Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: 6PhLBVqDk+yaUO+CITtMXYNA0Ds5Je4mcVhJnEX3BVc=
Subject key identifier: B9:34:75:51:56:B8:13:98:D1:44:A2:21:8D:F7:91:18:02:43:01:05
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 0196BAECFC4088C8E5A878EF4914A00F14F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 010E
Signing time: Sat 10 May 2025 16:00:15 +0000
Manifest this update: Sat 10 May 2025 16:00:15 +0000
Manifest next update: Sun 11 May 2025 16:00:15 +0000
Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: fyLyHq4Zkz1adHAj94tJ08yvZNA+49xOYC6g/oQlZJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ec:fc:40:88:c8:e5:a8:78:ef:49:14:a0:0f:14:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: May 10 16:00:15 2025 GMT
Not After : May 11 16:00:15 2025 GMT
Subject: CN=b934755156b81398d144a2218df7911802430105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:02:83:94:5f:91:18:25:58:80:b7:56:f6:
1d:5e:8f:c3:ee:98:30:af:5c:ce:0a:3e:d8:f4:11:
50:a8:36:ed:ff:cf:c0:94:4f:69:f1:b3:8f:61:9d:
77:00:48:82:b1:4f:7f:e5:ea:72:65:d3:d6:94:8d:
8c:bd:12:c0:92:17:06:79:f3:c6:11:e9:a8:a9:ae:
6c:99:9a:b6:dc:b0:76:31:1d:e2:ed:90:d5:b6:ec:
d2:79:f6:51:81:c0:42:d2:0a:65:2d:b4:e9:3f:19:
04:ed:4c:8c:7b:e5:2d:42:87:87:86:c2:4d:88:ad:
2a:5c:6e:f1:db:95:45:1c:86:01:5e:d0:bf:c3:21:
2a:2b:73:4a:31:1b:73:ce:82:6d:08:8f:51:8b:58:
58:6f:95:85:ee:32:40:b8:c8:81:45:c9:8c:2c:7e:
65:ba:0c:90:6d:c5:4d:d5:5e:b3:45:1f:d2:d6:9e:
ca:df:d8:10:cc:e8:9e:6c:24:4f:bb:44:0a:07:96:
d6:9a:5e:88:a2:2c:30:48:ac:e7:0d:c2:d9:7c:e0:
71:63:16:f6:43:08:15:d6:82:d3:eb:0e:2c:2e:8f:
fe:35:a9:6e:06:02:da:d2:47:c4:78:95:bd:5e:a5:
b8:a1:94:4d:b1:c2:3d:4f:00:46:3d:4e:eb:db:b4:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:34:75:51:56:B8:13:98:D1:44:A2:21:8D:F7:91:18:02:43:01:05
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1a:e1:28:29:0f:3b:a6:14:fb:3e:e6:f8:56:4b:43:d2:cf:
24:a0:72:00:3c:b0:29:f9:32:3c:fe:c8:81:1c:d3:75:d2:35:
19:91:f7:94:d8:21:3c:82:99:e7:01:cb:97:02:e5:1d:71:40:
4d:fb:56:d5:09:c5:29:f6:27:35:d6:48:1f:a6:44:f4:63:f1:
2d:40:91:5f:07:92:76:b1:11:0c:8d:aa:0b:6d:10:38:36:64:
e3:7f:c2:e0:c9:87:6d:f5:5c:5f:b8:38:18:fe:97:4a:4f:fc:
62:08:41:bc:d6:50:cd:94:7b:4a:0f:d9:e8:44:e9:62:65:86:
dd:21:d8:96:a4:b5:44:17:f4:f2:19:e6:f2:1f:b4:eb:6d:7e:
96:57:3b:98:87:8f:bc:f9:3a:1e:1c:52:1c:15:87:6d:ee:69:
d8:69:52:35:ef:13:35:0c:af:fb:28:14:81:7f:d3:36:29:56:
a3:62:2f:f2:9f:80:ab:19:94:88:8a:5b:82:af:39:76:61:a2:
c7:6e:cf:e8:0e:78:7b:c0:b3:58:f1:36:fa:44:0f:b5:28:82:
69:96:99:fe:c0:03:5e:e0:f8:d1:02:dc:bc:00:54:2f:2a:bb:
f2:99:1b:ed:4c:23:6a:e9:56:b7:0b:95:02:84:3a:5b:aa:b3:
c7:1a:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:08:43 2025 by rpki-client