Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
File: h-ll54gxqIuo-kGUMqnXusnbOKM.mft (raw, json)
Hash identifier: pv0ZUCjIUjwlz71YQQjaoayBSfm48TDwKbyq42o+Uhk=
Subject key identifier: 06:E6:23:3C:52:E8:EE:B8:63:37:0F:BB:F9:FB:DD:B9:9E:20:78:0F
Authority key identifier: 87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
Certificate issuer: /CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Certificate serial: 0196CA60257174C064816D081F8430618826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
Manifest number: 05CE
Signing time: Tue 13 May 2025 16:00:20 +0000
Manifest this update: Tue 13 May 2025 16:00:20 +0000
Manifest next update: Wed 14 May 2025 16:00:20 +0000
Files and hashes: 1: LeauqIgA77Guz7NTqsqggxkb3OM.roa (hash: kn3sF5o0HTuBHvbByMR9Dn62yBg3LuqPb4rgaycQgmQ=)
2: h-ll54gxqIuo-kGUMqnXusnbOKM.crl (hash: lfp6SrdAbMaUm1HpEb84DAPDqU1SDBop4IHqweh2WaI=)
3: tb7b-pMyLuFzVUUaYd4D0tYvrVM.roa (hash: kplquuozq7s5NkeQhsxsJ048qcIZPUbW30XHKIIbIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:25:71:74:c0:64:81:6d:08:1f:84:30:61:88:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87e965e78831a88ba8fa419432a9d7bac9db38a3
Validity
Not Before: May 13 16:00:20 2025 GMT
Not After : May 14 16:00:20 2025 GMT
Subject: CN=06e6233c52e8eeb863370fbbf9fbddb99e20780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:f8:8a:c8:4d:8d:fc:5e:ab:f6:c8:36:45:
cf:06:c3:aa:39:e6:62:06:b2:3d:e3:53:90:35:78:
ae:a8:5e:db:77:4b:a3:2e:7e:c6:8b:33:d0:fe:4f:
e9:d5:14:91:d7:27:c4:47:93:d6:e1:37:f3:aa:7c:
df:d3:01:51:ba:14:2c:6a:24:95:ea:ed:13:e6:60:
71:f7:97:63:93:49:16:21:0a:ba:fd:77:ce:7b:dc:
48:63:78:74:83:9b:99:03:14:f9:38:0d:8c:07:3e:
45:09:86:4c:a3:eb:03:5b:79:66:ea:81:60:6e:b5:
a7:20:96:a3:0c:2a:91:c9:36:a5:bc:40:b6:93:7c:
c7:e7:3e:94:4f:e7:d0:dd:f3:53:88:5a:83:ad:73:
f5:a0:41:0e:2e:b2:83:c1:da:9d:e9:09:c3:8d:bf:
ce:b6:1d:49:85:31:67:58:1e:9d:3f:0b:a8:46:35:
49:b5:ed:fa:ba:c7:5c:4c:bf:d9:3f:43:dc:08:9f:
22:31:b5:a5:32:ff:83:1a:8f:ee:f6:a1:e5:fe:73:
75:b6:ee:c7:69:b0:a3:07:05:3e:c8:9d:a2:53:c1:
0d:53:5a:00:21:de:f9:a1:4a:05:e1:db:1a:41:b5:
17:90:62:f1:08:4a:4d:4d:0b:13:e2:09:c1:eb:bc:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:23:3C:52:E8:EE:B8:63:37:0F:BB:F9:FB:DD:B9:9E:20:78:0F
X509v3 Authority Key Identifier:
keyid:87:E9:65:E7:88:31:A8:8B:A8:FA:41:94:32:A9:D7:BA:C9:DB:38:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-ll54gxqIuo-kGUMqnXusnbOKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/050533-a57e-4a8b-bf0d-cee3b492902e/1/h-ll54gxqIuo-kGUMqnXusnbOKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:be:c3:f4:e5:81:70:62:3a:07:7f:d6:23:41:fc:04:63:38:
b7:c2:dd:7b:b3:47:f3:90:53:47:45:6c:df:0a:40:53:a8:5d:
fb:ba:c0:ad:ad:71:2d:50:1f:ac:4e:f4:ea:67:ab:9a:cb:64:
ec:bb:2b:61:28:84:d0:aa:ff:0d:51:5c:03:a8:10:85:16:2d:
7b:7e:f4:e1:95:76:36:67:e3:ea:68:3c:8d:2e:36:b6:52:5e:
3c:da:4c:a1:6d:02:06:a0:8e:84:26:7d:29:8e:0e:66:f2:6c:
15:50:1a:ed:49:88:83:cc:fe:18:38:2e:13:2d:96:3c:b2:32:
94:bd:05:10:fe:18:8b:fa:2c:c5:ec:e9:fd:db:45:82:4f:f1:
1a:1d:41:af:79:9e:64:72:79:a6:9c:0e:27:98:2f:6c:ef:6c:
b2:94:31:bb:b9:51:86:cc:64:84:b2:f5:a7:36:93:14:7b:4e:
86:ba:30:28:69:78:d6:d7:85:d0:de:02:51:02:f2:8d:31:16:
fd:7f:8e:0f:0e:bc:d8:c9:b3:ce:8f:e1:f1:90:c5:d6:53:30:
02:df:23:75:33:09:73:fd:4d:d1:06:fc:43:0a:76:d0:43:e1:
79:ca:87:b9:f8:a3:4d:02:90:77:dc:6b:38:12:3a:24:a2:16:
bf:4c:82:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:11:18 2025 by rpki-client