Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
File: 0H3_VH6svoHcNGVZhEbTsCfct20.mft (raw, json)
Hash identifier: jcueH+vvi5ANNiOysfQjkP5LZmPpV4OhG2l/9VDkEW4=
Subject key identifier: 5A:3F:2F:D8:4A:B9:42:20:08:A9:19:56:CE:4B:57:0B:3E:03:9B:23
Authority key identifier: D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
Certificate issuer: /CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Certificate serial: 0196BE5CB07CD8B8D2B224FB53349AA8D1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 08:01:07 +0000
Manifest this update: Sun 11 May 2025 08:01:07 +0000
Manifest next update: Mon 12 May 2025 08:01:07 +0000
Files and hashes: 1: 0H3_VH6svoHcNGVZhEbTsCfct20.crl (hash: XaPpvl4/yZ3Wj38PeKsOkCHIJMUdJlMP+bnxi5i6gzg=)
2: 7ZfxbTG5XE7d3U698g7DhphadTg.roa (hash: Pr0+WF0lvDtFnCz/0c70Eot8c7E9jRvKLuNSr3PuDSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:b0:7c:d8:b8:d2:b2:24:fb:53:34:9a:a8:d1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07dff547eacbe81dc3465598446d3b027dcb76d
Validity
Not Before: May 11 08:01:07 2025 GMT
Not After : May 12 08:01:07 2025 GMT
Subject: CN=5a3f2fd84ab9422008a91956ce4b570b3e039b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:dd:1d:25:00:5b:2b:d9:5c:24:04:c6:5d:
e4:67:57:84:d5:99:c2:fa:d5:44:d2:fa:4e:61:12:
a9:62:b1:1a:25:cd:8d:26:ec:a1:8a:57:b7:f6:44:
1f:39:aa:3e:4b:b1:3a:a0:6e:9e:88:21:a1:fa:18:
b0:ba:18:a7:c8:2a:20:29:41:00:61:29:bb:8f:04:
e8:62:e2:70:5f:ed:e7:56:11:12:df:04:5c:fe:40:
9c:ea:60:bc:9a:c4:06:72:df:84:75:08:bb:bc:a1:
28:9e:55:7e:7a:b4:b5:66:58:e1:65:8e:bc:0f:88:
2c:d8:01:d3:b0:e4:64:7a:a7:a7:9a:53:f6:3a:e6:
23:ac:fe:fe:f5:38:9e:ec:1d:93:ba:87:8f:32:49:
a1:24:9b:01:ee:ec:c2:b6:e8:ff:d6:6d:53:9e:19:
39:5c:c9:a6:2f:d3:23:ea:5d:b3:8e:e5:e2:58:02:
09:ca:34:dd:d8:07:36:a4:37:09:31:2e:64:e0:93:
e3:75:c8:87:32:3f:5c:88:93:f8:30:d7:c2:0f:75:
08:06:cd:d4:c3:3c:fa:d6:ae:01:53:8c:39:80:59:
31:69:65:ee:37:07:09:41:00:3a:d8:9b:95:dd:15:
d0:36:ea:aa:d4:2d:a9:f4:bc:e2:8f:bf:d1:5e:9c:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:2F:D8:4A:B9:42:20:08:A9:19:56:CE:4B:57:0B:3E:03:9B:23
X509v3 Authority Key Identifier:
keyid:D0:7D:FF:54:7E:AC:BE:81:DC:34:65:59:84:46:D3:B0:27:DC:B7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H3_VH6svoHcNGVZhEbTsCfct20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e0e829-1284-4db1-ba48-785ac191b31a/1/0H3_VH6svoHcNGVZhEbTsCfct20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f0:37:4b:1d:42:92:f6:c1:ee:fb:a0:e6:6b:05:87:84:19:
6f:61:10:25:52:be:4e:9c:9b:96:8d:ce:a7:01:0a:c5:b2:dd:
ef:15:70:d3:8d:f8:d0:52:e4:09:c4:26:90:46:9b:d9:65:64:
a7:90:c7:74:8c:22:47:9d:8c:dd:59:f1:84:d5:c3:f3:b5:20:
76:d3:44:0a:af:57:4b:22:38:2e:83:2d:3e:c5:12:a1:b6:a3:
cc:c8:99:89:9b:3b:d8:23:fc:09:76:e9:b4:b0:2f:aa:f1:94:
03:ef:b5:7f:2e:30:60:16:43:ef:ba:ee:16:19:2b:29:8b:d0:
82:65:2f:5f:5d:86:4d:9b:39:55:9e:6b:57:fb:f8:65:52:d4:
4e:11:48:ab:74:4b:26:2e:0c:d1:d9:e1:07:c9:6f:0e:ef:f6:
0c:5b:2b:15:cd:30:43:66:87:61:cb:23:38:ff:02:1e:18:e3:
c4:21:40:1a:61:99:cc:75:54:99:d4:46:53:1e:57:6f:f5:5c:
cd:5d:73:62:c2:7e:55:a0:a3:a4:99:21:ed:b5:c6:f8:41:d6:
ff:d9:b1:82:d1:8e:35:a8:23:6a:03:cd:e0:eb:7b:66:6f:66:
6e:22:bc:c7:07:37:69:50:21:c2:ea:1d:65:27:27:57:37:10:
f4:8e:2a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:23:43 2025 by rpki-client