Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
File: h5kgiOdlXLE0AgypWw5X1Oba9A8.mft (raw, json)
Hash identifier: OypiOzAd1YOqXsjkgCvx/I4QSuvpBoFHHWdoJgHXw0I=
Subject key identifier: 92:E8:C0:9F:FA:E5:5D:4D:94:06:77:9C:AD:90:44:B1:0F:46:AA:58
Authority key identifier: 87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
Certificate issuer: /CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Certificate serial: 0196C53A5A96DCD4F463207A2424EB51FB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 16:00:57 +0000
Manifest this update: Mon 12 May 2025 16:00:57 +0000
Manifest next update: Tue 13 May 2025 16:00:57 +0000
Files and hashes: 1: h5kgiOdlXLE0AgypWw5X1Oba9A8.crl (hash: vdK+fj6qrE8jkcJqA2X7dU5PnD2nY+U4NaRjIS7gkEY=)
2: vH-eK3MDkjfjQIWGcNruZ1gYj6o.roa (hash: X8Ll3xNOyDNsY8OoD7P2fm6g2ckrfD35bOMThe6H4RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:5a:96:dc:d4:f4:63:20:7a:24:24:eb:51:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87992088e7655cb134020ca95b0e57d4e6daf40f
Validity
Not Before: May 12 16:00:57 2025 GMT
Not After : May 13 16:00:57 2025 GMT
Subject: CN=92e8c09ffae55d4d9406779cad9044b10f46aa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:71:4a:64:74:14:3f:f6:37:a6:08:4f:76:29:
ea:ef:55:0d:46:35:2b:50:ab:c3:7d:d3:72:ed:c5:
fe:43:61:43:12:d2:71:c1:fa:19:a5:c4:e2:ce:01:
5f:8b:a7:be:ef:a0:cb:9b:6a:18:e2:e6:50:c5:b6:
4e:6c:0e:23:29:a7:73:29:42:ee:85:0f:b5:57:78:
22:3e:f3:da:f9:32:b0:ab:65:5d:94:60:90:26:c1:
a3:34:80:67:c7:ea:46:c8:1c:29:e2:f3:22:d2:26:
db:07:7f:df:8c:70:0f:a6:27:7d:e9:14:86:92:35:
8c:2b:a2:8f:a9:98:54:f5:e8:41:be:b8:5c:ce:5a:
66:27:97:c1:a2:2a:15:31:d6:9c:fb:df:28:6e:eb:
0d:60:29:2b:c0:0f:74:ce:fb:64:dc:d4:bb:fc:73:
7e:49:e3:73:7c:2e:06:eb:ab:58:4c:35:fc:d4:71:
aa:61:50:42:8e:cc:00:6c:8b:23:26:a7:d3:e3:ff:
18:86:03:4f:3f:fd:da:65:68:5e:bb:5a:ed:48:83:
c3:e8:2e:d2:4f:2c:8a:f3:70:6c:90:2e:bb:31:83:
bf:d1:d5:e2:45:a8:92:05:67:d1:1a:65:f6:4b:90:
2f:8a:7c:89:7f:ab:11:44:c9:e2:82:bf:6c:d0:ce:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E8:C0:9F:FA:E5:5D:4D:94:06:77:9C:AD:90:44:B1:0F:46:AA:58
X509v3 Authority Key Identifier:
keyid:87:99:20:88:E7:65:5C:B1:34:02:0C:A9:5B:0E:57:D4:E6:DA:F4:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5kgiOdlXLE0AgypWw5X1Oba9A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e08318-2975-417a-b863-85ea63c24474/1/h5kgiOdlXLE0AgypWw5X1Oba9A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:06:a8:8e:e7:99:61:de:d8:92:a4:84:bc:6f:c7:8e:15:74:
02:27:9c:86:ab:9e:77:82:5f:e5:3e:4b:65:3d:45:81:cf:23:
c2:26:ae:45:2f:23:64:b9:19:1b:20:0a:61:9c:bc:8e:ae:70:
a5:46:91:7d:60:89:12:9c:62:d2:8a:fb:2b:1e:fe:ca:bc:fb:
8f:a8:e6:3c:e8:07:b0:ea:ed:03:26:f6:c9:f5:f9:c0:9b:98:
76:5b:72:ba:f8:2b:27:38:d4:9d:56:0f:17:ec:9d:4d:bf:2b:
de:77:4d:50:0c:50:3e:3f:0b:9d:f6:8a:38:50:2e:33:db:aa:
8e:08:b8:d8:f8:56:35:d3:e2:b8:c0:26:cf:4a:1e:29:47:16:
6b:af:0b:55:d1:63:95:ed:8c:1b:ef:85:89:f7:6e:f7:75:4c:
65:f2:16:a3:33:6b:a5:9c:91:40:14:9d:25:5f:d3:c7:87:49:
04:7f:47:91:11:81:f6:21:4c:b7:8a:c0:a4:63:e8:bf:bf:5e:
4f:93:5f:d2:df:e8:d2:ce:3a:c4:96:ca:fa:0e:72:5a:d6:fd:
75:85:65:e4:74:10:66:f1:f3:51:95:18:71:34:cc:9a:96:e7:
3d:6f:e3:0f:f5:82:f5:99:49:14:9f:10:6c:da:f0:20:4c:71:
f1:f6:11:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:34:01 2025 by rpki-client