Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
File: hbkZo_6w7JZimf8Pro3vy0FeIv4.mft (raw, json)
Hash identifier: 4afn3PDbewPmobCcqBunqRZzYH/NfQTPJ9ZyZgUEQhk=
Subject key identifier: 29:7C:21:A2:E1:92:5E:38:7D:87:CB:43:36:42:8D:AA:AD:B3:FB:94
Authority key identifier: 85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
Certificate issuer: /CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Certificate serial: 01968322E5AE71F28CCE8F5583390D5F8172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 20:00:24 +0000
Manifest this update: Tue 29 Apr 2025 20:00:24 +0000
Manifest next update: Wed 30 Apr 2025 20:00:24 +0000
Files and hashes: 1: E0KbPb4RfPbI9ii_1fNlFCQuDLw.roa (hash: be5+koswrVopdsotzqVNJfSpffEio3grzLc2KrNQKj8=)
2: ExjSEeEAZl6w67KQQzB9tboEijs.roa (hash: kHRGvr6/I9lpmyPu60rCwXrYtjs7atLNb5bTbjbxNMY=)
3: hbkZo_6w7JZimf8Pro3vy0FeIv4.crl (hash: yWvMHCMFwkD21a6pkAMwUEcJw1ttF5o1IepH66fsPOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:e5:ae:71:f2:8c:ce:8f:55:83:39:0d:5f:81:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b919a3feb0ec966299ff0fae8defcb415e22fe
Validity
Not Before: Apr 29 20:00:24 2025 GMT
Not After : Apr 30 20:00:24 2025 GMT
Subject: CN=297c21a2e1925e387d87cb4336428daaadb3fb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4f:14:4a:41:6b:4f:a2:82:57:a6:37:a0:46:
35:75:bd:84:3e:52:c0:b7:ce:87:fb:23:93:09:d5:
48:c8:b8:db:46:56:70:b2:0a:6b:a1:0a:8f:24:1b:
95:35:3a:34:f3:5b:6c:82:cf:dc:7c:b4:05:56:f5:
d0:de:40:ab:7c:76:6f:ce:50:81:bb:f2:7a:dd:c7:
1f:3c:b9:1e:71:21:08:26:37:56:a5:dc:a8:3b:82:
af:7d:77:c4:45:14:db:b1:ee:72:95:3a:ee:36:f1:
e5:fa:99:2e:6d:61:2c:9a:8f:f4:4c:d3:a0:32:11:
0f:22:5b:3b:a9:e3:dd:7d:f7:4f:60:df:db:c6:7d:
c6:ef:c6:e9:8b:70:43:2e:63:20:c9:fb:da:cf:d9:
28:7e:ef:1d:22:0f:90:1c:f1:72:6d:a7:d7:86:67:
ad:e0:9d:96:aa:43:7f:e7:6d:eb:dd:1b:7f:e3:c5:
5c:97:08:49:52:17:0f:50:59:68:51:be:b6:8d:1b:
44:6e:af:ad:f1:7e:4c:c1:54:48:28:52:82:b1:7e:
a9:1c:ed:99:89:a4:a9:79:94:48:84:39:50:8d:01:
de:67:70:6a:ef:17:72:20:c6:7c:82:a5:d0:02:57:
b4:9d:33:ad:99:c2:ca:df:9e:fe:2e:6b:f0:cd:8a:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7C:21:A2:E1:92:5E:38:7D:87:CB:43:36:42:8D:AA:AD:B3:FB:94
X509v3 Authority Key Identifier:
keyid:85:B9:19:A3:FE:B0:EC:96:62:99:FF:0F:AE:8D:EF:CB:41:5E:22:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbkZo_6w7JZimf8Pro3vy0FeIv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5e0f5a-c6e7-43e8-bb21-47dc08d7e3ba/1/hbkZo_6w7JZimf8Pro3vy0FeIv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:10:bb:67:b9:64:69:fb:8c:cf:01:05:aa:fa:44:8c:be:28:
5c:30:7d:b2:1a:75:9e:b7:02:6d:5f:c8:4b:b2:79:49:61:0c:
70:c8:e1:66:49:fd:5e:4e:2e:8d:64:72:2e:3e:af:ea:a2:3a:
cf:00:0a:95:90:84:08:b0:d0:a1:6b:f4:df:3f:9a:0c:a2:79:
43:a2:9b:c2:c0:52:13:f9:5a:1d:d8:b8:bb:5c:4e:d2:e0:95:
9c:55:64:69:6b:c4:48:1a:dd:97:a8:61:e3:85:f7:dc:2c:b8:
e4:bb:70:de:05:61:7f:b0:9c:b6:d5:7e:80:f5:4b:e9:4f:05:
8b:ac:36:87:16:40:96:bb:fe:7a:e7:b2:f1:28:da:b1:84:11:
2e:46:8c:03:56:54:6c:02:ea:e2:45:ff:d0:8a:45:26:69:70:
42:45:06:2e:4b:0d:bd:4a:24:20:33:d5:87:52:bc:e9:a4:79:
44:11:6b:2b:2f:d9:7c:4a:c3:12:d2:13:71:97:44:46:ed:55:
b5:32:90:53:52:a6:a5:2f:1a:39:19:20:dc:87:8a:db:fc:00:
e2:e4:02:a9:28:bd:8c:a7:0c:25:89:2e:fd:a3:f1:07:4b:54:
6f:43:0d:a8:f0:a7:97:dc:22:b1:28:e9:b3:a2:43:e0:99:99:
01:83:2a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:18:01 2025 by rpki-client