Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File: _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier: ilzJiHTxTUSsFbDg6QQDsdzL+fuE0RdRt3yzfWnA0sg=
Subject key identifier: 72:DD:23:8E:E2:2D:70:37:52:5B:34:4D:A4:71:05:F3:1A:FF:61:62
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer: /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial: 0196D250D46DA482E23F8D55D4F2435050D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number: 11DD
Signing time: Thu 15 May 2025 05:00:34 +0000
Manifest this update: Thu 15 May 2025 05:00:34 +0000
Manifest next update: Fri 16 May 2025 05:00:34 +0000
Files and hashes: 1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: NOapUiSEjDOJbYavEHxqvgIt5wHMRCCD6qoAi3B7uQw=)
2: m1aho7A62fK7s2UNnicExFjE6us.roa (hash: ADQVW+bl8YrIssIav1fCxE/xWNAztKLL5kf78n8W9UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:50:d4:6d:a4:82:e2:3f:8d:55:d4:f2:43:50:50:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Validity
Not Before: May 15 05:00:34 2025 GMT
Not After : May 16 05:00:34 2025 GMT
Subject: CN=72dd238ee22d7037525b344da47105f31aff6162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:13:85:ac:7f:9f:15:55:07:dc:2f:3d:a3:
f7:0d:2e:91:66:a2:c5:94:1a:3b:08:9a:97:6c:d3:
52:36:3f:10:61:7e:4d:30:bf:b7:83:d6:47:8a:b2:
24:1b:a2:1f:84:20:6e:9a:d3:d2:8e:04:44:4e:49:
6c:81:73:8f:9e:d1:ce:62:90:87:64:5d:0d:3b:36:
ce:29:97:3c:3f:ca:1c:39:94:cd:61:82:15:a4:3b:
8e:a6:e7:1c:da:0c:62:c7:62:82:5f:ce:5f:b6:d6:
bc:88:28:85:58:9b:37:66:15:07:f6:fe:92:6a:5a:
c4:3f:f5:a9:be:55:04:4c:e4:97:91:17:b8:23:7f:
9e:a6:5f:4b:da:d6:3f:51:66:b6:c7:cd:18:3c:5f:
d6:f9:03:af:86:d1:85:da:33:cb:3c:90:09:2e:d8:
ca:b0:85:ac:cc:e0:74:f8:c2:e0:8e:c2:4e:a3:6e:
d5:a8:f2:0e:04:18:59:6d:cd:6a:b7:ee:b7:8d:ee:
08:e9:83:d4:4b:4b:af:4a:df:8a:b9:0d:19:34:08:
7c:f6:06:1d:97:4a:26:da:63:0d:53:d9:73:df:d3:
3d:a2:e2:dd:c8:85:7f:fb:9b:f4:ac:ea:9a:a2:71:
7d:6f:9e:61:66:9b:42:14:6c:85:7f:ed:e1:b8:c0:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DD:23:8E:E2:2D:70:37:52:5B:34:4D:A4:71:05:F3:1A:FF:61:62
X509v3 Authority Key Identifier:
keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:45:18:24:e9:d5:28:36:4f:86:b2:80:f2:f8:1f:e9:cc:5b:
d1:3f:8d:c9:43:37:89:6a:e1:51:40:31:24:ea:3a:dd:13:3a:
b2:38:ad:bf:a5:54:7b:47:e4:54:af:a0:11:a0:34:76:09:14:
d6:c6:bf:39:b8:a2:93:a0:6f:68:d4:38:ef:72:d0:c3:10:1a:
ed:b2:58:ec:d8:a7:3c:dd:4d:8e:74:80:8e:f6:14:72:13:73:
7a:28:43:f6:85:57:8c:ee:dc:85:38:5d:92:33:37:cb:09:31:
90:b7:07:12:65:7c:62:95:b9:37:4c:25:ac:08:8a:13:a8:6a:
ad:e7:fe:92:27:4f:4a:54:f7:08:2c:8a:9b:95:d7:af:49:2d:
a0:e5:a0:97:4b:df:a7:51:2d:31:fc:e9:e4:02:33:be:da:ab:
06:5a:4a:79:e4:03:e8:da:23:35:1a:fa:f9:56:34:57:57:c6:
50:34:fa:b6:0a:ee:cd:c0:b1:05:90:36:2c:32:1d:a0:ee:52:
29:7f:74:c3:ce:bb:0d:1f:43:71:f5:15:af:9c:72:1e:cc:04:
a8:92:0f:ae:5c:d4:18:71:d2:6b:e1:bb:84:bc:90:a6:aa:b5:
e6:8a:45:1c:1b:d4:ac:95:2e:d8:42:2a:14:c9:da:db:83:97:
aa:7b:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:03:20 2025 by rpki-client