Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: SZQRhOpmHtT7htNeLI3Vw//PEZ5eQoPdy6/j1GprAdc=
Subject key identifier: B8:3B:AE:31:D4:EB:BD:B7:85:F1:DC:7D:8D:C6:2F:C8:F2:6C:80:98
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 01969F08444F3FA18CCD68CE4674FCD9AF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 043B
Signing time: Mon 05 May 2025 06:00:41 +0000
Manifest this update: Mon 05 May 2025 06:00:41 +0000
Manifest next update: Tue 06 May 2025 06:00:41 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: /6YNr9SOlbspJzv31Gi+I5FefudoutT0eGQRXaMOfks=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:44:4f:3f:a1:8c:cd:68:ce:46:74:fc:d9:af:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: May 5 06:00:41 2025 GMT
Not After : May 6 06:00:41 2025 GMT
Subject: CN=b83bae31d4ebbdb785f1dc7d8dc62fc8f26c8098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:d1:94:5b:77:a0:ee:c1:5d:db:f3:db:46:
4c:7e:8b:56:a8:3f:c7:7b:12:1b:be:c3:a7:cf:af:
c5:f5:03:1a:a6:67:46:5a:4f:19:8e:b1:be:2e:0a:
83:3f:c2:ef:2e:38:b5:d9:5b:ce:fb:f3:4b:03:43:
30:1f:72:3c:81:7f:fc:f4:b1:74:06:10:3d:9b:d1:
56:00:4a:0f:01:a8:ba:fd:e5:b9:13:fa:15:25:07:
af:54:79:23:9f:a5:69:fb:ba:c5:92:3e:a6:e4:8b:
33:5c:00:2b:27:fe:d9:52:0d:d4:c8:2e:5e:31:fe:
3c:42:ed:fa:5e:7b:f1:15:a5:22:d2:21:dd:e6:f9:
62:7a:37:78:8e:79:45:27:77:f0:f3:be:4b:94:0f:
a2:00:76:b3:51:20:ce:74:0a:3c:a4:31:47:51:27:
ec:c3:8a:16:78:81:49:4a:fd:c4:0a:05:b1:7c:4b:
38:5e:fe:4a:fe:21:c9:79:51:07:f1:a4:dd:42:87:
cf:b3:80:1a:96:17:50:99:f6:22:c9:f8:ec:17:6f:
21:b3:d7:95:3b:1a:b0:63:b6:db:be:91:d9:f4:ec:
e7:cf:c6:08:c2:c9:4b:cb:91:5d:44:40:1f:6e:e5:
2c:83:1f:75:34:01:25:2b:6a:67:1a:5b:34:7c:61:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3B:AE:31:D4:EB:BD:B7:85:F1:DC:7D:8D:C6:2F:C8:F2:6C:80:98
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8e:f6:89:8a:07:a3:9d:35:67:12:15:0b:cb:59:ec:c1:d8:
87:e1:14:4d:5b:e6:fd:90:5e:65:33:a6:d0:b4:cb:c3:81:a4:
4f:f3:c6:54:b3:10:78:96:c4:5b:71:99:fe:5e:00:e2:20:f8:
17:77:47:18:d5:60:80:fe:59:36:82:42:fc:db:44:dd:5d:49:
44:38:ee:7e:11:2e:c9:72:41:e4:67:bb:a7:4b:a4:2f:07:0b:
59:37:94:dc:3b:0d:10:ac:f7:ec:a3:ab:52:81:42:35:d0:4a:
dc:d0:d0:bc:ac:c6:3f:eb:d4:61:3a:43:e8:44:c2:57:4a:76:
be:19:06:41:b2:84:47:3b:b5:1f:e4:f3:57:a2:11:18:74:b2:
a3:58:fc:73:a8:80:d9:a8:2f:a4:35:01:6b:1d:3b:72:b3:47:
44:d0:96:a2:da:82:28:4f:37:b8:cc:36:fc:1f:b3:c0:31:15:
83:c3:d6:e1:2d:67:43:0f:c0:49:8a:b2:8a:a4:54:8b:23:00:
a8:af:16:43:9c:5b:16:ef:23:16:c6:c8:60:43:0a:ad:70:fe:
ba:67:de:58:73:4e:ae:9b:46:67:3a:35:5e:21:a5:07:18:7a:
49:ff:90:17:15:56:e1:2a:9a:cb:0f:02:cb:db:44:63:6b:1e:
42:a9:25:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:15:19 2025 by rpki-client