Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
File: Hi6q16hwZhXRyENtzgGVSV8hSoc.mft (raw, json)
Hash identifier: hEzUGPvae4yPAOwqSCgOrNWSQgP61xYh8Y5R4GZp6s0=
Subject key identifier: 03:1F:9D:F0:D5:4F:58:56:99:A7:6E:84:A6:C1:78:32:78:EA:33:C5
Authority key identifier: 1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
Certificate issuer: /CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Certificate serial: 019674C2A56BC9320E4AB5650D8A23936624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
Manifest number: 08A6
Signing time: Sun 27 Apr 2025 01:00:35 +0000
Manifest this update: Sun 27 Apr 2025 01:00:35 +0000
Manifest next update: Mon 28 Apr 2025 01:00:35 +0000
Files and hashes: 1: 1qUuzp1BSb73YBxt2G1-L71RBo0.roa (hash: RsoVHiN4hMhxH5nMDIM8Pr6yKP0XCEu41kBjnTbcTNQ=)
2: Hi6q16hwZhXRyENtzgGVSV8hSoc.crl (hash: nhD6jdICuKQv69fwnwQxxA8QsFwWmlicEtTHFr6zfG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:a5:6b:c9:32:0e:4a:b5:65:0d:8a:23:93:66:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e2eaad7a8706615d1c8436dce0195495f214a87
Validity
Not Before: Apr 27 01:00:35 2025 GMT
Not After : Apr 28 01:00:35 2025 GMT
Subject: CN=031f9df0d54f585699a76e84a6c1783278ea33c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:a8:88:f3:9e:4a:3f:61:bb:43:b9:b3:6d:
9c:5f:9a:f2:d5:a7:15:db:69:f9:36:ad:84:db:1d:
fd:c4:4c:06:7f:9f:0d:93:0c:4a:78:81:c6:88:28:
2e:36:b3:63:fa:93:68:6e:d5:f3:58:5e:5c:8b:c5:
38:f1:65:9e:00:ff:21:da:f6:5b:69:fb:1c:b0:20:
2e:eb:e5:14:4c:c5:9c:00:9d:2d:b8:50:d8:a7:92:
33:d6:9f:c7:37:e1:3b:c9:a6:b6:ee:b9:5e:68:b3:
e7:39:2b:0e:44:e2:50:9b:b5:35:84:d0:f1:72:65:
08:39:12:9b:1b:db:b4:99:21:33:37:ec:6c:3a:dc:
71:75:ed:e5:30:e6:bf:f7:82:97:a0:69:13:16:ce:
e0:aa:00:09:45:65:c4:2c:ae:3f:f1:68:b4:14:3a:
f1:98:7e:db:35:3c:07:e7:0f:f8:bb:58:99:77:12:
b7:7c:d6:51:88:8c:40:92:46:2a:9d:44:2e:e4:e9:
6d:20:95:28:20:25:5d:ad:9a:af:df:0b:95:de:4d:
92:17:5c:7f:75:71:27:d4:85:af:dc:a2:62:51:a8:
1f:f4:55:7e:2f:13:ce:2e:9d:d9:ae:03:b1:5e:b9:
97:47:9a:2e:68:ac:41:f2:99:dd:e0:b3:1a:cb:79:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1F:9D:F0:D5:4F:58:56:99:A7:6E:84:A6:C1:78:32:78:EA:33:C5
X509v3 Authority Key Identifier:
keyid:1E:2E:AA:D7:A8:70:66:15:D1:C8:43:6D:CE:01:95:49:5F:21:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hi6q16hwZhXRyENtzgGVSV8hSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/08cb62-39df-432e-8a76-2c98f17b8eb3/1/Hi6q16hwZhXRyENtzgGVSV8hSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:45:46:a9:40:a6:ac:db:30:f7:ab:3c:51:1f:d1:b7:b8:e8:
a6:28:b0:d9:d4:e9:59:d1:c9:26:e3:79:62:5c:06:0f:fe:37:
f0:72:ec:60:dc:f3:6c:d2:2f:30:6a:5c:33:c0:8e:61:f9:f3:
18:f5:ac:68:e0:cf:23:4e:db:54:22:86:83:5d:e7:f9:49:2f:
a5:0d:97:80:2b:4f:55:80:5d:21:ad:0a:c2:ba:44:74:44:13:
65:27:ee:b4:65:63:2f:42:64:c4:64:8a:60:92:a9:af:a3:64:
09:39:7d:32:4b:b2:d5:0e:6a:53:aa:22:22:85:fd:ee:51:05:
66:eb:7b:04:fc:27:59:48:51:63:41:94:43:44:ba:91:7d:5f:
ae:19:0e:b0:e1:26:c2:ae:fa:07:2a:5c:2c:b2:04:4e:ea:f9:
da:fa:cc:40:a4:3e:67:4a:03:4a:1f:bb:ec:c2:5d:a9:5a:5e:
5e:32:99:d0:ff:2e:4f:64:54:6a:ac:1d:38:8b:dc:b3:8b:4b:
02:ae:67:7b:14:0b:c5:1a:c5:f3:06:de:56:d8:9b:8f:01:c6:
bb:bf:7b:b0:41:ab:bd:27:b5:26:08:fb:a6:6f:7e:4e:08:0c:
d0:a9:4e:14:20:37:3c:2d:7a:9f:36:6d:dd:f1:ef:8a:ff:4c:
fe:cd:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:27:31 2025 by rpki-client