Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
File: h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft (raw, json)
Hash identifier: lRKkg4w7pXayUdAU01ddJESjeLbhGJiEVs1f7Zuy0PQ=
Subject key identifier: 33:C6:BB:0D:DF:4F:4E:9A:D2:92:73:00:AA:F3:E9:2D:8E:BF:80:C1
Authority key identifier: 87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
Certificate issuer: /CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Certificate serial: 0196B85A737182F2EAEB02AE6B3A9D470F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 04:00:57 +0000
Manifest this update: Sat 10 May 2025 04:00:57 +0000
Manifest next update: Sun 11 May 2025 04:00:57 +0000
Files and hashes: 1: NwkZh_DNuB_iBInY9wDbpyHdLgE.roa (hash: 5w+s5Rk1602R4y1zX8F10ZF0iAVWkGEzyROrjF/5dqE=)
2: SeFxeccbo68KLvP3eAvdIgxyzVI.roa (hash: KKPafx1oDtZuIFD9Wnd6TukbFDgA1SpzCeh9Ci09gpw=)
3: h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl (hash: F6GIgiMWRnqLScUELexUqPDxN0P1Xdek8rGR3QSt8bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:5a:73:71:82:f2:ea:eb:02:ae:6b:3a:9d:47:0f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=877c20737116bc6d5e5b224931cf13dd7f79f95b
Validity
Not Before: May 10 04:00:57 2025 GMT
Not After : May 11 04:00:57 2025 GMT
Subject: CN=33c6bb0ddf4f4e9ad2927300aaf3e92d8ebf80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:7a:36:43:5b:eb:f1:f6:a4:66:9c:0b:29:
d2:01:b0:8b:32:05:d8:ab:da:91:03:ff:f3:e2:69:
11:53:89:c3:98:c8:0f:3f:93:95:34:8c:1b:78:4d:
45:b9:62:18:a8:db:c5:c5:f3:72:ec:5e:31:f2:38:
b3:9c:44:fd:5b:74:1e:ec:5f:86:30:30:ad:71:9b:
d9:f6:9b:44:af:9f:4d:03:81:30:2d:0e:ea:1b:56:
27:08:e4:0f:20:4b:9f:2b:81:30:5e:43:78:cb:eb:
1c:fa:1f:1e:b1:d5:02:a9:a6:9a:63:17:80:03:46:
06:6e:8f:90:6c:14:1a:1b:02:a3:27:bd:88:7c:fa:
90:e4:3d:66:4b:0b:64:42:4a:e4:de:49:ca:c0:aa:
68:81:93:f8:9d:e1:3a:fb:66:3a:23:d2:03:fe:31:
af:9d:e2:e2:a3:4d:77:9f:25:99:bf:8f:f0:a4:e3:
a0:f6:e3:dc:06:43:df:91:b4:56:09:a2:58:15:46:
44:b5:58:bb:67:f3:56:96:bf:da:94:57:7c:18:52:
b2:5a:2a:50:de:86:d5:ad:3a:82:4a:bb:55:cf:81:
72:ac:45:90:f8:60:81:35:7f:4e:5c:ae:3b:86:b8:
cd:3c:41:87:fa:6c:6f:9f:94:69:d8:fd:b2:ec:fa:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C6:BB:0D:DF:4F:4E:9A:D2:92:73:00:AA:F3:E9:2D:8E:BF:80:C1
X509v3 Authority Key Identifier:
keyid:87:7C:20:73:71:16:BC:6D:5E:5B:22:49:31:CF:13:DD:7F:79:F9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3wgc3EWvG1eWyJJMc8T3X95-Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/acb956-e1b5-4682-80b8-e7232f8448b0/1/h3wgc3EWvG1eWyJJMc8T3X95-Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5f:df:d1:47:72:9b:50:00:c1:a4:d9:d9:51:4a:ee:44:d7:
4d:76:23:d1:23:37:91:d0:69:22:01:ee:9f:b1:3f:22:24:11:
cc:44:a1:7a:5b:ef:e4:b4:cd:34:11:5b:06:d9:87:b3:7a:a3:
c5:82:14:5b:4b:6e:98:65:2f:70:a0:ea:61:db:9c:c1:72:05:
8d:9e:52:2c:2b:be:20:d1:e9:ac:99:b9:1d:4b:99:b7:6d:7b:
20:41:d7:87:8d:b6:5e:4e:26:49:99:de:2e:27:6b:dc:14:e1:
97:67:7f:33:e6:f0:0f:5e:db:bb:84:03:2b:e6:bf:01:89:24:
c1:a9:d0:12:5c:79:9a:5c:8f:e6:31:c8:a1:67:9c:24:b0:39:
87:19:88:75:08:a6:ed:08:a4:d2:d6:f8:2d:17:aa:fb:c3:f6:
02:90:da:d9:ba:6e:d6:80:b9:5a:9c:1b:1a:e3:15:14:e1:ac:
a6:db:3a:52:55:6b:5c:e7:58:1b:d8:db:f6:cf:b8:ef:11:d0:
e9:07:fb:9d:39:5a:8c:33:6e:11:9a:4f:04:da:08:8b:4f:58:
6b:6b:c0:c3:cc:7c:71:ed:8d:de:ed:1f:c4:96:af:ff:32:67:
e9:d3:e4:ce:77:dd:30:32:8c:ef:77:4a:ed:63:04:1d:eb:91:
89:f2:de:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:17:19 2025 by rpki-client