Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
File: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft (raw, json)
Hash identifier: +4DRcZagSCHo6dSbXJzNdGT0MrciM2H+lyYqWrFgF1g=
Subject key identifier: 8B:7A:2C:07:3A:7F:68:09:27:DF:69:AA:40:74:C4:F5:68:70:75:88
Authority key identifier: 86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
Certificate issuer: /CN=86c4112efc9bed84761d3678b87c483948d2a72f
Certificate serial: 01967E33AA8872ED3BDFBE48D6F81C3E05B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
Manifest number: 1249
Signing time: Mon 28 Apr 2025 21:00:37 +0000
Manifest this update: Mon 28 Apr 2025 21:00:37 +0000
Manifest next update: Tue 29 Apr 2025 21:00:37 +0000
Files and hashes: 1: BYVEd7xc3EBzXbLQU0wScv8W8vM.roa (hash: eCnXcs4Xd2N+nO1T0PH3Iw+HOsHQZJC8Zr12UJP7ABo=)
2: hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl (hash: eJqRX+zCPFlTlsJFImxH+j13VT7oETRbht0XhXjxe9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:aa:88:72:ed:3b:df:be:48:d6:f8:1c:3e:05:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c4112efc9bed84761d3678b87c483948d2a72f
Validity
Not Before: Apr 28 21:00:37 2025 GMT
Not After : Apr 29 21:00:37 2025 GMT
Subject: CN=8b7a2c073a7f680927df69aa4074c4f568707588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:02:d9:45:47:f5:a7:7d:27:c5:01:0f:07:
fb:64:6f:54:79:3a:e8:3c:eb:e1:9d:dc:7b:dc:c4:
79:a0:ed:28:f7:7c:b8:d3:3e:31:d3:11:d8:fd:99:
2d:e6:f8:9c:7c:6c:0e:13:a8:36:a4:7b:fd:91:b2:
68:06:2b:c8:ad:af:7d:08:0b:74:19:d8:88:2d:3d:
81:2a:4a:34:4b:80:48:db:bd:8e:df:1c:01:ac:6e:
64:fc:18:6b:69:27:dd:26:d6:a4:da:4d:c1:71:b3:
0a:93:61:40:9b:a0:64:22:28:40:a0:7d:e3:2e:38:
b0:60:2a:2b:4c:17:c8:27:3c:8f:91:d7:51:46:7a:
86:09:38:65:e6:51:c5:93:fd:37:2d:b5:3a:55:ae:
f8:39:f7:69:fb:9c:99:f0:ae:c5:fe:09:08:62:36:
8e:44:e3:5e:c4:e1:aa:b5:34:1a:7f:1b:eb:9e:33:
3e:85:53:c4:c1:80:26:38:51:fd:f6:ca:46:1e:89:
ad:f4:5f:5d:76:9f:ef:c5:5b:f6:0f:71:85:b2:0e:
83:1c:e4:6d:ba:9c:d6:3c:b3:70:f5:d1:56:d8:4d:
20:6e:85:36:e3:3b:a4:3f:8d:b5:e8:16:b3:0c:00:
d0:d1:79:5e:a2:06:89:94:81:7e:a1:42:fd:49:14:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:2C:07:3A:7F:68:09:27:DF:69:AA:40:74:C4:F5:68:70:75:88
X509v3 Authority Key Identifier:
keyid:86:C4:11:2E:FC:9B:ED:84:76:1D:36:78:B8:7C:48:39:48:D2:A7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/45ebda-c2c7-4c27-95d4-00b96d74d8b0/1/hsQRLvyb7YR2HTZ4uHxIOUjSpy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:48:9f:0a:8b:9d:57:57:44:f5:b2:31:95:41:f7:e9:54:
b6:97:5b:7f:64:6b:7b:32:ba:6c:46:41:e3:42:dc:2e:8a:56:
06:a1:c6:b5:99:75:57:ee:5d:d2:aa:c7:69:fa:0a:4b:e2:e6:
d9:e0:57:40:0d:01:38:d1:2c:a9:11:ab:4b:d1:0d:84:44:2c:
51:60:bf:af:d2:e0:8f:0a:fc:32:9e:b3:12:58:06:b2:eb:bf:
a0:4c:52:b1:ac:d8:72:b4:fc:9b:36:55:16:64:36:49:1f:ab:
a1:b7:99:ec:dc:92:ca:4e:5e:6d:29:e0:91:ec:da:07:7d:64:
77:40:8d:8e:a7:ff:5a:3e:90:11:ab:06:72:74:8a:85:fa:43:
e7:21:a9:d6:d0:d3:08:26:59:fc:46:a9:d2:d5:c7:e7:c1:b8:
83:38:c1:3d:8c:b7:1e:b3:6e:94:69:b7:22:5e:67:04:59:31:
9e:3a:f0:4f:39:dd:3a:e2:d1:e5:45:a6:5a:d5:71:49:38:9d:
ae:79:6f:98:69:9e:c2:a3:ec:6e:0c:66:83:31:3f:db:68:c4:
cb:47:ce:cb:c8:96:bd:b3:17:4c:b5:b3:1d:2a:53:42:1d:46:
1d:d3:31:29:27:8a:71:dd:2d:4f:88:7b:8d:59:2a:8e:7d:04:
b0:a8:8a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:10:42 2025 by rpki-client