Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
File: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft (raw, json)
Hash identifier: ulGwfadN7C3xtweUsUivUrUkntvWqD2Nw8KmvlOhEHs=
Subject key identifier: 7D:C0:96:C3:32:7E:74:6E:87:AB:31:B6:D4:5C:C4:F3:50:A7:E8:2D
Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Certificate serial: 0196C2DDD9D7052C4A969AF61F9FB51034F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
Manifest number: 05B0
Signing time: Mon 12 May 2025 05:00:41 +0000
Manifest this update: Mon 12 May 2025 05:00:41 +0000
Manifest next update: Tue 13 May 2025 05:00:41 +0000
Files and hashes: 1: H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl (hash: EkanwkKzfqE5DSkQFFbkRHcUFaffGphJtCQTkyTkY9Q=)
2: vNb5RJ1NWF9KAT0KbsLINglMmW4.roa (hash: jXTgKmQPGBZpjKgqqLkxLQhegQk4xAz/b6i4eexj5wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:d9:d7:05:2c:4a:96:9a:f6:1f:9f:b5:10:34:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6
Validity
Not Before: May 12 05:00:41 2025 GMT
Not After : May 13 05:00:41 2025 GMT
Subject: CN=7dc096c3327e746e87ab31b6d45cc4f350a7e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:8f:91:15:13:14:17:87:ac:ea:c6:f3:8e:
df:43:b6:db:6e:4f:aa:fc:4c:ff:e1:62:bd:c3:f4:
dc:cc:58:3e:21:4d:b5:37:0d:ff:47:d5:42:5c:8e:
fd:d8:90:30:a4:60:63:51:ef:84:4c:76:bf:07:e8:
e2:09:b8:a7:a6:07:6b:83:fe:67:8c:00:e3:aa:7e:
80:b9:89:28:4d:d0:20:8b:5d:bc:fe:fb:8c:96:66:
14:1f:a8:58:6a:43:b5:42:58:22:5f:08:32:0f:ed:
6f:68:a0:89:42:68:e4:f6:ef:b0:c1:24:33:0e:43:
64:26:c3:65:2a:4d:f6:d6:53:b5:58:32:4a:50:1f:
ac:eb:d3:f2:c9:e3:91:d3:0f:b0:20:aa:4c:fb:83:
c4:70:10:39:8e:76:5e:fc:32:3c:af:6b:d4:2b:fc:
01:1a:26:5d:8d:6d:dd:29:7e:80:48:57:28:68:81:
7f:05:09:9e:b8:04:69:58:29:be:8e:ff:f3:3f:03:
6e:16:9a:df:1c:0e:3e:5d:56:3b:e7:b9:60:86:9f:
dd:85:0a:1d:10:06:58:bf:75:63:dd:b9:e9:85:a1:
f0:43:23:c4:16:fc:21:50:d7:fd:87:9e:3b:6d:73:
4e:13:94:87:89:55:18:61:46:27:c5:77:cf:ed:f5:
f7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:96:C3:32:7E:74:6E:87:AB:31:B6:D4:5C:C4:F3:50:A7:E8:2D
X509v3 Authority Key Identifier:
keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:d3:a5:6b:77:cd:63:a2:dd:f4:b3:27:d1:19:cf:17:82:
bb:14:a8:ea:c3:ce:f5:44:65:02:7a:f7:c3:43:01:4c:27:da:
02:ef:60:cf:8a:d4:b7:a3:b7:0f:90:12:b1:d4:67:cd:ef:60:
64:c0:b1:dc:6f:c0:d5:5d:0d:83:a9:27:95:0c:a5:cd:3a:af:
b1:c6:67:54:2c:17:05:65:2c:95:04:ed:52:2f:bb:b1:2f:de:
d1:f7:43:04:fc:e6:28:76:1d:9a:03:fd:5b:84:00:e7:b7:c0:
e3:26:3d:7b:95:e3:b4:92:b7:e6:2d:0d:e7:33:25:9f:4f:1f:
ec:9b:b5:99:72:23:ec:8a:73:9f:2b:48:b9:cd:77:3e:e6:3f:
8e:ca:ad:49:0c:3a:97:3c:25:28:c6:33:48:0d:c9:77:c7:b6:
52:5f:66:ac:d9:e6:e6:e8:d9:14:11:c1:0e:ec:cd:06:62:1e:
0c:ed:20:05:d7:53:62:61:b4:fd:6a:72:1c:7c:2c:86:5c:41:
e6:bf:2d:1a:7c:9d:db:4e:78:e8:a6:21:7e:c2:20:a8:ab:6e:
e6:73:ff:97:75:87:60:da:06:6a:4c:27:50:56:7d:64:1c:4e:
76:a0:2c:30:ad:b3:21:c1:b8:18:22:8e:bf:26:99:ac:67:5f:
c7:ca:47:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:03:40 2025 by rpki-client