Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json)
Hash identifier: TLZfJh+3i0llapgaP1FYen62yon1nVWvWQxafwAkb0k=
Subject key identifier: 1D:7A:93:AE:10:8F:1B:56:14:44:77:3F:B9:81:D8:3B:96:21:AB:79
Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Certificate serial: 019686921C7665A9D9B40800B4B90AA4548C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
Manifest number: 068A
Signing time: Wed 30 Apr 2025 12:00:44 +0000
Manifest this update: Wed 30 Apr 2025 12:00:44 +0000
Manifest next update: Thu 01 May 2025 12:00:44 +0000
Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=)
2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: 2ya7p/0vSMdE6OiMEZIB1Nwa/DY5ehuT0ZiurQRhomU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:92:1c:76:65:a9:d9:b4:08:00:b4:b9:0a:a4:54:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36
Validity
Not Before: Apr 30 12:00:44 2025 GMT
Not After : May 1 12:00:44 2025 GMT
Subject: CN=1d7a93ae108f1b561444773fb981d83b9621ab79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:65:22:82:10:fa:cd:95:5f:24:11:c9:26:
47:ee:4d:a7:7a:4c:4d:9f:ca:5f:da:a1:da:32:82:
9e:fb:3e:73:6e:f1:2f:c7:f4:3a:2b:53:76:be:4c:
10:22:62:fb:a8:d9:cd:79:75:41:81:3e:29:aa:c4:
42:27:f7:c7:28:81:d3:c8:2a:af:df:ab:1c:45:27:
ea:53:a2:37:6f:d2:b0:71:f0:03:06:91:b2:15:f6:
b0:f8:75:4a:b9:51:4d:48:ed:df:72:79:2c:27:87:
a1:fd:76:47:8b:ba:c3:27:fa:d2:d7:6b:a9:63:e0:
6f:1c:fb:dc:02:2a:b4:e1:1d:cc:61:88:cc:83:64:
14:3a:9b:09:78:6f:2f:16:06:ab:0f:38:8b:83:1a:
39:48:3d:f2:02:c7:08:0c:bf:a1:d7:09:e9:34:01:
25:38:6c:5e:db:ca:ca:7a:5f:cf:49:a4:fd:8d:db:
90:cb:c0:19:4d:f5:71:29:d9:0a:7e:c7:a7:f6:fe:
04:5f:47:63:3f:cf:23:50:3c:08:f9:15:a7:67:39:
7f:1c:0f:19:a2:a1:df:f5:f0:fd:2e:76:1d:97:70:
64:70:65:65:1b:47:cb:d4:5b:17:68:3f:55:33:2b:
55:10:a4:69:a8:8e:0d:17:57:d4:1c:0c:53:9a:82:
4b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:93:AE:10:8F:1B:56:14:44:77:3F:B9:81:D8:3B:96:21:AB:79
X509v3 Authority Key Identifier:
keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ad:25:2c:8c:68:d4:1d:4e:b0:e3:41:be:f7:34:a3:92:9a:
8a:eb:25:9a:fb:3a:85:65:5f:83:ef:5e:f3:07:c9:0e:92:85:
19:4a:bb:16:19:7a:92:24:29:0c:da:85:ac:db:9a:93:b9:81:
25:b5:7c:d6:e4:ab:04:d8:34:0d:27:64:91:25:d9:76:2a:eb:
e2:99:6e:66:c1:bc:ef:8d:6e:95:98:51:78:58:46:55:31:ac:
1c:b9:dc:ee:37:7e:f0:fb:fa:5c:c1:f3:ac:9d:b6:1e:51:5b:
54:b6:18:a6:54:89:67:28:63:49:d0:60:bc:42:6d:bf:7b:de:
70:50:15:2e:46:3c:ce:0b:ff:ee:e0:04:b3:0a:c3:ea:b4:73:
65:93:01:68:3d:2b:54:81:dd:b5:31:b3:b3:82:58:47:16:55:
14:fe:69:f7:d5:01:35:ea:a1:84:b9:f2:55:42:e9:79:f4:d6:
0b:94:e9:33:fe:73:1e:44:4d:e5:60:1b:ba:3d:13:3a:4d:2c:
b4:68:5e:5b:4c:cd:ce:ff:0d:fd:4f:6f:f3:6c:9d:55:45:24:
bb:6d:ac:f6:00:85:35:ef:46:eb:25:62:ad:8d:09:51:09:d8:
27:f9:5e:0c:7d:90:00:d7:06:4f:e0:c8:1a:2c:f2:c2:96:e3:
da:bb:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:33 2025 by rpki-client