Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: xXiwTr+QezNcnAKyv5ghPOPEAuha4DBIw9TerCaHl3c=
Subject key identifier: B5:1E:C7:97:B4:44:5F:55:C4:78:FB:14:B9:E9:B6:99:EF:DE:75:49
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 01967EA18EEAAC9BA80B7172166C55557562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 038F
Signing time: Mon 28 Apr 2025 23:00:39 +0000
Manifest this update: Mon 28 Apr 2025 23:00:39 +0000
Manifest next update: Tue 29 Apr 2025 23:00:39 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: vb7B3faZS9+IEzde1Z3+e7KsohiLXmMfBEoK1xYdGIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:8e:ea:ac:9b:a8:0b:71:72:16:6c:55:55:75:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Apr 28 23:00:39 2025 GMT
Not After : Apr 29 23:00:39 2025 GMT
Subject: CN=b51ec797b4445f55c478fb14b9e9b699efde7549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:78:a9:1d:21:80:41:26:67:4f:88:85:d7:
d1:5c:6c:8d:35:dd:f9:92:cf:97:8e:60:61:66:6f:
3b:86:c2:b9:8f:f1:b3:01:45:7a:5e:7e:9b:5b:12:
87:36:d2:b0:42:3d:9d:4d:5f:22:2e:f6:9e:a4:d4:
fd:c2:79:32:f2:59:61:f4:0b:82:55:05:b5:c0:d7:
39:2c:2b:44:b2:48:13:4f:bc:83:0e:2b:64:5f:ec:
a5:fc:eb:50:64:ad:4f:1b:80:15:d4:c1:41:60:6d:
54:1f:e2:97:15:24:e8:49:ce:6a:d1:50:3b:f6:e5:
0d:d6:11:68:c5:3a:1a:fd:d9:71:10:87:66:99:1b:
5c:cc:a4:7c:ab:96:cf:e0:a2:d6:7a:84:a5:fc:af:
df:8c:e7:5f:5b:c8:b7:e6:93:3b:ba:3d:ee:ac:e3:
70:ef:23:91:a0:59:07:19:e4:b5:e0:ae:cf:21:f7:
25:83:6d:c2:8e:92:d6:26:80:ce:96:3c:1a:0b:3c:
b3:15:44:c9:21:a4:e5:bc:19:57:d2:f0:df:5a:2f:
30:53:71:5d:6a:83:42:a5:88:90:c5:c8:78:33:95:
ae:cf:66:16:00:b7:89:57:fb:c6:56:ac:75:21:5e:
88:1f:59:dc:45:9a:27:01:76:90:9e:51:19:82:e5:
85:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:C7:97:B4:44:5F:55:C4:78:FB:14:B9:E9:B6:99:EF:DE:75:49
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ac:ea:86:4d:36:1f:31:be:12:d9:c7:4b:81:74:6d:50:67:
48:09:08:47:67:07:c8:e1:fe:4d:f1:e0:52:69:42:c6:cf:f7:
a7:5b:3b:57:b9:46:d2:33:22:97:02:f8:54:6e:5c:62:8b:2a:
b5:87:7c:15:e9:39:47:11:8e:69:03:8b:5d:2a:4d:b6:6b:8e:
40:04:ee:39:be:cb:b4:18:e7:9d:be:5b:83:00:e9:51:00:d4:
cf:8b:ba:38:75:16:9d:e1:a2:89:39:a7:68:a1:7e:d0:c6:38:
12:a9:07:22:79:61:3d:ba:f0:3a:14:b1:45:df:a4:26:f2:d4:
c8:78:e8:be:da:ed:6e:84:b8:95:79:66:e9:e2:04:30:1c:a3:
b6:7c:86:ff:c8:ad:fb:0f:e4:29:3f:11:94:52:ec:0a:45:21:
c2:62:d8:29:fd:7e:1d:e8:14:4e:4f:ff:30:e2:f1:6d:dd:6b:
65:d9:55:b3:79:79:6b:4d:41:05:c9:a1:96:67:0c:e8:55:58:
f7:9b:59:0a:b4:19:d5:61:99:83:f2:28:02:9e:b5:c3:89:5f:
de:20:b9:90:d2:2f:e2:97:65:0f:ee:fb:a5:cb:bb:fd:f6:6d:
8c:d4:a7:90:75:2c:d6:d1:ec:4a:95:c4:4d:6f:20:54:af:cd:
0f:bf:2f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:09:25 2025 by rpki-client