Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
File: H6isN_lpUWlif3XgmJYzlt6WOMw.mft (raw, json)
Hash identifier: wXiMNJWBAfajCSWweU+8jJ42DySjxi43Hb6u1lHiCmc=
Subject key identifier: E8:80:87:93:3D:91:E8:B2:53:2B:D8:B4:41:D4:AF:F7:EB:9F:60:D9
Authority key identifier: 1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
Certificate issuer: /CN=1fa8ac37f9695169627f75e098963396de9638cc
Certificate serial: 0196D25101461579093EB84787A51B3A441F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
Manifest number: 1540
Signing time: Thu 15 May 2025 05:00:46 +0000
Manifest this update: Thu 15 May 2025 05:00:46 +0000
Manifest next update: Fri 16 May 2025 05:00:46 +0000
Files and hashes: 1: EV_VJQ7znLLT_4jLuRQdPiIqgco.roa (hash: D3X5PT8yDu7pN/mU+PmRQS2ADQ706uf76HlBQmopR6o=)
2: H6isN_lpUWlif3XgmJYzlt6WOMw.crl (hash: vRcML1ntU/lS/VQgv65JpRD6IhNh92wPyusHmGoV4rU=)
3: _A233dG0OsivwYkQExiSR967RqA.roa (hash: W1a0C5qkdasTQfph8n3hvMTYG6/PIGL4cSCJYs2ipZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:51:01:46:15:79:09:3e:b8:47:87:a5:1b:3a:44:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa8ac37f9695169627f75e098963396de9638cc
Validity
Not Before: May 15 05:00:46 2025 GMT
Not After : May 16 05:00:46 2025 GMT
Subject: CN=e88087933d91e8b2532bd8b441d4aff7eb9f60d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:aa:a7:cc:b2:44:b6:65:d2:81:47:99:01:66:
bf:9b:bf:bd:33:e2:38:20:4d:6d:98:17:5f:0d:19:
52:d9:f0:c1:5f:94:f5:29:16:dc:dd:f6:cf:86:8e:
86:c3:ce:80:63:4f:c2:ec:4b:66:2d:a2:77:44:eb:
35:f9:22:25:97:b3:6f:9a:2c:a5:e7:0d:42:17:b5:
06:42:0b:26:43:9e:eb:9e:74:78:75:4c:6f:6b:31:
b2:92:83:36:f3:65:a7:fc:ad:44:ef:12:a5:d0:58:
54:b9:42:f1:fe:cf:10:51:0e:75:a4:69:fa:e7:d9:
5c:cb:45:09:f7:db:5f:40:14:a4:28:f9:a0:4b:75:
03:f5:dd:fd:2e:4d:6a:e3:d8:33:76:0b:c0:52:45:
f2:b9:42:ed:b2:52:45:fd:69:59:9a:c4:54:3b:ab:
22:9e:ba:ea:cf:48:52:c9:15:34:cd:53:05:04:91:
fa:bd:70:a1:88:e6:7f:36:90:9b:d9:10:05:05:67:
5a:4f:49:d2:46:1c:f3:6b:7d:6c:dc:0b:a4:b8:9b:
42:4a:3f:21:c1:68:f3:30:3b:d5:12:5a:03:4f:fb:
25:58:78:36:87:55:a9:c9:c5:00:e1:66:a2:c0:0f:
90:b8:b3:eb:5e:27:0e:f9:1c:3d:99:98:20:8c:e5:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:80:87:93:3D:91:E8:B2:53:2B:D8:B4:41:D4:AF:F7:EB:9F:60:D9
X509v3 Authority Key Identifier:
keyid:1F:A8:AC:37:F9:69:51:69:62:7F:75:E0:98:96:33:96:DE:96:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6isN_lpUWlif3XgmJYzlt6WOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/H6isN_lpUWlif3XgmJYzlt6WOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:43:cc:29:9f:53:cf:9c:f0:43:bd:fb:5b:63:58:88:6c:e2:
de:3c:5c:ad:94:ba:1d:d7:e7:28:0c:8d:a7:85:9c:df:0a:66:
ec:cf:19:c9:7c:de:22:44:b7:3f:fa:3d:02:85:80:ba:c0:c2:
a8:74:88:61:fd:11:12:ae:2a:d4:f2:9b:b8:4e:48:3b:bc:74:
39:91:51:ca:ce:51:80:6c:2f:0f:d3:a2:74:df:92:fa:3d:2d:
34:4f:5f:88:6f:87:6f:e9:d7:47:d0:bc:95:11:53:71:3f:42:
71:37:8f:74:82:ea:e4:21:59:80:96:34:7b:60:f5:27:0d:4e:
6b:44:cc:5c:ef:52:0b:f6:80:1c:db:8c:51:30:d4:32:09:e5:
33:19:57:e7:f8:cc:9d:27:0f:0b:9c:a4:d2:7f:88:af:6d:ef:
84:aa:fe:b3:c1:56:03:9d:51:1f:c0:95:0a:81:eb:08:b7:5b:
4b:78:58:2d:e1:f4:52:f0:09:d2:8e:d0:fd:84:1e:df:78:ad:
84:2e:dc:94:26:fe:b4:dd:5e:47:05:64:36:bb:74:5e:60:fb:
85:27:dd:62:42:23:25:48:3b:f4:ef:82:14:55:e6:d0:50:91:
28:80:76:b2:aa:e8:02:ca:77:3b:ed:08:47:9f:d2:7b:ac:b8:
97:f6:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:05:09 2025 by rpki-client