Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
File: hEoXkcsH8dhhI8Y9w63P11TbEBs.mft (raw, json)
Hash identifier: jxSO+HnWiYyeMyYIbdTXba+LNwRQWx/e2h72XI476ug=
Subject key identifier: 58:85:15:76:31:59:75:8D:73:23:CE:DD:FA:AF:BD:A2:4D:62:DE:3F
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 019687DBEAAE639108999E4F4D5DA8E6AADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
Manifest number: 0929
Signing time: Wed 30 Apr 2025 18:00:58 +0000
Manifest this update: Wed 30 Apr 2025 18:00:58 +0000
Manifest next update: Thu 01 May 2025 18:00:58 +0000
Files and hashes: 1: Ihp0VP8oRNeTGrBSGwpts6D1JhE.roa (hash: Qldf3LszJ2g2XwaE6LEoxPc+aR59tijRa50IN/mT6PY=)
2: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (hash: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=)
3: hEoXkcsH8dhhI8Y9w63P11TbEBs.crl (hash: X3K0Yh7GWjb8lIY1ogTBKKEouDVP5z1qzG1Urcmyv4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:ea:ae:63:91:08:99:9e:4f:4d:5d:a8:e6:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Apr 30 18:00:58 2025 GMT
Not After : May 1 18:00:58 2025 GMT
Subject: CN=588515763159758d7323ceddfaafbda24d62de3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:14:41:bf:c2:30:e3:e0:9a:58:6e:88:d7:25:
d2:5e:23:d5:12:60:ae:96:66:b1:e2:dc:78:9c:66:
b0:d4:60:02:da:6c:af:fa:27:6e:c0:18:9f:5d:8e:
ac:bb:4f:d9:63:2d:6f:8c:da:e9:8e:b9:96:f6:33:
6c:57:df:07:5c:e6:dc:af:5c:58:d3:56:72:04:86:
b0:6a:34:6a:e3:4f:75:e6:a6:60:7e:4d:78:fd:ef:
15:34:bc:c8:0c:cf:2f:af:45:66:a3:59:6d:2f:67:
a0:77:1c:25:77:cb:f6:4d:00:22:1c:11:f6:4b:bc:
a7:3d:6b:2d:4b:a1:62:f2:00:65:7e:cf:d5:3b:22:
fa:2d:74:d8:75:16:0e:06:af:9a:50:92:39:0c:f9:
ab:e0:37:59:44:4c:b3:fc:4b:ec:e5:4d:da:6f:50:
9a:b2:d4:cc:a7:da:b0:95:5c:27:1c:2a:be:be:8a:
3d:be:b1:3f:99:c1:65:a2:3d:55:7e:2a:44:9a:2c:
c1:4a:52:07:9a:bb:5d:7c:c7:9c:d0:eb:87:5c:13:
3f:8e:96:05:45:1e:5b:58:e6:e3:6c:39:db:5b:a7:
c7:8e:4f:a2:b6:e5:9d:5a:df:26:c5:72:5d:2a:ff:
65:0d:75:a6:ac:31:40:65:4e:91:67:07:2b:70:88:
24:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:85:15:76:31:59:75:8D:73:23:CE:DD:FA:AF:BD:A2:4D:62:DE:3F
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:f8:1c:78:f0:7b:04:7e:c0:3b:7c:35:c6:7e:68:0e:95:
e2:5f:f3:ca:5c:1b:c7:ee:08:48:ec:7c:2f:e9:c1:45:73:15:
10:c7:dc:28:56:66:92:e8:8d:be:67:a4:c9:41:2f:3e:2f:af:
b0:cc:9b:28:0c:72:80:36:af:7d:f3:15:59:7f:b2:4a:51:05:
b7:98:e4:a2:8c:1c:c0:d2:4f:aa:38:25:c9:4e:f6:5e:a2:e7:
53:e6:b6:87:0d:91:47:0f:f8:80:48:f9:fe:a9:02:b8:be:af:
4e:77:47:0a:bb:56:64:20:db:4e:87:df:f8:07:93:a2:4b:bf:
6c:4b:7b:3a:25:8c:cd:57:bc:72:da:42:f4:e8:ae:f3:e5:fa:
97:29:ea:af:33:9c:d3:f3:59:52:8f:86:27:92:ac:43:55:6d:
8a:da:c0:5b:46:37:c6:b3:ae:8a:aa:04:1c:6d:2d:4c:9f:15:
1e:09:7d:24:a4:33:ad:b5:80:66:92:50:e3:d6:b7:f6:73:40:
e2:18:cc:e5:01:4b:e4:49:35:58:6f:54:c9:c9:55:64:c7:23:
b9:1b:61:55:5d:fb:dc:91:ae:48:9b:2f:9d:7c:cd:c5:16:fc:
0c:cd:37:5b:2b:36:53:87:43:7b:e3:f1:ca:5b:0d:07:ed:5b:
05:63:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:21:04 2025 by rpki-client