Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File: h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier: 4TY48T8f1iVr4krUAv78h3OuuCCDY71RjIbdmbAKYW0=
Subject key identifier: D3:81:D8:4C:7E:90:CF:96:3A:76:8E:22:24:6B:9A:F2:8D:39:BC:68
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer: /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial: 01969D87BB1AB3A500D26C099104E87A4ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number: 1526
Signing time: Sun 04 May 2025 23:00:40 +0000
Manifest this update: Sun 04 May 2025 23:00:40 +0000
Manifest next update: Mon 05 May 2025 23:00:40 +0000
Files and hashes: 1: 8p4ECS-0PiEFQnW0zgPTXjUCNHY.roa (hash: uWux01M0AWL/b2xulUJtLGC3kzcykXei5DX70xijRPU=)
2: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: y4mjEh7R+Rk6HJ6Yu4FuumvLgxMpLDcMcrXIc4cWbNQ=)
3: ucIHsuM2Zd5fmmXGAihiHfmCWAc.roa (hash: A1OTBfEgu4GjLmAVBKwQdSIcB/EXlvqAN5tdAvErj/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:bb:1a:b3:a5:00:d2:6c:09:91:04:e8:7a:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Validity
Not Before: May 4 23:00:40 2025 GMT
Not After : May 5 23:00:40 2025 GMT
Subject: CN=d381d84c7e90cf963a768e22246b9af28d39bc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:b9:f6:04:ef:dd:b6:ea:69:8e:d9:8a:af:
c1:fc:cc:80:46:13:1a:99:72:c7:23:1b:bd:f2:4c:
53:a9:61:be:9b:de:90:28:43:0a:2a:a7:81:34:19:
b3:41:e7:11:16:80:10:cf:c8:ce:82:50:c4:b3:30:
9a:2e:5a:84:bf:e4:b6:03:99:fb:48:b2:37:05:39:
2e:91:28:ee:6a:37:59:d5:7c:67:ba:7a:53:09:f4:
ac:27:a9:d1:56:78:9a:d7:a0:bd:1e:df:ac:c6:e7:
5e:9e:b1:3f:65:51:f2:b4:65:2c:21:ed:aa:a2:f8:
0f:15:f4:0e:e9:c8:f3:b8:1b:eb:d3:f5:9a:60:b3:
43:5c:ad:2a:12:8f:7e:29:db:6e:b4:8f:02:ef:79:
ab:91:ea:6a:53:4f:f4:21:3a:b3:71:bc:d1:2d:67:
59:ab:86:42:a5:f0:9d:57:4b:79:65:bd:8f:a0:98:
59:5c:c9:0d:80:c8:78:a4:b2:db:a3:a0:26:b8:01:
66:2e:44:6c:fc:36:f7:61:fb:ac:25:71:2d:22:13:
9e:cd:22:ff:d2:3f:06:45:1c:37:eb:b5:97:37:95:
e4:fe:85:d5:60:2f:e6:e9:54:e3:b4:f3:01:42:93:
9f:03:0b:c5:58:91:78:99:0f:25:0e:78:d3:c2:28:
d7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:D8:4C:7E:90:CF:96:3A:76:8E:22:24:6B:9A:F2:8D:39:BC:68
X509v3 Authority Key Identifier:
keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:25:9a:ab:ef:6b:98:bd:86:ba:fc:aa:16:87:bd:ca:aa:0d:
c8:ef:34:7c:d3:91:a5:62:4e:18:78:8d:66:7a:e7:69:0a:5c:
a1:bb:1b:6a:f3:b3:e7:a9:30:a5:b1:cf:33:06:fa:f2:33:f0:
66:6f:59:d0:ec:b5:b9:14:0c:0c:78:f2:ee:b1:9f:65:eb:26:
c9:6a:4f:49:dd:1e:7e:61:d8:e2:56:aa:05:6a:cd:24:18:ff:
e1:3a:10:89:98:8d:80:b9:f5:13:e7:06:68:0d:c0:c9:ca:b4:
d2:90:62:b7:1a:cc:68:95:e4:99:5c:a5:6d:bb:d5:79:15:f3:
12:d5:85:cb:55:56:fa:0c:20:aa:09:3f:f1:2b:0a:d3:48:96:
60:89:07:ab:8b:89:c8:af:df:83:ea:17:08:aa:74:26:4e:37:
64:36:a0:1b:c5:d4:4d:79:95:8e:ee:69:f4:91:d7:f4:ba:2a:
d0:c6:9a:c8:90:f3:6e:fd:ad:12:65:b8:e8:0f:a9:c0:42:0d:
38:20:bf:c1:55:5c:2b:ae:05:37:74:4a:32:a3:ee:c3:a9:ca:
67:fa:52:e3:76:24:6b:cd:8b:23:e7:a7:cf:9f:d3:60:e7:74:
0c:04:88:72:c9:3e:bb:6a:50:c5:05:7e:b1:a4:13:ea:fc:8b:
d0:e0:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:07:19 2025 by rpki-client