Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
File: hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft (raw, json)
Hash identifier: 1sEz8+FfDua3HZLShwBQ0F1+qptnF3lYfXnXXYwbM6I=
Subject key identifier: 59:90:EC:38:78:67:16:05:46:4D:F1:37:05:84:C6:AC:AB:DB:5C:8D
Authority key identifier: 84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
Certificate issuer: /CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Certificate serial: 0196808FC0EDF02CB58BC299F2B862C8BA1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
Manifest number: 0872
Signing time: Tue 29 Apr 2025 08:00:26 +0000
Manifest this update: Tue 29 Apr 2025 08:00:26 +0000
Manifest next update: Wed 30 Apr 2025 08:00:26 +0000
Files and hashes: 1: hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl (hash: CTa9fLdEhEaxXUiE8U58caIDPJgaFLQOtSqjotktRio=)
2: nkA7CUcmlzAJuGx_3HjuUPjmAbc.roa (hash: FtjNcs/Ikv5rVNiwdDeOxS0oJdHrtBYVifsyHe4+WbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:8f:c0:ed:f0:2c:b5:8b:c2:99:f2:b8:62:c8:ba:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84926c47a3607f51a39e1c91e7897f85f47e347c
Validity
Not Before: Apr 29 08:00:26 2025 GMT
Not After : Apr 30 08:00:26 2025 GMT
Subject: CN=5990ec3878671605464df1370584c6acabdb5c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:69:d5:12:2f:73:a4:06:bf:2e:8d:f2:5f:
8f:c4:ff:dc:6f:c1:c9:36:7b:c8:76:56:17:3b:7a:
03:ea:e9:e0:55:9a:1e:96:5c:79:54:bf:1e:06:a2:
ba:c8:99:5a:c5:6c:9e:e5:3c:f0:6e:45:af:df:c9:
51:50:ae:4b:95:52:9e:09:ef:d9:5b:f5:47:2b:54:
0e:38:a0:bd:77:4b:03:7f:b1:2a:04:55:af:31:90:
ca:96:d1:2e:54:c9:af:e8:a3:4c:82:28:67:0b:7d:
d9:09:d4:d6:be:90:04:fe:74:36:01:f8:e2:dd:69:
f9:e5:46:c1:c6:4e:75:3f:c1:41:a3:ee:a9:84:17:
19:0a:52:83:de:1c:2f:7a:21:aa:9c:a9:bf:b3:a2:
14:6b:8e:f4:77:3f:9e:27:35:ff:2e:b7:43:96:bd:
12:98:8d:d8:53:4f:b9:b1:d5:ee:33:57:c2:9e:5d:
85:eb:82:57:dc:97:3d:c3:83:b1:08:a7:23:09:4e:
fb:85:12:68:af:bc:04:b1:7d:a4:3e:c2:59:f0:5b:
4a:68:89:ec:66:67:2a:df:20:5d:ce:40:58:d8:4a:
83:a7:c5:da:57:8f:2a:db:d5:d7:5a:82:ce:9a:11:
5c:7b:41:02:10:4a:ff:4c:10:b8:8b:10:d3:1e:93:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:90:EC:38:78:67:16:05:46:4D:F1:37:05:84:C6:AC:AB:DB:5C:8D
X509v3 Authority Key Identifier:
keyid:84:92:6C:47:A3:60:7F:51:A3:9E:1C:91:E7:89:7F:85:F4:7E:34:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJJsR6Ngf1GjnhyR54l_hfR-NHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/865eeb-d60b-4e00-811f-51d1646023f0/1/hJJsR6Ngf1GjnhyR54l_hfR-NHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ac:84:8e:19:de:f7:8d:c3:86:38:6b:3b:1f:3d:01:76:05:
b4:47:bf:cc:22:48:80:ee:89:9c:93:3f:e8:87:7c:18:b1:eb:
65:0e:bb:3a:ee:2e:0b:8f:3d:86:1f:f0:6f:dd:bb:a3:e6:6a:
41:25:23:5a:73:98:0c:c5:9e:89:d7:17:cd:22:60:95:73:80:
8b:fa:36:43:2f:3b:aa:b8:48:99:17:2c:05:44:3c:46:87:72:
67:41:12:c8:02:15:6e:ef:0f:b5:1d:df:65:d4:7a:b6:0c:b4:
82:f0:6b:da:61:a8:a7:93:32:5f:20:ee:96:19:20:40:77:19:
9a:47:65:73:70:3e:ef:67:70:c0:ed:18:c3:88:63:53:cc:ed:
5a:43:ad:3e:ac:1a:ef:67:75:e8:68:ba:6e:02:be:3a:c9:4c:
92:0d:e8:fa:8a:2c:ad:69:88:ea:8f:cb:f4:af:bb:bc:86:4b:
ff:87:04:7b:67:37:f3:2e:49:49:4d:25:fe:25:4e:ec:df:64:
76:a5:fb:b0:7e:8b:50:99:4f:7c:81:bf:58:28:9f:e1:59:1f:
f3:e8:6a:7b:46:82:c5:06:22:fe:9e:86:eb:e0:c1:b9:b9:d1:
e0:41:93:56:62:c4:33:ec:cb:16:11:24:5e:06:a4:8b:ba:15:
17:e7:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:13:32 2025 by rpki-client