Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
File: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft (raw, json)
Hash identifier: 4O4yA46IpgGGBJpml9BVD+T/2sVO28yJewptm3X2VMc=
Subject key identifier: 97:A0:1E:98:A3:9C:2D:DA:F2:43:1E:A4:91:43:F6:8A:AF:35:0E:DD
Authority key identifier: 87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
Certificate issuer: /CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Certificate serial: 01968210167B70410880D907D4069E46D795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
Manifest number: 09DF
Signing time: Tue 29 Apr 2025 15:00:14 +0000
Manifest this update: Tue 29 Apr 2025 15:00:14 +0000
Manifest next update: Wed 30 Apr 2025 15:00:14 +0000
Files and hashes: 1: 0nY8WimC5lB0bql9f3U9kRi_8I4.roa (hash: 8StTkkNbb/yW2jlpCIQh00ucmFvEjZPmIDJRuFhboiI=)
2: h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl (hash: RvGUrdVEfLY3VsfkuZrePtyA8ttFHdzxQkpihU85vP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:16:7b:70:41:08:80:d9:07:d4:06:9e:46:d7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b9313753bc0931af4393dbda009b0ff45ec7c2
Validity
Not Before: Apr 29 15:00:14 2025 GMT
Not After : Apr 30 15:00:14 2025 GMT
Subject: CN=97a01e98a39c2ddaf2431ea49143f68aaf350edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:e8:0d:1b:1b:f5:2c:69:5f:1a:5a:ef:d3:
3a:23:9e:14:68:7e:f4:5a:22:72:ab:50:9f:a6:50:
22:42:54:31:2f:ed:f7:4e:1b:8c:11:9e:a7:e9:ba:
a3:48:5b:df:3b:15:34:76:5f:ec:07:3a:dc:eb:7c:
4c:21:76:f8:6e:fd:fa:ce:10:06:33:55:cf:8e:29:
3e:a2:00:e9:df:7d:7e:b5:60:39:03:31:02:56:01:
8a:60:28:4c:86:5e:cf:23:cf:d4:21:2a:92:e1:c9:
d9:a8:22:33:e7:09:4d:47:0c:d3:df:ec:00:00:69:
ba:9a:8b:02:88:fa:54:c7:0b:93:f8:01:f8:48:e7:
60:02:c5:0e:fc:a5:4a:41:68:69:cc:cf:eb:41:4c:
d7:8a:3b:43:b7:45:34:98:f3:05:ab:65:bd:19:72:
f4:0c:87:6a:f2:24:de:46:52:d7:08:cd:22:87:fa:
a6:72:ce:6f:1e:6f:a3:2e:01:15:a3:c4:ed:06:36:
65:b4:3f:88:20:dd:e6:f7:e6:55:ae:b8:39:e8:ab:
0c:ff:0c:4c:74:b5:cc:bd:07:64:f7:12:95:cf:f3:
a5:6c:06:80:d3:e0:65:0e:ce:cc:b7:c0:a9:37:81:
e6:0f:aa:2b:90:ff:82:39:b4:0c:22:c8:51:d8:12:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A0:1E:98:A3:9C:2D:DA:F2:43:1E:A4:91:43:F6:8A:AF:35:0E:DD
X509v3 Authority Key Identifier:
keyid:87:B9:31:37:53:BC:09:31:AF:43:93:DB:DA:00:9B:0F:F4:5E:C7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/71cb0c-3be0-4a9e-9b82-7d68366b59b7/1/h7kxN1O8CTGvQ5Pb2gCbD_Rex8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:9a:a3:98:29:74:7f:e9:b1:d9:bb:57:11:ad:36:df:ab:
