Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
File: H7XBu67UTItq4_K1ZtAcwljfws4.mft (raw, json)
Hash identifier: 0Q2OcqF9t0mw9OQhT1T8kW3XONBOmQ8IrbfwiQiLjr0=
Subject key identifier: FA:EA:9B:E4:FE:72:90:96:CB:D1:32:7B:C7:BF:FD:D7:41:D7:B5:94
Authority key identifier: 1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
Certificate issuer: /CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Certificate serial: 0196BE5C94D89610D97A51E5D0A934364615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
Manifest number: 10BB
Signing time: Sun 11 May 2025 08:01:00 +0000
Manifest this update: Sun 11 May 2025 08:01:00 +0000
Manifest next update: Mon 12 May 2025 08:01:00 +0000
Files and hashes: 1: H7XBu67UTItq4_K1ZtAcwljfws4.crl (hash: pWcFXL8d/miN+uJZzyIArIt+HsZ8dxC0iTWSFfdY1ec=)
2: MEWWY0epwShfEJbfHo9y4r51GYY.roa (hash: SGRcwmohz12gMReH4Cn9V8oKzsRQ7LvpKURqTZBMtCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:94:d8:96:10:d9:7a:51:e5:d0:a9:34:36:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5c1bbaed44c8b6ae3f2b566d01cc258dfc2ce
Validity
Not Before: May 11 08:01:00 2025 GMT
Not After : May 12 08:01:00 2025 GMT
Subject: CN=faea9be4fe729096cbd1327bc7bffdd741d7b594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:58:8a:dc:80:7b:a8:91:1b:2a:c2:89:bd:8b:
5d:27:19:11:3b:fd:fe:ee:b5:00:d8:4a:d3:f1:36:
60:26:de:09:3c:30:e6:7f:90:b9:cc:07:45:9e:23:
51:16:7c:60:38:e9:74:ed:69:ef:5c:d9:b0:b5:65:
ed:2b:0a:34:14:00:8c:41:1b:4c:08:00:fb:6a:dc:
c1:8f:24:82:89:c5:e1:eb:f5:61:02:fd:f1:ab:5e:
65:ad:94:6c:29:d1:c9:73:17:67:bd:02:60:f5:0c:
1c:8d:06:91:9a:39:ae:ad:a8:5a:76:02:8e:85:ef:
df:54:9f:10:e5:29:13:2f:05:9a:b8:6e:6b:fa:f8:
2d:ff:35:59:13:fe:cf:df:ed:65:f5:5d:74:5a:6e:
15:d8:1a:93:e8:80:05:b9:d8:59:0a:69:b4:54:41:
76:28:fa:5d:d6:cc:0e:a0:58:06:71:c8:35:7f:25:
b2:3c:d8:22:26:f5:e9:e9:75:39:ba:ad:e5:d9:51:
58:5e:77:89:1c:1b:cf:3a:ca:c3:c5:34:b3:a7:10:
9c:85:da:b2:6c:ef:2a:44:0c:cf:cf:58:5a:66:01:
4c:e4:89:46:d6:05:dc:8e:1f:ba:5a:27:13:59:cc:
7c:db:b8:0c:00:59:47:18:e5:f5:8e:05:32:7a:81:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EA:9B:E4:FE:72:90:96:CB:D1:32:7B:C7:BF:FD:D7:41:D7:B5:94
X509v3 Authority Key Identifier:
keyid:1F:B5:C1:BB:AE:D4:4C:8B:6A:E3:F2:B5:66:D0:1C:C2:58:DF:C2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7XBu67UTItq4_K1ZtAcwljfws4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/3c4b53-eca3-4599-9d94-d71fc90c7b16/1/H7XBu67UTItq4_K1ZtAcwljfws4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:41:dc:e6:a8:e8:1f:1e:87:fa:4b:3b:14:94:c4:7b:f9:a7:
b5:d5:27:73:d2:73:76:3e:78:10:ea:46:f4:78:c4:e1:40:40:
dd:dd:3c:bf:ff:42:f9:a1:f8:b5:a4:bf:c1:21:24:7c:83:23:
29:f6:ed:4a:55:58:b3:0c:b4:7c:a9:c8:c6:8f:68:6c:58:83:
68:d4:db:43:f8:9f:a8:d0:07:14:1b:c9:8f:0e:66:00:a0:36:
df:d2:56:61:80:55:ad:c2:dd:89:cd:1e:72:62:11:3a:09:6e:
b3:cb:2f:9b:c8:88:90:f4:4b:f0:4c:34:35:1e:8c:08:8c:d5:
83:9e:be:3b:fa:cf:c3:07:85:f2:07:c3:24:e9:e6:f5:31:43:
d6:72:af:89:b3:40:3a:6b:22:2c:12:49:3d:59:e2:25:43:70:
3b:54:c6:2b:61:4f:84:54:16:67:a8:5e:31:52:d7:b3:42:43:
ae:fe:78:46:09:2d:97:32:4b:5d:2e:c1:f7:5b:bb:f7:d1:99:
9f:b3:27:be:59:41:3a:44:28:e1:3c:a7:ca:e9:a8:1d:8a:0c:
8f:47:14:31:2e:a6:2c:f4:1f:c3:33:a8:86:d3:b9:f8:bd:f0:
19:ac:db:86:e6:c0:5d:14:2e:3a:c1:46:b3:07:ba:25:2d:48:
e3:29:8c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:30:18 2025 by rpki-client