Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json)
Hash identifier: DtmsiNGQJe2BpiVBUXy0SC4Bbrg8Ne3GA9U1487Kkdk=
Subject key identifier: 45:B2:89:2B:A6:C1:A8:CB:51:FD:CD:4C:11:2D:C3:88:0C:CB:C3:78
Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Certificate serial: 01967831A55312EB7E98590ED13B10C60E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
Manifest number: 1270
Signing time: Sun 27 Apr 2025 17:00:41 +0000
Manifest this update: Sun 27 Apr 2025 17:00:41 +0000
Manifest next update: Mon 28 Apr 2025 17:00:41 +0000
Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=)
2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=)
3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: RxI5rTxOc+3IKfnFwLiVfs7w12K2G6M5BsVY4KvEIs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:a5:53:12:eb:7e:98:59:0e:d1:3b:10:c6:0e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12
Validity
Not Before: Apr 27 17:00:41 2025 GMT
Not After : Apr 28 17:00:41 2025 GMT
Subject: CN=45b2892ba6c1a8cb51fdcd4c112dc3880ccbc378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:6b:83:36:85:30:7a:87:32:57:45:d8:84:
b0:4e:98:c2:b9:90:99:1f:5a:56:75:25:d2:13:cb:
0c:c9:80:21:a4:36:4a:eb:4a:b7:fa:9f:29:c1:37:
b0:35:c7:32:56:bc:4c:d7:78:08:d0:f1:25:18:ac:
42:27:50:20:70:e4:97:ec:2e:4b:31:b0:1e:a7:ff:
3b:80:d8:cf:7e:b1:16:a3:cf:e2:be:7c:5a:5b:0b:
d3:ac:90:01:51:c3:b7:ab:59:39:3e:58:14:49:95:
dc:36:dd:b1:13:fd:82:11:c9:84:9d:d8:07:dd:72:
85:21:aa:13:36:f5:73:83:f3:fb:8e:f7:13:14:2e:
9a:68:e6:85:3a:b7:86:76:bb:06:8a:9a:07:49:ba:
1c:58:c3:2f:df:10:3f:c2:d4:5d:9e:bb:3c:6c:60:
35:f3:36:8b:6e:08:a2:e3:a2:6a:fb:71:5d:f2:a7:
05:8b:ad:e9:fe:b8:32:4f:b0:ea:06:ba:d9:20:66:
ee:be:b4:8d:21:38:26:a2:6c:3e:00:5e:1b:be:64:
20:d6:6c:ca:14:06:19:48:2a:58:fd:7d:1c:a8:ed:
fa:4a:35:49:eb:64:92:b5:3c:c0:42:e2:a3:39:93:
ae:2a:7f:78:3f:cd:5c:9d:2f:bc:4d:45:2a:e0:9e:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B2:89:2B:A6:C1:A8:CB:51:FD:CD:4C:11:2D:C3:88:0C:CB:C3:78
X509v3 Authority Key Identifier:
keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:46:ba:99:d9:6a:2f:77:08:6e:39:57:ab:ed:86:75:87:22:
68:f3:54:1c:b8:92:96:15:01:69:a1:72:a6:d0:a7:d3:4f:80:
df:41:bf:6c:29:8c:8e:9f:74:59:d4:4e:b8:6b:33:51:9e:1f:
10:e8:2c:2b:1c:bd:7a:94:1a:19:10:fb:d8:40:8a:27:35:43:
c9:27:61:3a:0a:ad:1c:7b:e0:e0:48:e4:96:6d:ff:3b:90:5c:
9b:a4:8d:5a:7d:b5:22:a9:79:ef:cb:88:24:48:8d:de:77:7c:
0f:96:c5:3f:9b:66:d2:d9:d4:a1:0e:3c:c0:49:70:d7:e2:71:
51:41:7c:d5:13:fd:61:fe:e3:56:a8:a5:f6:9f:db:58:29:d0:
e0:f7:82:c6:a3:d6:fc:ae:37:d7:95:e6:a7:bb:08:ac:6b:4c:
bc:6f:68:8a:be:8f:b3:11:20:23:8f:54:ef:d0:a1:16:d4:6c:
ce:22:ba:39:08:57:e6:b2:ee:7c:69:38:30:07:f3:55:27:09:
92:d8:81:89:1f:4f:c2:9b:0e:b6:da:a9:17:a8:d2:1f:eb:fe:
7b:e1:1b:21:9b:c9:ae:1d:18:f0:2b:f6:60:9c:d2:28:67:fe:
cb:cf:46:9f:f0:d1:30:63:96:0d:39:ad:23:74:80:4c:0e:76:
e1:0c:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:18:35 2025 by rpki-client