Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
File: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft (raw, json)
Hash identifier: o17h0ypVZ30Dt6ucaY+NzOVeH3jgeK4S0YSAnqwFp5s=
Subject key identifier: 41:48:47:80:84:FA:FB:14:89:A1:13:A7:73:A4:12:65:A4:8C:86:1E
Authority key identifier: 1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
Certificate issuer: /CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Certificate serial: 01967868B316F5AB6AA7AFC42BFFE0D750AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
Manifest number: 05A1
Signing time: Sun 27 Apr 2025 18:00:49 +0000
Manifest this update: Sun 27 Apr 2025 18:00:49 +0000
Manifest next update: Mon 28 Apr 2025 18:00:49 +0000
Files and hashes: 1: 2kfAKgS6rtPxOokQdgiQcFW0Sbc.roa (hash: midqdd826AD6+dmyiJS8kWbnJkkjvvshmNXqoFoo9/0=)
2: Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl (hash: GD4Ryfd+BmeMloJnkYbYw9ZIRU3UT2hFeCVa3ZAePvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:b3:16:f5:ab:6a:a7:af:c4:2b:ff:e0:d7:50:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e7e08d56475bae407a4f2bca8e89a0997685a3a
Validity
Not Before: Apr 27 18:00:49 2025 GMT
Not After : Apr 28 18:00:49 2025 GMT
Subject: CN=4148478084fafb1489a113a773a41265a48c861e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:ee:60:89:d5:77:70:55:8d:14:0c:e5:b9:
75:dc:b2:c8:49:84:d5:4f:5b:99:2a:d7:6c:c9:b6:
3e:71:12:5a:4a:21:81:c0:1a:10:a0:a7:a1:73:b3:
e1:3c:c0:96:4f:0b:f3:e1:90:f0:96:ee:26:d4:30:
38:6e:7e:2f:d9:5a:c4:45:49:ad:21:4c:12:50:43:
c0:1d:92:41:fd:cb:1e:08:98:8f:24:d8:d5:33:df:
7b:c9:70:8e:18:21:d4:19:c1:cd:d7:93:87:4f:53:
2c:4b:4c:c5:4e:25:d3:84:cf:fd:2b:6c:cd:ff:82:
cb:6d:25:9d:b4:19:e8:bf:d9:7e:dd:23:a8:2f:29:
1f:30:ab:30:49:53:e2:e4:67:76:c0:c8:7c:d3:36:
df:7b:34:f5:b6:ae:d3:9d:8b:82:e3:4d:42:b1:71:
96:54:7c:89:c9:15:ea:2b:29:5b:cc:b7:3b:60:b8:
7e:4a:30:fe:3d:f2:27:27:0e:22:e5:c5:06:d2:e6:
ae:27:60:bf:fb:5a:9e:25:23:32:98:51:b9:4a:63:
82:9b:41:ea:f9:85:84:98:69:0d:65:75:ac:ba:0b:
7d:ef:0a:70:a8:5f:0e:63:43:58:48:ec:b0:26:d5:
be:4d:b4:98:38:93:04:ae:e9:bd:c0:5e:32:ce:4a:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:48:47:80:84:FA:FB:14:89:A1:13:A7:73:A4:12:65:A4:8C:86:1E
X509v3 Authority Key Identifier:
keyid:1E:7E:08:D5:64:75:BA:E4:07:A4:F2:BC:A8:E8:9A:09:97:68:5A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d27567-710c-48cd-9e5d-3002df825d5d/1/Hn4I1WR1uuQHpPK8qOiaCZdoWjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:b4:a5:39:c2:3b:1e:6d:5b:c0:4e:9a:2d:b2:3a:fb:5d:c1:
f0:40:e6:c7:28:6c:69:ad:20:34:17:a0:52:4d:61:86:9d:cd:
18:f4:bd:6f:2e:64:5a:11:89:2b:ad:02:94:13:0c:21:99:d3:
04:9d:e3:96:da:66:bf:a6:ec:8f:41:a2:64:00:a9:dc:8d:c3:
98:eb:5c:7e:c2:5e:9c:d3:04:dd:9e:45:95:46:85:06:fd:b4:
66:a6:ba:f9:e9:7e:40:15:da:04:b3:f6:c0:ff:74:e7:29:9c:
b6:0d:6c:48:3c:83:36:1f:b1:18:4f:e1:ff:f0:1e:b1:bc:09:
32:05:7f:53:c5:73:5c:e1:ef:7e:1a:3c:55:c5:0a:7c:8f:55:
f3:f3:c4:ad:bb:33:59:13:84:f7:b1:81:ce:67:59:b9:f6:7c:
3e:f2:83:c2:c7:ec:da:01:f5:83:e1:d0:5c:db:79:61:0f:8a:
6b:78:44:0d:1b:c0:b7:9b:7b:1f:b1:f8:19:18:29:46:b6:09:
5b:e3:83:25:5e:39:51:69:e5:e9:62:20:f7:48:ec:ad:bd:f4:
c0:22:52:ac:60:e7:d2:8c:0b:0e:2a:02:90:87:1b:0b:e5:06:
e5:8b:df:0c:f8:7a:6d:1d:f2:67:f4:8f:2d:aa:31:d0:a5:8e:
53:75:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:37:54 2025 by rpki-client