Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
File: hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft (raw, json)
Hash identifier: 9ormnsyEAeztLThsAYKAbDac4/Sf9DJKAaC1+N2p9Vo=
Subject key identifier: 71:C6:DA:F5:6D:0E:BD:D3:61:40:9A:F0:F8:FE:94:1B:C0:18:0D:59
Authority key identifier: 84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
Certificate issuer: /CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Certificate serial: 0196771F1EDF0DD3D0B0A626B96D584668D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
Manifest number: 14E4
Signing time: Sun 27 Apr 2025 12:00:50 +0000
Manifest this update: Sun 27 Apr 2025 12:00:50 +0000
Manifest next update: Mon 28 Apr 2025 12:00:50 +0000
Files and hashes: 1: 5PJXNIBNkIDizHXqABCfI2weMXY.roa (hash: mf+a4WKnZwf0YHj/JFfXY0yYuBPjjgdMLip3MBUWcAI=)
2: hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl (hash: AIawS8JgEiFE7MXWN7wrEdXlahd/wIVzteph5gsOugY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1f:1e:df:0d:d3:d0:b0:a6:26:b9:6d:58:46:68:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845beedf438a9aa961c34326437c29c4dd0cc4bc
Validity
Not Before: Apr 27 12:00:50 2025 GMT
Not After : Apr 28 12:00:50 2025 GMT
Subject: CN=71c6daf56d0ebdd361409af0f8fe941bc0180d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:2a:99:d0:1d:c9:78:15:1c:5a:5a:02:98:
4a:e9:27:03:30:49:cf:a5:1d:62:d5:a9:96:41:19:
1d:1b:5a:4d:30:c8:c4:13:2f:42:b5:98:f2:cf:af:
ef:2d:03:fd:0a:e6:48:33:a7:f7:dc:f5:34:d4:ed:
29:ea:d5:70:af:32:fd:c4:30:37:50:5e:a6:9b:42:
33:67:10:fb:e8:f3:f6:94:25:b2:cb:37:c5:55:3f:
be:df:08:fa:13:96:ab:1b:70:69:ab:81:61:41:78:
1c:33:d1:63:df:f9:76:19:c5:53:85:3e:a7:04:0b:
1e:03:0a:d8:04:f2:84:43:78:c8:f7:2c:ae:2c:dd:
c1:1a:e6:c8:f4:ed:95:98:59:1e:15:70:c0:3a:60:
a9:30:15:ab:e5:d3:c8:3f:96:9f:53:3c:d7:02:90:
96:02:e5:73:0b:7b:14:e2:06:77:a0:2d:f0:cd:aa:
3b:3d:4e:9a:e3:d0:9b:bd:30:b8:33:d3:c5:e1:f4:
19:2b:53:ee:70:cd:5a:b7:cb:85:f6:3c:d6:87:1e:
8b:a0:0e:4b:9f:56:be:30:f6:4b:71:ee:5e:b8:45:
dc:73:ed:67:ca:89:d5:d7:6c:46:12:32:22:b9:91:
c0:4d:eb:3d:c9:09:7c:ce:e2:b8:75:bd:08:93:ce:
78:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:DA:F5:6D:0E:BD:D3:61:40:9A:F0:F8:FE:94:1B:C0:18:0D:59
X509v3 Authority Key Identifier:
keyid:84:5B:EE:DF:43:8A:9A:A9:61:C3:43:26:43:7C:29:C4:DD:0C:C4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFvu30OKmqlhw0MmQ3wpxN0MxLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a70a84-d223-4dfd-9feb-18e64441d01e/1/hFvu30OKmqlhw0MmQ3wpxN0MxLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:87:45:e3:58:7f:22:28:c9:fa:bd:69:54:73:c1:82:ee:4c:
c2:1d:41:bc:92:ec:07:42:d2:c4:61:e4:e8:d6:8d:6f:5c:7c:
00:e7:89:d7:14:d8:93:0f:ab:27:4d:bb:8b:4c:05:ac:9d:8a:
d1:21:a1:5c:05:92:23:9a:1e:01:3d:43:22:61:a2:f7:76:1b:
63:49:aa:1c:8b:29:01:d7:2a:8a:4c:79:c3:06:18:7c:f6:e8:
97:e6:f2:ab:fc:65:9e:a9:19:61:1c:1f:47:e3:83:52:8a:34:
9c:28:6e:84:11:0c:d8:99:1f:87:85:4a:31:07:ca:c7:c9:5c:
fd:0f:34:20:f9:03:04:a5:d2:bf:73:60:ef:48:90:b9:b7:62:
aa:c7:93:a9:86:3b:b8:e4:2c:7e:ad:ca:c8:4f:b0:27:6f:f0:
61:ee:18:a8:bd:da:bf:ae:61:14:b3:42:fa:e6:b0:1c:17:62:
cf:51:e5:8f:ef:96:55:e2:bc:02:95:42:7d:4a:ca:a2:51:83:
31:77:67:e5:e8:f6:0f:a1:e1:37:76:e0:66:d4:a3:c3:64:ee:
88:c6:0e:19:10:28:e1:ff:a0:cb:43:2e:c4:38:cd:7f:98:d0:
53:a3:6b:e6:5c:25:98:85:c6:79:54:fd:3a:44:ed:64:7b:7a:
17:3e:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:28:05 2025 by rpki-client