Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: 2ZkwCq8h2ZUNZioeThjvz1RNfuLjStf4myarejhtznw=
Subject key identifier: 8A:0F:2C:B2:F7:ED:B6:DB:30:5C:45:DF:73:4C:F9:E0:51:66:62:D2
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 01967EA12AF5E4A8101A4B3D1CE33F2EAC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 11C9
Signing time: Mon 28 Apr 2025 23:00:13 +0000
Manifest this update: Mon 28 Apr 2025 23:00:13 +0000
Manifest next update: Tue 29 Apr 2025 23:00:13 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: UI1Z3gGvDg/jVPom9Ub7zcGp4EHh5hx7MnO0rxwoq7I=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:2a:f5:e4:a8:10:1a:4b:3d:1c:e3:3f:2e:ac:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Apr 28 23:00:13 2025 GMT
Not After : Apr 29 23:00:13 2025 GMT
Subject: CN=8a0f2cb2f7edb6db305c45df734cf9e0516662d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:52:e5:1f:9e:a2:95:3d:d1:2d:4d:c8:5e:
f1:da:91:a6:e5:62:19:07:62:80:3d:49:d2:bc:58:
59:9a:e5:94:01:67:df:58:56:94:c6:07:7c:d8:fd:
c6:62:09:e1:2c:7e:87:f9:bb:9a:c5:6a:fe:9f:f9:
8c:23:14:32:16:1f:1d:74:04:14:d7:ea:7d:29:91:
c1:16:9a:a0:58:5c:c7:dd:bd:b7:82:15:2b:d0:f2:
ca:8f:af:6b:90:71:19:16:d6:0f:1d:6b:06:ed:76:
97:97:f6:44:9d:37:1b:f9:ce:67:09:ec:9a:24:70:
db:ef:ef:99:76:b8:ac:e0:a8:e3:10:d4:51:17:4c:
2a:8c:d5:cc:7f:88:de:e3:69:d8:f8:27:e6:22:56:
fd:e5:31:c8:ed:cd:8a:f7:a8:95:03:fc:a0:e1:64:
ca:64:5f:7e:25:37:b0:f6:29:3b:c8:9b:05:44:78:
ab:17:22:64:6f:a6:08:01:59:bf:c2:e3:44:2b:d1:
7d:bf:b2:d4:c7:51:70:54:ba:5c:16:e8:d9:ed:ba:
9c:79:9a:08:ce:7b:ec:b2:48:11:84:db:a8:b5:97:
af:ce:c8:c9:02:e8:e2:21:32:81:66:09:e1:62:dc:
24:aa:66:0b:e0:56:92:eb:8f:00:69:da:9b:b7:b3:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0F:2C:B2:F7:ED:B6:DB:30:5C:45:DF:73:4C:F9:E0:51:66:62:D2
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ec:22:40:ff:c2:ff:c3:bb:01:48:8b:7f:d6:03:e6:29:34:
09:0b:55:2a:d3:3d:63:68:f8:49:72:5f:59:84:d3:46:28:37:
f7:4a:b6:80:ed:9d:6b:43:bc:e7:ed:37:c6:5c:6b:6b:ab:e7:
a2:0d:96:13:c2:fa:16:ff:91:c4:4a:d4:a6:9e:80:42:b7:78:
44:8c:3c:c4:21:6b:9c:2b:fd:05:38:8c:fd:da:23:2f:32:6d:
49:9f:a4:7d:5b:52:00:60:e4:5b:27:e6:d5:e3:4f:b6:65:79:
8e:e3:61:5d:f8:f7:4d:b3:35:92:6a:37:08:bc:ba:58:13:dc:
57:06:ec:e9:0b:7a:99:7f:e3:2c:4f:57:dd:91:cd:1f:92:e4:
6e:0b:3a:38:9d:27:b7:cf:40:59:6a:62:64:b2:a6:a1:14:6e:
5e:a7:d8:92:46:af:08:d8:2a:60:d0:9e:9b:e5:76:16:f1:9d:
53:c8:58:42:e1:f8:e3:6c:6f:85:cc:d5:33:05:63:22:b0:ac:
1c:c9:15:da:0e:b0:5f:69:a0:e2:28:18:1c:57:7e:b9:cd:c3:
ef:aa:de:c5:dc:c7:d9:0b:ec:a2:f1:6a:5a:57:47:9c:cc:67:
38:0a:89:77:9b:ab:62:07:3a:80:34:93:2c:e7:a2:31:f7:e1:
ca:5a:d2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:37 2025 by rpki-client