Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: TjfOLWMxzWiWrX6ID/tMzRN1hNlE8u22D5z11Aw9o6k=
Subject key identifier: 44:50:AE:FF:C0:73:FA:80:48:BD:5A:E8:11:01:A6:CC:97:53:E9:67
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 01967A8D708004A23A5FB99DBC85B5D35C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: 34
Signing time: Mon 28 Apr 2025 04:00:11 +0000
Manifest this update: Mon 28 Apr 2025 04:00:11 +0000
Manifest next update: Tue 29 Apr 2025 04:00:11 +0000
Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: ZsvwzmCze5rTM7OhrmWR1kBeOCJtFFHYlANhMEQPTMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:70:80:04:a2:3a:5f:b9:9d:bc:85:b5:d3:5c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Apr 28 04:00:11 2025 GMT
Not After : Apr 29 04:00:11 2025 GMT
Subject: CN=4450aeffc073fa8048bd5ae81101a6cc9753e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:fe:78:22:e5:27:cc:22:11:54:2b:94:a7:
73:63:84:2a:c7:16:ff:2d:41:92:f8:3d:c2:08:9f:
66:a7:38:3e:1f:f3:b2:06:ac:02:84:ab:2b:1d:b7:
b4:bf:1d:54:6a:6b:ec:e3:41:80:89:9f:62:53:e6:
a1:b7:15:84:9a:0c:07:77:b3:c0:57:17:e7:ff:e6:
7d:b0:43:0a:27:b0:e4:0a:65:76:2b:b8:20:a9:1c:
65:ca:19:85:73:56:15:50:6d:c3:b4:f6:b5:4c:df:
8c:95:05:85:cc:4e:54:03:27:d2:e1:08:2d:8c:3a:
0d:7a:50:96:d8:10:a8:cc:f4:1a:86:7d:6a:4b:74:
49:07:26:d0:1b:36:48:0b:99:3c:64:0c:a4:93:53:
70:d5:98:25:31:b9:1a:df:7e:30:32:f9:7a:ce:9f:
43:5e:c9:44:ef:7d:f3:f1:79:55:28:e3:a3:d2:1f:
da:02:32:bc:c8:f6:e3:ad:72:42:2c:45:85:9f:41:
e0:5d:c7:a5:34:67:ce:40:61:3b:03:8a:61:42:0f:
bc:18:50:20:87:d7:e2:97:cd:eb:f4:12:36:cb:1c:
51:57:d7:33:1d:dc:6d:9c:63:1b:57:02:cb:e2:7b:
a6:27:1a:0c:65:6b:33:03:d3:03:17:86:96:05:7d:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:50:AE:FF:C0:73:FA:80:48:BD:5A:E8:11:01:A6:CC:97:53:E9:67
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b7:6f:8a:0b:f8:fb:dd:fe:fa:7d:aa:b3:52:e9:33:37:f8:
55:aa:f7:2f:0a:9c:a9:6e:9d:ed:73:31:64:1a:8c:df:39:cd:
fc:05:24:c8:9f:b4:0a:17:dc:f9:d1:95:48:41:5b:d2:ec:70:
ba:51:42:e5:1c:1e:ad:2d:8c:ed:0d:96:75:df:af:21:31:2d:
60:ab:8b:4b:dc:a1:fc:27:e5:ee:6b:a4:3e:b1:9f:9a:e4:60:
f8:07:b0:fa:8c:9a:d0:4f:a8:da:7e:f2:cd:04:02:e8:0f:77:
f6:b1:ee:b5:5f:0f:5c:55:fa:22:6d:60:4e:18:1e:dd:80:98:
c5:92:00:9c:64:11:43:46:e0:b6:10:5a:2a:f7:08:05:65:16:
5d:30:0c:08:75:8e:2c:1a:bb:12:f7:ba:67:02:7b:2f:26:18:
04:50:5c:95:80:61:58:d7:13:c9:1d:93:25:2e:00:e9:28:0a:
c2:6e:ad:55:42:39:8a:2b:d3:52:33:dc:c8:f1:84:eb:f7:f3:
ca:e3:81:92:40:b3:58:66:22:80:1e:3e:11:e6:60:29:b9:b3:
32:fa:4a:c9:11:2f:b3:05:96:b2:58:52:cb:d5:48:cf:72:12:
3a:1b:8f:b8:a7:a1:5f:0b:3a:a4:a4:55:08:6a:5e:08:8f:31:
10:8a:05:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:15:34 2025 by rpki-client