Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File: 8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier: MnM2jGlLAszzOlgrN7PuTGYfKnNFnvjdovKopHBElR8=
Subject key identifier: 2D:D9:D3:BF:34:E1:7F:2C:0E:08:80:4B:80:B6:0A:B9:11:C6:40:31
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer: /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial: 0196816B84918DC0BA4B55A255F0999FE581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number: 1517
Signing time: Tue 29 Apr 2025 12:00:29 +0000
Manifest this update: Tue 29 Apr 2025 12:00:29 +0000
Manifest next update: Wed 30 Apr 2025 12:00:29 +0000
Files and hashes: 1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: giqO9XfIbbJeuAfxfXWWMg1EN1EbcBalBAfwSUOonuY=)
2: uzaT_8pYRSOjnRLn-VDCRDMHjkw.roa (hash: BTL6zzsEp/zMhbPEtqOYQnpjz6sJkx1lWw25F56hHZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:6b:84:91:8d:c0:ba:4b:55:a2:55:f0:99:9f:e5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Validity
Not Before: Apr 29 12:00:29 2025 GMT
Not After : Apr 30 12:00:29 2025 GMT
Subject: CN=2dd9d3bf34e17f2c0e08804b80b60ab911c64031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:f3:01:4d:96:38:2a:0c:05:52:a8:a9:32:
ab:90:2e:34:01:00:c3:19:be:70:ab:4f:13:14:ff:
a3:10:2d:8f:29:94:b6:d7:b6:be:f2:da:31:40:1a:
bd:f7:ac:8b:2e:a6:a5:dc:bd:52:cb:4c:18:ac:6b:
04:6b:c3:6b:be:80:2b:c3:55:a5:ca:df:71:7f:67:
95:99:fc:74:f9:6b:0f:44:7a:ac:7d:d4:18:7f:43:
c5:31:7c:9d:0e:45:ec:8a:8c:2a:6f:c4:9e:1f:de:
02:6d:8e:e8:5e:83:17:55:4c:da:30:ce:b1:f2:ba:
6a:49:f8:7d:22:94:5b:98:3e:b5:0e:79:60:81:33:
73:bd:a3:2a:19:42:3c:dd:5d:0b:8a:87:a5:1f:df:
d0:85:d6:40:8e:a1:40:01:38:df:9e:2a:5b:d8:05:
d4:ee:10:86:9e:3a:af:17:6f:c4:61:2e:06:94:43:
45:9c:27:48:b9:c3:83:c3:88:72:35:8f:45:1e:06:
d5:36:23:6c:cb:91:e1:86:61:68:b2:0e:5e:ac:5a:
c6:62:73:9c:71:09:68:4a:73:f2:11:5e:6c:4f:88:
d4:80:c7:6d:a9:ae:e8:ed:43:db:33:0f:b0:cd:17:
6e:38:12:2a:af:47:07:06:8d:71:69:56:f7:bc:43:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D9:D3:BF:34:E1:7F:2C:0E:08:80:4B:80:B6:0A:B9:11:C6:40:31
X509v3 Authority Key Identifier:
keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:34:e7:8b:68:9b:c4:0b:31:1f:96:ca:95:2a:86:98:50:4d:
47:41:60:9b:61:80:e3:d0:5f:b0:d2:b2:43:b2:8c:2b:5e:6b:
42:d2:81:b0:da:52:cf:6a:45:d2:ba:6b:c6:82:14:41:1c:4c:
03:79:23:22:dd:94:3a:53:98:88:e1:3d:e8:0c:d8:7d:9e:6e:
0e:a4:85:97:8d:7b:06:11:14:47:e8:68:21:41:25:4b:3d:7e:
cf:9d:bf:1e:51:27:87:4d:58:cc:e9:4b:27:ca:14:a7:07:05:
d2:ac:90:20:38:5f:f9:f3:05:df:49:aa:09:9b:74:43:15:d6:
ab:96:05:ab:d4:94:9b:3d:4f:61:de:01:73:0b:fa:32:df:1a:
bc:22:7f:6e:a3:84:f9:1b:a5:47:00:ab:31:76:c7:61:7e:b3:
00:99:e9:6b:dd:4f:25:85:ae:38:66:64:f7:08:68:da:c2:f8:
25:12:88:ae:49:eb:b2:55:54:20:f6:47:d3:38:29:24:a0:e7:
a1:5b:9c:2e:fc:eb:e4:e0:8a:46:f1:80:4b:7a:e9:a9:cf:9a:
1f:fd:82:a8:09:ea:e7:88:5e:9d:d6:07:4a:a3:0e:fc:2b:eb:
22:a4:a8:c3:e2:60:82:1f:67:06:5c:23:25:07:27:6b:f9:ed:
26:42:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:38:43 2025 by rpki-client