Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
File: hds5fcdkjw_TPGMfNcwgdOTuMy4.mft (raw, json)
Hash identifier: XkKeS48Z44NjVjrSscPx5N1nyHZ7YLNXaODOzfHyzDo=
Subject key identifier: B0:45:93:0B:72:7B:6B:B3:7A:45:C9:3A:23:61:6F:05:AA:AD:8E:88
Authority key identifier: 85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
Certificate issuer: /CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Certificate serial: 0196760C0EB4776479181273BF1B4CFC4AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
Manifest number: 0827
Signing time: Sun 27 Apr 2025 07:00:23 +0000
Manifest this update: Sun 27 Apr 2025 07:00:23 +0000
Manifest next update: Mon 28 Apr 2025 07:00:23 +0000
Files and hashes: 1: DnzHmF6TCnpjP7TWEjJ_rCXnvIY.roa (hash: 8RXEuua3+kjX3w/tgAeEmHPIo5ag+CZK8+TQCcaqfCg=)
2: hds5fcdkjw_TPGMfNcwgdOTuMy4.crl (hash: PHFUHOCcWpcm2EciGePPkZay5lPeOTfeiGPTvspVlus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:0e:b4:77:64:79:18:12:73:bf:1b:4c:fc:4a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db397dc7648f0fd33c631f35cc2074e4ee332e
Validity
Not Before: Apr 27 07:00:23 2025 GMT
Not After : Apr 28 07:00:23 2025 GMT
Subject: CN=b045930b727b6bb37a45c93a23616f05aaad8e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:eb:15:ab:d9:e3:f5:b1:78:96:b0:f0:13:75:
b6:2f:c1:af:37:aa:94:e4:ed:26:4e:4b:c7:c2:77:
05:2e:a0:7c:34:53:05:05:f7:68:20:34:51:1d:a4:
f2:38:7f:6e:76:48:c4:52:e9:6c:03:06:f9:91:c6:
72:1f:7e:2f:4c:ab:10:6d:30:34:0e:73:08:33:2d:
81:68:5a:7c:ea:ed:d4:f8:40:c6:bb:7c:82:98:4f:
a9:e0:57:cb:fb:89:57:51:07:3d:cb:25:01:44:b7:
ff:41:8d:34:ee:75:35:c6:93:d1:25:85:06:c8:76:
fc:71:b7:0d:84:90:f0:bb:65:55:84:23:d2:65:93:
3c:81:67:62:2e:ce:02:18:42:01:82:df:c9:a8:aa:
0c:ca:79:91:17:c9:92:96:dd:40:18:b0:fc:ad:ea:
1d:96:2f:78:d9:af:fb:68:34:a1:e7:ee:84:cf:1c:
55:57:a2:d0:ea:cd:3e:74:30:2d:fa:a3:a3:d6:2b:
df:bb:11:9f:46:2f:00:70:b6:ec:28:61:7b:f1:f2:
79:2b:e4:1a:52:29:a9:70:76:4d:08:d6:17:af:5d:
11:fb:40:27:dc:69:c7:d7:38:cf:29:12:04:bc:30:
e4:5b:c8:79:59:38:07:df:3f:80:45:40:28:9d:48:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:45:93:0B:72:7B:6B:B3:7A:45:C9:3A:23:61:6F:05:AA:AD:8E:88
X509v3 Authority Key Identifier:
keyid:85:DB:39:7D:C7:64:8F:0F:D3:3C:63:1F:35:CC:20:74:E4:EE:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hds5fcdkjw_TPGMfNcwgdOTuMy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/68772c-b11a-49c9-907f-4ed1d075b637/1/hds5fcdkjw_TPGMfNcwgdOTuMy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:9a:91:21:10:97:68:d6:17:81:b2:41:9a:a9:4a:86:aa:39:
49:ce:a2:06:bd:2b:b3:3c:8d:02:7f:b2:44:44:37:52:83:68:
c2:17:cf:34:70:3e:56:d1:49:f9:66:77:99:ee:b7:59:41:55:
91:05:1a:b5:f5:e6:b4:d3:9b:90:bc:04:87:13:0e:56:42:b2:
97:61:36:4e:03:bf:6a:1f:67:d8:c3:65:e0:8d:8b:c8:45:f5:
77:19:b7:e7:d0:a9:10:fb:e8:e6:94:1e:6e:a0:91:bd:3b:74:
9a:ba:77:39:78:fe:b0:90:5a:43:52:90:b8:14:28:ec:29:27:
27:f8:04:57:27:a6:1b:57:e3:4f:8f:16:13:43:f9:8c:75:b5:
75:85:a5:e7:46:88:30:d5:c8:8c:50:39:a2:f4:40:8a:c5:f6:
f9:0f:13:4d:f8:48:6a:fa:49:5b:8c:aa:89:f5:b9:ea:49:0a:
ab:3a:92:b8:32:6c:a5:64:b8:8e:65:f7:5d:2f:72:d4:e1:20:
00:20:e6:09:26:83:1d:64:83:7b:04:b8:ee:03:af:14:33:32:
19:d7:4c:be:22:0e:94:ae:e5:61:3b:6d:56:41:d0:d0:56:0e:
66:6b:0a:f7:32:49:eb:b9:58:2d:90:81:c9:7e:95:74:67:63:
ca:43:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:58:17 2025 by rpki-client