Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier: CyD4wCozFenW0bvTTn+1oFpff3hUc9SEJMvNmm9uNw4=
Subject key identifier: 61:E4:B7:16:31:EE:DB:48:4E:6A:D9:A0:AD:04:9C:3C:81:02:ED:49
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 0196BDEEF3A2A5C16205ED0F940C2341606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number: 035C
Signing time: Sun 11 May 2025 06:01:15 +0000
Manifest this update: Sun 11 May 2025 06:01:15 +0000
Manifest next update: Mon 12 May 2025 06:01:15 +0000
Files and hashes: 1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=)
2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: EEyRr3Ann1wjnTJ8LFp9440PQUgfz1KCCsm3daZu0dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:f3:a2:a5:c1:62:05:ed:0f:94:0c:23:41:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: May 11 06:01:15 2025 GMT
Not After : May 12 06:01:15 2025 GMT
Subject: CN=61e4b71631eedb484e6ad9a0ad049c3c8102ed49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:40:3d:98:f7:16:8a:76:e8:75:4e:9c:af:
76:a5:ff:fa:30:22:b5:e5:9d:46:1b:a3:08:7e:a8:
aa:12:a3:70:c1:0b:95:1b:49:17:dc:4b:51:76:94:
e1:77:95:17:72:c4:65:c1:da:2b:79:63:94:fc:af:
bf:cc:92:a8:23:08:ae:b4:13:82:8e:0f:f7:c9:ab:
ce:a7:ff:83:4d:f4:d1:6d:3f:c5:07:39:85:35:73:
0f:69:41:dc:7e:71:0a:41:33:82:96:ae:ed:07:50:
6e:42:c3:aa:4a:8a:d8:7f:70:25:0d:de:57:9e:ae:
5b:26:08:1d:62:a2:95:0b:b6:b6:8b:f6:cc:09:e7:
41:97:9b:b2:2b:56:8c:78:46:0c:9c:89:53:2b:7b:
c1:e8:93:6e:ab:41:ad:ed:8c:01:82:57:79:0f:d2:
c9:9f:6d:56:b2:b9:63:e0:11:40:08:98:c2:f5:14:
61:7d:6a:a8:19:7d:cf:d7:fe:7c:6f:7a:f4:ed:4a:
ca:ed:b9:1e:11:5c:bb:33:6c:fb:5f:7f:38:e7:4a:
5a:32:cb:74:54:5b:16:3f:63:4f:7b:ef:39:a7:b0:
17:7b:84:44:80:98:d7:16:a8:b8:69:72:bc:7a:c4:
91:1e:24:3b:6d:4d:66:cc:53:85:94:e5:42:61:53:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E4:B7:16:31:EE:DB:48:4E:6A:D9:A0:AD:04:9C:3C:81:02:ED:49
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:32:c7:b0:f9:9b:d1:87:b6:ee:8e:82:f2:08:32:74:52:d8:
28:c6:c2:e6:36:c0:fe:1a:9d:de:09:7a:fc:d5:2e:29:08:a4:
1e:3b:95:6d:a8:03:7b:a9:b4:1e:c8:f8:17:2e:0b:bd:be:31:
fb:de:95:41:ac:f0:c8:3c:96:f9:44:56:66:93:c0:19:01:eb:
98:e8:93:08:dc:d2:a5:b5:dc:6e:fc:3d:1d:81:af:15:42:35:
cf:92:37:3e:3a:ba:dd:3c:29:8f:91:fb:44:c9:31:c4:7d:70:
bb:d8:3b:13:2b:2d:a9:be:87:6f:87:ef:a6:34:a5:f8:82:a0:
cc:99:08:43:31:ed:43:e1:cf:45:49:58:65:6f:b3:cf:38:ac:
b1:82:23:f6:5b:f4:c9:90:71:4f:85:b2:21:f3:5a:9f:4b:31:
e4:2c:20:f8:8e:1a:d1:be:15:fd:09:5a:5a:66:d6:63:39:5e:
67:83:42:ca:6e:cd:6e:81:e8:dc:fa:ce:76:51:e9:a6:fa:86:
d5:2a:57:11:61:97:55:c0:f9:82:66:32:aa:68:a7:20:41:5e:
c6:f5:fa:32:35:69:fb:08:fb:e3:c8:fc:0f:6a:9b:ee:00:fd:
27:d4:88:1e:d9:e1:93:f8:b6:4f:52:f2:f8:bb:9a:55:e5:92:
cd:71:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:38:32 2025 by rpki-client