Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
File: H4mVTcWspw-Dcs96YrWry4oXwrc.mft (raw, json)
Hash identifier: muPU2s95MCgqszLFmzua4ldwUmsl2RhxqLpRrRLPsHM=
Subject key identifier: 51:B2:8E:13:41:06:E9:02:3A:1A:8E:49:FB:BF:4D:4D:92:C0:45:27
Authority key identifier: 1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
Certificate issuer: /CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Certificate serial: 0196C23929F6BE2F587855069EA35944E02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 02:00:48 +0000
Manifest this update: Mon 12 May 2025 02:00:48 +0000
Manifest next update: Tue 13 May 2025 02:00:48 +0000
Files and hashes: 1: H4mVTcWspw-Dcs96YrWry4oXwrc.crl (hash: 2l5avbVA3syIou7DJ0+bWyAAmbGYqkNnDqDQrdxXVfw=)
2: VPSZKXOomg68CX3e2czb5vATzV0.roa (hash: u5eUOziaSNihoip6mFV/l4VWIAiX36Jv1InorW26yng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:29:f6:be:2f:58:78:55:06:9e:a3:59:44:e0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f89954dc5aca70f8372cf7a62b5abcb8a17c2b7
Validity
Not Before: May 12 02:00:48 2025 GMT
Not After : May 13 02:00:48 2025 GMT
Subject: CN=51b28e134106e9023a1a8e49fbbf4d4d92c04527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:5c:1d:67:f8:52:a9:80:64:5d:49:48:93:
f7:4d:46:1c:02:ba:9d:bf:4b:f1:61:98:1d:c3:a5:
e4:45:d4:a3:26:7a:21:75:dc:65:10:b9:23:13:d4:
51:94:b3:8f:5d:bb:fb:04:42:b8:71:3b:b7:63:17:
c9:c7:52:57:2f:3b:b3:a0:c2:cf:51:e4:e2:d4:ae:
2f:8c:5a:f1:67:e4:36:b8:7c:5a:5d:9d:15:27:65:
6a:1e:ae:26:26:31:32:49:07:c0:3c:1c:2f:08:ef:
36:54:e9:f5:db:f3:0c:50:b4:23:e5:82:9e:e6:ed:
c8:c5:16:25:e4:ba:f7:b9:c6:0a:d9:04:82:03:3a:
bf:67:c5:9c:ca:f7:1b:82:a5:88:de:33:ea:61:3d:
e6:a8:27:b4:e5:e3:15:2f:d2:f5:aa:37:fd:40:f5:
07:3b:ae:ae:7a:d3:5d:9f:4d:51:47:19:b5:79:e6:
a0:c3:7f:b8:2e:46:24:47:5b:83:10:09:b3:e8:6b:
e8:43:52:9b:4a:38:e6:24:a3:8f:9e:25:f2:69:61:
64:e1:a3:e2:22:6b:c2:29:3c:c5:33:7f:5d:60:0d:
a8:7e:f1:9b:97:3b:e4:16:11:a5:5d:8d:cd:16:36:
d9:18:d2:56:6e:01:3d:2b:76:40:bf:8d:f3:dc:b5:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B2:8E:13:41:06:E9:02:3A:1A:8E:49:FB:BF:4D:4D:92:C0:45:27
X509v3 Authority Key Identifier:
keyid:1F:89:95:4D:C5:AC:A7:0F:83:72:CF:7A:62:B5:AB:CB:8A:17:C2:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4mVTcWspw-Dcs96YrWry4oXwrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fbe9f3-b98f-4dd3-8c99-4e2e7e874a40/1/H4mVTcWspw-Dcs96YrWry4oXwrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:67:0a:67:c1:80:08:e1:09:79:40:b0:55:00:18:61:45:
c6:f5:dd:d1:02:54:f9:03:18:9f:91:9e:4e:6d:8a:54:c8:48:
d1:88:7d:2d:f9:b7:f5:03:ab:08:98:b7:97:fa:eb:62:c0:19:
97:e2:7c:08:1d:1d:f7:b5:f1:7d:a8:bf:ab:3b:4b:6c:26:a7:
be:4b:b6:da:26:90:b5:5e:7f:97:47:aa:72:8e:b9:6d:72:21:
d0:79:81:d7:04:7c:cf:97:03:de:a1:71:e2:2d:d5:40:38:89:
5b:2e:46:5c:9a:34:40:56:db:9a:a3:29:d4:ab:74:c5:a3:68:
70:42:5d:33:7e:9a:50:92:93:cd:80:6a:16:8f:da:9a:e0:fc:
fe:df:17:67:cd:1f:23:b2:36:82:d0:b7:6a:9b:65:1e:79:3d:
26:bc:7d:b3:44:92:de:95:dd:54:79:5a:37:ea:da:36:a0:c1:
5f:49:cf:23:43:31:74:f9:87:7d:5c:c2:9d:3e:95:19:00:1a:
40:26:bf:af:e8:1f:eb:24:d0:52:85:52:86:a3:33:ff:1e:5b:
2a:29:d4:2d:fd:60:39:8e:0d:7d:2e:6f:87:82:57:e0:51:8b:
e0:ff:bb:67:59:70:83:8d:f2:02:ce:f3:df:f8:16:36:35:b3:
bb:77:f3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:43:48 2025 by rpki-client