by rpki-client