Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File: h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier: XNtEIOl2LMxFtsUHUH/z/FvK6aEQX6aZK4ZLioqzi8w=
Subject key identifier: 4A:6F:26:B4:25:0A:7A:04:35:F1:EA:E3:FA:8A:BE:68:3B:6D:9A:B3
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer: /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial: 0196C15D986131EB723F3501C279BB42DF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number: 08BE
Signing time: Sun 11 May 2025 22:00:58 +0000
Manifest this update: Sun 11 May 2025 22:00:58 +0000
Manifest next update: Mon 12 May 2025 22:00:58 +0000
Files and hashes: 1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: PGvG1DaBYMuENvmy+9yve00kPHDECTLirYqmC5LK2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:98:61:31:eb:72:3f:35:01:c2:79:bb:42:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Validity
Not Before: May 11 22:00:58 2025 GMT
Not After : May 12 22:00:58 2025 GMT
Subject: CN=4a6f26b4250a7a0435f1eae3fa8abe683b6d9ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:86:d7:40:28:8e:6b:9f:e0:94:f3:1f:c9:
5c:d9:66:15:65:71:f0:3b:8e:e1:87:59:82:1d:94:
94:0d:0b:6b:1f:a1:8e:d7:e1:f1:46:e8:74:2d:1b:
7d:5f:2b:7f:89:56:cb:45:27:56:c1:43:e9:03:b1:
eb:88:f6:e0:1d:56:a0:03:af:be:b3:82:ff:e2:f9:
30:15:60:aa:60:09:80:4c:2f:bf:f5:39:3c:44:b5:
7d:6c:72:01:73:e3:08:64:c8:c1:89:42:2b:c6:6e:
da:cb:9d:27:e0:e1:72:bb:ac:ef:59:60:22:20:90:
65:d1:94:1b:95:1a:a4:97:1c:9f:c2:aa:ae:69:61:
ea:11:6f:57:c7:db:cb:93:20:c8:ab:02:84:2d:42:
50:f2:64:6e:7f:68:22:f1:1e:22:53:ad:64:3e:5f:
c3:8e:c9:7d:1a:68:b5:78:a8:66:03:ce:ff:18:7a:
34:96:00:18:98:00:ed:50:48:ca:c5:13:79:64:cd:
5f:2c:4e:48:82:03:cc:24:f9:4d:d5:ca:39:67:2e:
95:2c:21:27:ae:74:f0:23:9f:df:99:0d:ff:b8:15:
c7:28:bb:6b:d3:3d:27:07:b1:cc:67:ce:b9:eb:da:
30:14:79:d8:2e:96:6f:32:2d:bb:bf:f9:8b:d7:9e:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6F:26:B4:25:0A:7A:04:35:F1:EA:E3:FA:8A:BE:68:3B:6D:9A:B3
X509v3 Authority Key Identifier:
keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:0b:65:67:ec:63:37:3d:1c:ca:d8:1d:a2:2c:8c:45:c3:
b5:8c:91:a2:58:b9:97:ab:4b:74:3d:bd:01:41:63:2b:a8:77:
e9:85:18:2a:29:93:df:c9:cd:83:13:f2:91:df:fa:5d:ea:1b:
5c:b8:70:fe:33:6e:c1:86:58:fb:85:19:fd:84:f4:6e:3d:4b:
1a:b0:79:98:df:14:be:f9:b9:55:79:fa:72:b8:90:79:b3:f1:
79:34:7b:f3:34:e9:cf:aa:01:26:4b:d8:f2:8d:4d:b5:bd:38:
cc:8a:67:29:53:e6:7c:07:57:65:86:5c:91:6e:94:11:99:e1:
6c:5a:d8:98:3d:95:13:45:35:5d:64:78:77:69:46:1b:fc:68:
f6:63:97:7d:7f:f8:52:ed:e6:7a:2d:b8:56:24:9b:99:e4:f2:
5e:ad:6c:a8:27:87:f0:86:04:36:fe:1e:22:a9:c8:e3:44:00:
1f:dc:37:30:2a:4d:d0:ea:04:68:1c:41:ef:a1:ad:bc:7b:1d:
12:45:dd:57:4c:ee:bf:29:24:57:d9:6b:f4:f1:6a:09:41:96:
ed:80:2b:b6:0b:54:28:85:25:a9:38:c4:e4:08:36:cf:3b:5b:
c2:91:6f:ec:16:07:6c:db:48:9a:40:7d:37:84:2d:34:ce:20:
f5:4b:a6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:09:36 2025 by rpki-client