Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: lZy610Fx6IRueiZkVz5Ak+1kFZb6QbhGzhcwlS+v3ZA=
Subject key identifier: 5D:E6:1F:BD:35:E4:93:D3:7A:E5:2B:69:F8:63:0F:96:63:9F:B7:77
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 0196BDEE43CBD95F2BDAB7E157A730E29E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0A6B
Signing time: Sun 11 May 2025 06:00:30 +0000
Manifest this update: Sun 11 May 2025 06:00:30 +0000
Manifest next update: Mon 12 May 2025 06:00:30 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: 0JgC5uK2l2AB3DCKXyYIrJt2H7RX/FmrqOgNRu6F5hU=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:43:cb:d9:5f:2b:da:b7:e1:57:a7:30:e2:9e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: May 11 06:00:30 2025 GMT
Not After : May 12 06:00:30 2025 GMT
Subject: CN=5de61fbd35e493d37ae52b69f8630f96639fb777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:38:8a:ac:2f:35:8a:b3:1a:38:d3:cd:95:
0c:c0:29:85:90:99:c5:33:80:72:4e:6e:09:e8:d3:
50:2c:96:73:05:fe:a8:48:9a:6b:d8:cf:90:d7:69:
0f:db:82:9f:ad:0a:1e:54:fb:53:ce:73:4d:20:75:
15:90:cd:4a:68:65:77:33:21:23:53:e2:dc:21:97:
ba:3f:85:0c:c8:5e:fa:7a:b0:8e:98:cb:f9:b3:11:
79:87:2e:1d:76:76:36:84:a1:fc:d3:4d:3c:2e:59:
69:9d:a6:c4:11:6f:75:78:13:1a:1f:4a:13:58:7f:
92:eb:52:1e:fd:a7:f5:6a:6d:05:e4:e9:f3:22:a0:
8c:98:6f:77:f0:37:4e:2f:36:1c:03:d3:4d:fd:34:
05:37:61:d3:b7:be:e8:05:42:bd:b1:17:ea:3c:55:
8b:74:0a:e6:17:0e:d1:55:ce:35:a8:0c:c2:b8:0f:
8d:71:b5:76:e5:88:46:c4:4d:2d:d0:05:7b:29:f7:
d0:e6:99:7a:4f:18:40:49:d9:99:97:1d:84:6b:30:
f5:e9:3e:74:29:79:e8:0a:28:17:55:14:01:39:40:
0b:a9:fe:ce:a1:29:ee:73:0a:00:4a:80:09:ff:00:
b4:42:8d:09:67:d2:bc:1a:7d:51:3b:cb:e1:f0:59:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:1F:BD:35:E4:93:D3:7A:E5:2B:69:F8:63:0F:96:63:9F:B7:77
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5b:2f:09:47:d3:11:d5:d4:ee:ef:14:e6:0f:4c:91:6a:eb:
3c:9b:f4:8b:de:68:c0:af:58:41:c0:f4:3c:d5:f4:ae:4c:e3:
3b:7f:fb:bd:12:0e:8a:28:d1:43:ca:b0:26:06:dd:82:2d:c6:
2c:3a:ae:ca:86:01:87:ee:5d:2e:ea:9f:18:95:8f:0f:06:36:
09:54:4f:cd:bb:d1:58:c6:3e:8a:3f:b9:80:82:d4:2e:e8:0c:
50:61:ae:e9:06:6f:6f:d2:d3:09:34:10:96:16:0d:cb:c0:d5:
13:19:dd:77:2e:d6:03:a0:28:f4:1a:01:85:d7:c9:52:ab:3c:
5d:51:80:f9:5f:c0:89:5a:ea:d2:e6:0d:c7:08:07:61:36:78:
2f:33:35:a1:db:32:15:e8:4d:6e:ae:ae:1c:fc:e3:2c:3c:b1:
f7:75:00:d9:c7:e6:ba:95:0b:4b:71:de:19:72:c7:bf:f5:8b:
41:f9:93:48:e2:91:0a:c0:f8:ad:8f:07:c9:b8:7a:17:f7:42:
ff:5c:d0:25:71:01:a8:2d:30:5b:66:1d:ed:ce:ff:e6:4a:2b:
b1:4b:13:b9:c0:66:dc:cd:c0:df:43:08:e0:dd:b7:ca:e0:63:
4a:d2:f3:8b:c9:50:e4:11:ad:8f:10:07:b3:42:b3:82:9d:9e:
42:98:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:55:54 2025 by rpki-client