Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
File: hKafxWiJTLOYXt7yIha9mZdN4lE.mft (raw, json)
Hash identifier: HYGpYYfGMOzFvOPNQJ3MwkoDbFP65VB9pdbMRZSHk20=
Subject key identifier: 3B:8C:C3:13:04:1C:3C:C2:51:6B:E1:18:30:E3:BC:FB:53:03:9E:F0
Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251
Certificate serial: 0196759EA8730F3415A7C3C56D6431BB243F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
Manifest number: 11D8
Signing time: Sun 27 Apr 2025 05:00:54 +0000
Manifest this update: Sun 27 Apr 2025 05:00:54 +0000
Manifest next update: Mon 28 Apr 2025 05:00:54 +0000
Files and hashes: 1: gTuMJj4zNk4inmWeuwHt2oopg5M.roa (hash: zopPOsMBU8dt9Dr0i+LUD1TPbnQUzJ4uDKxUzfrnRiY=)
2: hKafxWiJTLOYXt7yIha9mZdN4lE.crl (hash: g+LrUQk045hZDX6Hs+uTSZj4lmWw3R24GPfsbDDwlw0=)
3: rnwY-7oYw6V-trqxlfGxfeIKZIY.roa (hash: Yep0/R2aV0HSvC5J3JSqbOslIcQ/KKdPdI5bChqi8Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:a8:73:0f:34:15:a7:c3:c5:6d:64:31:bb:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a69fc568894cb3985edef22216bd99974de251
Validity
Not Before: Apr 27 05:00:54 2025 GMT
Not After : Apr 28 05:00:54 2025 GMT
Subject: CN=3b8cc313041c3cc2516be11830e3bcfb53039ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:c1:d7:e8:23:aa:61:f8:e8:59:b6:e6:34:
ac:19:11:a4:1f:d4:ae:b4:f3:fe:36:8a:bc:f2:2d:
40:62:12:d7:25:3e:e3:d1:32:a0:ab:2d:09:94:0c:
32:87:7b:69:b0:61:a9:95:7f:59:b7:d5:ff:ec:dd:
dc:83:41:b2:3e:d0:5e:64:20:51:c4:7e:7d:6b:19:
3f:31:fd:ad:8f:05:d5:58:ea:1d:7a:f4:94:e3:96:
3e:50:80:f0:f6:9d:28:f5:eb:f9:df:c5:52:67:2d:
ab:61:0c:54:d9:ec:cf:cf:7f:5d:51:08:1e:ad:a1:
80:4d:c4:fb:b0:31:8a:df:ed:cd:89:78:37:0a:3d:
77:35:86:32:d3:7d:8b:78:9a:92:be:04:b0:29:50:
1f:c3:c7:be:f6:cd:cd:72:8c:bd:3f:ea:dc:24:68:
38:4f:4a:c5:d9:7b:f1:84:21:8e:82:3b:c2:c1:6c:
40:8a:0b:b7:e0:bb:0d:36:cd:d5:ec:bd:3f:29:ed:
41:77:7b:0e:64:cf:00:dd:60:b8:82:b4:21:25:4e:
5d:dd:0c:50:a7:fa:fa:a7:b3:df:be:15:a3:58:4f:
1d:d4:02:83:f6:06:ad:00:41:eb:f8:b3:ba:19:54:
24:96:e1:bf:8a:1c:47:57:93:a7:d8:ae:b6:d3:40:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8C:C3:13:04:1C:3C:C2:51:6B:E1:18:30:E3:BC:FB:53:03:9E:F0
X509v3 Authority Key Identifier:
keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ea:71:fd:d4:87:53:9b:72:4e:e1:ac:1c:df:18:4e:6e:a5:
2f:3c:8a:7f:a8:ae:e9:4c:e0:af:d4:f8:e6:65:15:a6:74:82:
c4:14:df:50:26:0a:bf:06:ed:9e:7f:88:27:b0:1a:a9:16:32:
32:a1:ac:62:ba:24:5b:73:a0:07:13:c6:86:a9:1d:2f:f3:9d:
36:81:af:8a:de:1f:12:95:43:f9:eb:5a:e6:66:10:f5:e1:90:
6e:9f:e1:5c:d2:17:30:4b:c1:b0:8e:82:c3:3b:61:98:45:80:
a4:d8:73:64:1c:08:6e:ae:ed:18:43:76:5e:f1:8b:4b:8c:96:
f1:e6:b0:83:1f:b1:42:a3:1f:fc:fa:6f:2b:68:4c:98:5b:ae:
be:ec:67:bf:83:53:e8:2b:53:5c:f9:42:d1:03:04:c1:24:5e:
1a:c0:08:f1:d4:83:6c:7d:40:95:84:7e:21:d3:da:b4:43:e0:
6c:bd:a4:9f:df:62:5a:f8:bf:35:5f:b7:89:a0:b8:ae:de:c2:
b0:2a:e0:e9:a6:57:34:e8:62:31:e1:13:a0:38:cd:0f:c2:a3:
c3:e8:cc:23:36:ad:0a:cb:7d:bb:29:64:be:42:e5:d7:e1:2f:
0f:ea:a5:e9:4f:7a:42:7a:ad:26:7f:e5:dd:04:9b:41:df:51:
c2:21:49:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:06:49 2025 by rpki-client