Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
File: HnZ5Q1c9azXrrOGi80jKPwBWwas.mft (raw, json)
Hash identifier: jJgb1X+ad8reKOqjGBzGhxiZgjLdTqM8DC/mJm+Hu90=
Subject key identifier: 7E:FC:B6:76:1E:3F:F2:AF:6D:6A:49:CB:9D:72:B8:67:3C:43:84:7B
Authority key identifier: 1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
Certificate issuer: /CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Certificate serial: 0196789F82B883C3386A68B840D873526395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
Manifest number: 0F10
Signing time: Sun 27 Apr 2025 19:00:41 +0000
Manifest this update: Sun 27 Apr 2025 19:00:41 +0000
Manifest next update: Mon 28 Apr 2025 19:00:41 +0000
Files and hashes: 1: HnZ5Q1c9azXrrOGi80jKPwBWwas.crl (hash: jKQSyoZSTqXoa6F6c1A9sTWanL8j/fjkGjCWdCECpzI=)
2: eOnuHiStsO3O13pB5kbTSUIQpmU.roa (hash: kcBz+mRqFqqkTHe8HhDtwvud8iIZt9DbOQoP1ie6taQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:82:b8:83:c3:38:6a:68:b8:40:d8:73:52:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e767943573d6b35ebace1a2f348ca3f0056c1ab
Validity
Not Before: Apr 27 19:00:41 2025 GMT
Not After : Apr 28 19:00:41 2025 GMT
Subject: CN=7efcb6761e3ff2af6d6a49cb9d72b8673c43847b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:fe:85:92:10:ea:00:b2:5e:c0:ac:36:c7:
96:63:96:37:dd:b3:ac:16:07:ac:1b:86:02:83:16:
31:ab:af:62:e0:4d:b7:00:36:71:a1:12:95:07:ae:
a0:e6:2e:e3:e8:c3:25:07:a2:c9:36:f0:eb:66:5a:
24:51:69:d0:20:5e:6e:19:36:39:26:36:2f:e9:a0:
00:99:e5:9e:46:53:33:25:69:a2:01:8a:e4:48:df:
f2:5a:b7:76:17:c5:0a:f3:e2:ce:fb:e9:97:5f:a9:
90:18:a4:4d:7d:cc:ef:e1:d4:60:af:91:92:1e:a9:
56:17:16:05:0d:91:8d:ec:8b:fb:9f:f4:8f:24:47:
eb:4d:96:9f:26:82:7a:b1:af:2f:28:ad:51:fc:26:
a3:6f:2a:d3:9b:42:46:03:d9:7b:34:b9:6a:a9:08:
44:3d:fe:23:85:30:2a:8e:99:ec:5d:14:9b:67:d9:
80:00:3f:c6:ef:58:89:e8:97:04:9d:81:ca:5a:a2:
e0:6b:bf:0c:0e:b2:1e:f4:d5:19:33:06:8d:da:ba:
65:bb:77:1f:f4:83:a8:57:8e:f3:0b:de:9d:3d:ac:
83:52:84:64:68:f8:15:85:0f:b0:e8:15:cd:db:08:
31:52:0f:d9:50:66:63:59:54:27:9a:b4:ac:25:e0:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FC:B6:76:1E:3F:F2:AF:6D:6A:49:CB:9D:72:B8:67:3C:43:84:7B
X509v3 Authority Key Identifier:
keyid:1E:76:79:43:57:3D:6B:35:EB:AC:E1:A2:F3:48:CA:3F:00:56:C1:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HnZ5Q1c9azXrrOGi80jKPwBWwas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7e0957-c951-4502-9fe7-a408d67bff37/1/HnZ5Q1c9azXrrOGi80jKPwBWwas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ab:60:6b:2d:14:75:cb:93:b2:e8:44:0a:06:0e:89:67:65:
e7:2f:61:16:90:4e:20:78:8b:30:9c:f0:08:ab:34:22:60:66:
d9:61:d7:5b:c8:e0:4e:88:cb:92:cb:7b:3b:67:54:8e:17:10:
d9:6c:99:c2:6e:49:e4:35:d4:34:24:f2:3f:4a:82:47:19:d8:
a4:6d:7f:ce:86:2c:c9:c8:4d:b6:04:b2:31:9d:28:df:3d:cf:
fb:19:c5:50:f2:dd:50:2d:88:31:1f:5f:ef:cd:9a:b5:16:f5:
dd:94:f9:d6:ec:f4:3b:86:b6:fb:88:a9:47:84:ea:f3:a8:bc:
d2:f7:c8:07:90:60:00:90:42:97:14:92:ea:8c:22:0d:aa:db:
65:6b:2f:5d:ac:f1:00:f7:81:4b:d7:a7:3a:ad:4c:e6:a4:cb:
a0:54:03:9e:28:a6:24:2c:bb:9e:6d:97:10:62:88:88:50:7b:
21:1d:90:d8:47:f4:d4:8d:0d:cc:b8:6c:8d:39:26:f5:9a:f7:
9a:a4:02:f4:3d:c8:04:ce:33:f3:10:f3:a0:51:da:a7:0a:78:
38:fb:b7:ca:67:5b:96:12:51:08:c4:bb:b4:d3:b2:44:3a:18:
cd:b9:22:d3:a8:b0:f4:7e:6b:c9:d6:4c:3e:fd:be:de:6f:d2:
5d:c0:a3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:04:28 2025 by rpki-client