Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: akNBKj9Q102YfKwPc/x80h1bl0r4q9psLwNyXpr2Uy0=
Subject key identifier: 99:C0:21:B8:B9:7B:87:9F:2C:E1:9A:1B:0D:E6:60:F1:AE:A5:52:7F
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 0196753051A9638650108F1D6BCE3CEC7432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 04B2
Signing time: Sun 27 Apr 2025 03:00:22 +0000
Manifest this update: Sun 27 Apr 2025 03:00:22 +0000
Manifest next update: Mon 28 Apr 2025 03:00:22 +0000
Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: t450rhpaaype//pQZPjZQdAdnWBfat+nrrF2FIHViNA=)
3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:51:a9:63:86:50:10:8f:1d:6b:ce:3c:ec:74:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Apr 27 03:00:22 2025 GMT
Not After : Apr 28 03:00:22 2025 GMT
Subject: CN=99c021b8b97b879f2ce19a1b0de660f1aea5527f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e7:54:f7:23:01:ca:5b:b7:df:25:fc:ac:2a:
b6:bc:2d:6c:da:73:77:75:f2:d7:b9:0c:e0:d9:4e:
a5:b4:55:7a:fd:6c:d0:51:4f:fa:31:d3:51:99:f8:
9e:ad:c1:6a:37:e0:ea:05:9a:e5:08:bf:9d:17:a5:
c9:b0:90:d0:4b:30:80:55:70:55:b5:47:c9:71:6c:
7a:24:df:ff:4e:d9:a6:49:d5:69:c8:9e:b9:89:54:
2e:ad:2b:02:8c:a7:43:8d:48:16:be:8d:b3:ca:d7:
be:9b:c6:53:0a:cb:e3:f0:df:dd:0e:64:ca:28:89:
7b:77:82:e8:48:c2:f7:da:9d:74:df:f4:67:6a:7d:
c0:d0:35:29:6e:18:8d:25:4f:5d:c2:ff:0a:b1:0a:
2a:74:2e:60:26:08:6d:53:09:5e:d9:00:e5:cd:79:
cd:40:6f:69:8d:4f:31:6a:27:31:4c:ea:79:56:c6:
39:5e:71:ab:60:96:ca:ad:f0:48:5d:61:0e:78:28:
5d:67:d0:89:1f:72:65:82:51:b7:42:cb:17:6d:6e:
4e:79:a3:95:f9:fa:80:69:b6:66:c0:71:70:b5:a2:
cd:e0:99:91:79:4d:3e:f1:38:5a:8f:82:2b:27:0c:
61:3f:40:b9:c0:16:50:4f:00:6b:be:19:38:f8:0a:
5f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C0:21:B8:B9:7B:87:9F:2C:E1:9A:1B:0D:E6:60:F1:AE:A5:52:7F
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:15:45:63:f2:88:1e:da:ad:42:93:ad:1d:86:97:59:be:09:
78:f4:b2:fe:1e:51:12:fe:45:a1:57:20:da:62:a6:e0:e1:d9:
47:9d:79:9f:09:21:6b:70:89:7e:f0:26:08:a9:e0:1d:8e:4d:
c0:8f:8c:8f:3a:6a:e4:3d:54:d1:0a:6b:03:d6:49:f4:20:7e:
0b:18:14:e2:2c:ed:79:e8:4b:6e:69:98:7a:f4:26:6d:51:25:
48:df:63:7f:cc:7b:4a:b3:ca:c7:58:a3:45:82:53:5e:e2:a9:
d7:96:ea:e5:0d:b8:67:47:bc:ab:48:40:c1:d1:e1:d7:70:72:
6d:4e:7a:c4:79:99:ed:a6:fe:29:31:9f:1e:fb:93:7f:6d:ce:
65:9c:8d:27:82:a8:d8:9f:e3:df:80:e4:3b:95:45:cf:bd:9c:
54:2b:cf:2b:16:51:08:25:4f:85:b7:06:43:29:b9:d5:cd:d3:
f4:6a:c8:b5:b8:e1:87:ef:44:ef:a3:3e:1b:36:7a:68:59:f9:
d6:03:c4:f6:18:af:a4:ca:28:39:e0:84:52:b6:67:02:5b:38:
17:b5:f1:37:3d:c6:7c:46:d3:40:e6:0d:42:cb:3a:80:fb:1a:
cc:7a:d3:a6:8a:30:64:b1:b2:99:f0:1e:bf:b5:6e:34:38:e2:
e8:11:b2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:43 2025 by rpki-client