Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: Jgot67+IzbgE5+zQsW+OJyzpB+vI78hKnbV3sIgmMeQ=
Subject key identifier: 24:41:8B:E5:80:47:DF:57:C7:1D:11:68:53:E0:79:04:68:AE:12:D9
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 019674FA269545D92C873CEC8D7D81D8257D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0E0E
Signing time: Sun 27 Apr 2025 02:01:12 +0000
Manifest this update: Sun 27 Apr 2025 02:01:12 +0000
Manifest next update: Mon 28 Apr 2025 02:01:12 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: OsASR8tN3rQXec0p81P+ny+3nme3zsK1INmHbdlnK5s=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:26:95:45:d9:2c:87:3c:ec:8d:7d:81:d8:25:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Apr 27 02:01:12 2025 GMT
Not After : Apr 28 02:01:12 2025 GMT
Subject: CN=24418be58047df57c71d116853e0790468ae12d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8e:2f:6e:5b:f4:c8:1c:7a:53:ab:a0:54:51:
14:2e:ea:9e:fc:9d:ed:f5:20:4a:8e:ea:2b:df:c6:
21:e3:4d:f7:d3:e9:e9:68:d4:dc:06:88:8d:92:3d:
6c:84:f9:b4:10:1d:31:fb:84:30:f1:4c:1e:e9:e2:
ed:c7:53:05:e1:9e:54:ce:2d:bf:28:75:f8:11:d1:
50:19:5b:44:ee:a7:3a:a2:ab:32:29:4d:a5:99:e4:
fd:a5:cd:50:87:39:3e:64:58:68:11:2d:60:50:ac:
b5:ad:9f:bb:f7:cb:b7:74:01:42:b4:23:33:1c:a9:
8d:41:c9:db:9f:14:fd:fc:c8:4e:b4:c9:1c:4c:fd:
0e:7e:e1:75:b1:fb:71:19:f1:80:86:e4:52:6b:8b:
13:e7:ea:06:5c:6d:be:24:c8:50:79:a3:cf:94:6c:
2a:2a:3f:d2:c8:6e:40:0a:99:ed:ee:68:01:a8:6b:
95:eb:d7:1d:9f:59:15:03:6d:24:9e:5c:f2:ac:83:
0c:aa:cb:fb:92:84:9c:70:27:a9:b6:15:3d:e0:85:
4f:48:06:5b:39:61:be:f3:21:18:de:e7:a6:c7:26:
06:f5:24:85:25:db:5a:e8:e0:fb:b6:d0:22:4b:6f:
6d:48:d3:30:33:10:ef:7a:bf:ed:80:bf:9f:51:b6:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:41:8B:E5:80:47:DF:57:C7:1D:11:68:53:E0:79:04:68:AE:12:D9
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a6:36:74:33:3c:af:a9:fd:4d:68:68:3a:f3:b9:76:6a:c6:
fc:78:89:f8:00:f8:7f:f6:8e:10:93:99:dc:73:26:66:94:27:
e0:81:cc:73:39:ec:06:64:3d:4b:13:8c:dc:0a:99:8d:07:2e:
84:b9:38:df:d9:86:2c:f0:d6:81:fd:e9:36:e6:17:77:87:03:
6a:89:24:7b:06:a2:46:51:0d:3f:cd:ac:04:65:cb:1d:e2:c8:
f8:2e:cd:95:83:97:80:6b:ea:85:48:c3:5c:82:8a:85:aa:ec:
2e:65:1f:68:6b:14:6e:c5:7c:b7:9c:e8:02:b9:18:51:51:48:
2b:e1:aa:82:77:42:dc:2f:10:64:aa:e3:86:32:41:ff:47:f1:
5b:35:c6:fe:ca:73:d7:85:15:16:ea:a6:aa:b0:37:14:d6:fc:
2d:da:67:da:76:e4:c1:88:6c:c6:18:78:11:f8:75:2a:9b:73:
13:d2:11:b2:ef:68:e8:6a:93:a9:88:7d:52:82:95:db:00:87:
96:16:43:38:5b:ea:58:60:ea:96:e2:25:02:b4:b8:88:cc:e4:
e0:e0:ee:fa:12:b4:f1:51:f5:6b:d7:ae:14:20:ea:66:30:f2:
bd:6d:82:dc:93:48:c5:86:93:91:3a:1e:4a:4e:5c:0c:e7:1f:
59:a7:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:46:12 2025 by rpki-client