Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File: hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier: 94zBhR56fxRHdUYdP8deDSslpHK+lVxnObs/ai5VBXw=
Subject key identifier: 75:AD:0A:22:51:72:0B:09:91:ED:AC:F4:08:0A:2D:E0:0C:46:AA:AD
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 019683FF9E0D81DEDDE83BE023AED275F986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number: 151A
Signing time: Wed 30 Apr 2025 00:01:29 +0000
Manifest this update: Wed 30 Apr 2025 00:01:29 +0000
Manifest next update: Thu 01 May 2025 00:01:29 +0000
Files and hashes: 1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=)
2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=)
3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=)
4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=)
5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: NXFNJLEtOGyQBZ6RxWjiEV/X9Fxm8JW0HdxTDNVsWIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:9e:0d:81:de:dd:e8:3b:e0:23:ae:d2:75:f9:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Apr 30 00:01:29 2025 GMT
Not After : May 1 00:01:29 2025 GMT
Subject: CN=75ad0a2251720b0991edacf4080a2de00c46aaad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:70:96:ef:30:cf:f7:7e:d5:a3:f7:cc:96:
da:cd:e4:d3:1b:06:c5:c2:4d:48:4a:95:56:21:13:
ed:b7:29:d9:31:c0:f2:df:a9:0b:97:59:d9:bb:33:
53:9d:f4:2f:3c:bc:8f:64:62:67:6a:1a:8f:96:2d:
d9:f3:6a:47:f9:73:13:0f:ed:24:75:43:18:d6:a9:
4e:eb:c4:d8:ca:e9:c7:0e:61:8e:79:a7:3e:45:b5:
70:88:f4:f0:65:e9:6d:f6:84:2a:4a:8f:8d:e7:8d:
11:bf:5d:bc:60:5e:ec:40:70:5f:4d:8d:d3:30:dc:
79:f9:91:aa:af:97:5c:ad:0a:f8:7f:cb:2a:02:45:
9d:ba:5b:4d:d0:38:ee:7f:fd:af:f8:3b:af:d4:41:
a5:fd:9d:62:73:e3:ad:b4:d9:f7:ff:fa:40:fd:a8:
30:f4:01:04:41:df:18:ec:11:e6:61:5c:3d:d0:37:
43:62:0f:b2:ca:67:f4:5d:60:46:ba:e6:2d:6f:73:
10:ba:67:d5:2e:9c:7d:c4:0e:7a:16:8c:c4:aa:06:
74:1e:15:c6:ca:b1:1e:f8:f6:d3:62:c8:3d:20:9e:
b3:82:d8:0a:bb:59:b7:5e:70:e0:5d:fd:60:84:c2:
93:a4:e9:40:03:31:30:9b:e9:8b:82:c6:50:cc:1b:
08:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AD:0A:22:51:72:0B:09:91:ED:AC:F4:08:0A:2D:E0:0C:46:AA:AD
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a8:62:85:0f:3a:7a:c3:5c:66:ef:01:bc:aa:82:9a:9b:3f:
0d:5e:b8:08:4b:72:8d:d7:3d:ad:f1:fc:11:3e:da:87:7d:0b:
52:73:90:38:5e:77:a1:bf:11:45:f8:0d:a9:b6:df:16:9b:06:
cf:39:a5:ca:5f:3c:92:c9:dd:85:f7:72:45:29:c2:81:bf:f8:
f5:97:5d:12:ad:19:e5:1f:07:08:f8:f8:4b:41:40:4e:a8:b7:
2e:66:ce:2d:fb:34:0f:86:b2:51:b8:5d:b8:14:b0:4c:11:fb:
53:fe:fc:ad:2d:d7:e5:23:a9:d4:ca:3c:4d:60:3b:35:97:c4:
20:1c:37:f9:d1:1f:ec:3c:fd:f2:81:5f:85:29:78:2e:80:a4:
a3:98:d2:68:5d:60:ac:07:47:f3:6b:c5:ba:c8:50:64:75:e7:
c5:15:d5:1d:c7:ff:eb:0f:7c:94:fa:fc:7d:f9:71:c5:f8:b3:
b1:e7:f7:22:6d:0a:4c:6c:85:7d:c7:b9:91:84:52:15:6e:e4:
00:70:1b:f3:f8:2c:98:c1:9d:8d:a8:75:91:4f:bf:36:3b:aa:
cf:cf:bd:13:15:23:8a:dd:a1:d7:bb:9e:35:4e:3f:5d:54:4a:
4b:17:75:1a:36:0c:44:b0:6d:99:c3:fc:d0:91:c5:b1:64:7d:
40:28:cc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:18:34 2025 by rpki-client