Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File: hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier: 9krnLaOLcjRlprUR63wobJxbK9yn2j5DL39QKahdEs0=
Subject key identifier: 88:61:79:99:CA:6C:0A:E0:DA:82:F0:3B:51:06:1F:1F:32:AB:06:F2
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01967C45551FFB38C0CB0F51B8345FC0EDD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number: 1518
Signing time: Mon 28 Apr 2025 12:00:40 +0000
Manifest this update: Mon 28 Apr 2025 12:00:40 +0000
Manifest next update: Tue 29 Apr 2025 12:00:40 +0000
Files and hashes: 1: 2d0NREbfTK2FI7htmEEh4N4XLQs.roa (hash: EflrGXNj+c0/KROiAUAdkvP3FPssOcN4j+Wc2GCNRt8=)
2: RN4snQmQ10sMC0pt3uecgVuseDw.roa (hash: Sf04OwdvE8nAZA8tEzv2sgqcn/Ip+2j+x7sXM2qpNDA=)
3: TMFEuWpJtp-N546RTZSeOr_ihcc.roa (hash: 15tgIF1xV8iqz3lwud0LDIWMxNL1aGMOQ99+FVGNT5o=)
4: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: yxvfOQQaMrl8bZIhWOKVRBAsFEsJXWAuS4745uxF0J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:55:1f:fb:38:c0:cb:0f:51:b8:34:5f:c0:ed:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Apr 28 12:00:40 2025 GMT
Not After : Apr 29 12:00:40 2025 GMT
Subject: CN=88617999ca6c0ae0da82f03b51061f1f32ab06f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bb:14:ef:18:24:4a:6e:3f:81:e5:00:f3:f4:
ca:af:e1:56:a9:a7:4b:3f:72:14:bb:f2:a4:62:76:
a3:30:80:a8:58:b7:d0:61:44:88:98:7b:a0:0a:13:
36:85:59:cd:c6:a2:f1:ba:4a:a3:da:1b:57:95:b0:
96:21:02:30:28:b2:a7:cf:db:62:a9:20:9c:ed:69:
2b:b9:40:5f:44:d6:b6:13:96:0e:7d:3e:1c:cb:c5:
25:9c:f5:56:39:74:92:1e:b3:3b:32:42:1d:12:15:
bb:52:61:a3:72:df:1d:cc:fe:a5:d9:78:6a:29:00:
55:09:18:cc:8b:ba:3d:22:eb:d2:72:31:7e:1c:5a:
47:d1:e6:98:8f:bf:38:f9:0c:5d:e4:12:9d:f8:03:
20:53:33:84:d6:7f:a2:ee:d2:03:39:f5:fe:87:78:
ef:d4:0c:ab:46:3f:20:fd:61:6c:9d:40:3d:58:37:
a2:e8:6c:df:46:ca:7b:c4:a3:f3:f5:92:46:bf:d5:
cb:10:f7:f0:d9:2e:98:55:8a:dd:a2:9d:41:62:a0:
b6:64:3a:60:1e:07:3c:8e:62:5d:f4:16:a3:e1:95:
b8:27:de:05:65:3c:5b:69:ce:af:0b:6b:9a:df:43:
e3:48:da:e7:93:26:f9:bf:02:ae:e9:46:3b:0a:a5:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:61:79:99:CA:6C:0A:E0:DA:82:F0:3B:51:06:1F:1F:32:AB:06:F2
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:01:6e:4f:32:f0:1b:27:90:0d:67:86:4b:70:ba:25:3b:ac:
6a:11:65:00:c1:7a:fd:e1:5d:6a:f3:e1:53:12:2c:07:32:55:
6c:85:67:57:aa:27:4e:7c:2b:b8:ad:be:22:84:98:c3:f5:61:
04:03:4e:3c:b1:15:36:80:95:19:2e:20:b7:20:b2:af:7f:09:
c6:5e:36:cc:f9:98:d5:99:16:a4:21:e4:65:b9:37:1b:71:1c:
92:b7:18:f5:ab:d8:a0:96:7a:1a:43:a4:db:16:b7:69:6c:c4:
62:57:6b:b4:39:26:f9:70:16:69:37:ff:c8:96:4e:21:d6:4c:
5d:bd:8f:25:92:37:5c:70:3f:ac:c0:b6:a7:8b:cb:0b:65:96:
cc:37:d4:b7:fc:fc:10:b1:8e:1e:d5:b6:c7:5c:8a:e0:b5:9d:
76:f4:ae:c7:f4:d4:29:c3:f8:90:08:c0:8c:77:50:86:0b:20:
fe:fb:39:13:d5:b1:e4:08:46:86:44:26:f4:bd:a5:10:99:9e:
90:c9:b3:73:b6:f6:e7:9e:02:7f:08:b8:8e:47:fd:4b:bd:a7:
8b:58:9b:f4:44:74:55:29:77:63:97:b6:b0:69:37:dd:0d:72:
ef:d4:dd:a4:c1:30:8c:20:52:1f:e0:c8:a3:70:b8:a5:94:42:
96:8b:ab:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:04:33 2025 by rpki-client