60:0a:ad:51:eb:78:0f:8e:7f:cf:e7:e5:6d:d5:b8:4f:5c:ba:
cf:be:fa:e5:5c:e4:a9:bc:8c:b7:57:7b:25:37:7a:3d:74:e1:
2f:27:29:2d:41:55:a0:07:00:df:54:a6:b9:35:89:74:a3:50:
3e:02:a4:29:ca:7c:3d:e0:8d:eb:70:6e:b8:2b:49:f3:6e:4a:
a4:d7:76:98:a6:c3:35:1b:47:6d:84:72:48:18:cd:cf:0c:ae:
6e:de:8a:bb:78:be:08:ef:88:dd:36:91:4d:fd:60:0b:bc:8d:
55:65:08:03:8a:d7:31:be:94:1b:d8:b0:35:85:95:ab:67:f2:
43:6f:a3:b8:28:58:fb:b9:08:53:2c:c9:ab:90:a1:22:03:d8:
50:a7:a3:aa:0a:00:5e:9b:85:06:95:c7:11:78:00:2a:21:26:
4c:ee:a6:fe:8c:65:72:0d:da:a3:9f:a9:db:18:40:0f:b2:6e:
60:08:17:66:bf:70:57:a8:d5:e5:f4:2f:42:a4:f7:dc:03:3e:
aa:46:df:cb:a4:f7:51:87:51:2a:06:9f:6a:f8:21:fa:3a:29:
63:32:19:28:a4:aa:e5:f4:b0:d7:fb:9e:d9:10:0e:ca:78:2c:
b3:04:72:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaCEBZ7cEEIgNkH1AaeRteVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YjkzMTM3NTNiYzA5MzFhZjQzOTNkYmRhMDA5YjBmZjQ1
ZWM3YzIwHhcNMjUwNDI5MTUwMDE0WhcNMjUwNDMwMTUwMDE0WjAzMTEwLwYDVQQD
Eyg5N2EwMWU5OGEzOWMyZGRhZjI0MzFlYTQ5MTQzZjY4YWFmMzUwZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OnoDRsb9SxpXxpa79M6I54UaH70
WiJyq1CfplAiQlQxL+33ThuMEZ6n6bqjSFvfOxU0dl/sBzrc63xMIXb4bv36zhAG
M1XPjik+ogDp331+tWA5AzECVgGKYChMhl7PI8/UISqS4cnZqCIz5wlNRwzT3+wA
AGm6mosCiPpUxwuT+AH4SOdgAsUO/KVKQWhpzM/rQUzXijtDt0U0mPMFq2W9GXL0
DIdq8iTeRlLXCM0ih/qmcs5vHm+jLgEVo8TtBjZltD+IIN3m9+ZVrrg56KsM/wxM
dLXMvQdk9xKVz/OlbAaA0+BlDs7Mt8CpN4HmD6orkP+CObQMIshR2BIMFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJegHpijnC3a8kMepJFD9oqvNQ7dMB8GA1UdIwQY
MBaAFIe5MTdTvAkxr0OT29oAmw/0XsfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODIt
N2Q2ODM2NmI1OWI3LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83MWNiMGMtM2JlMC00YTllLTliODItN2Q2ODM2NmI1OWI3
LzEvaDdreE4xTzhDVEd2UTVQYjJnQ2JEX1JleDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2+ao5gp
dH/psdm7VxGtNt+rYAqtUet4D45/z+flbdW4T1y6z7765VzkqbyMt1d7JTd6PXTh
LycpLUFVoAcA31SmuTWJdKNQPgKkKcp8PeCN63BuuCtJ825KpNd2mKbDNRtHbYRy
SBjNzwyubt6Ku3i+CO+I3TaRTf1gC7yNVWUIA4rXMb6UG9iwNYWVq2fyQ2+juChY
+7kIUyzJq5ChIgPYUKejqgoAXpuFBpXHEXgAKiEmTO6m/oxlcg3ao5+p2xhAD7Ju
YAgXZr9wV6jV5fQvQqT33AM+qkbfy6T3UYdRKgafavgh+jopYzIZKKSq5fSw1/ue
2RAOyngsswRy7w==
-----END CERTIFICATE-----
Generated at Wed Apr 30 01:29:19 2025 by rpki-client