Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: R5jQzcgh2sXPpbrd4IK4FSwmyxL0Aua2KauPgFSm/AI=
Subject key identifier: 11:AF:7C:37:D4:1C:88:77:47:47:B2:B6:0F:A4:C1:02:A0:18:EF:1A
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 01967E33A81D95BA541EF0DACBB305560075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1253
Signing time: Mon 28 Apr 2025 21:00:36 +0000
Manifest this update: Mon 28 Apr 2025 21:00:36 +0000
Manifest next update: Tue 29 Apr 2025 21:00:36 +0000
Files and hashes: 1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
2: EqTLLrStWQ1_lYgYRBgmgDPtF_4.roa (hash: VTc+tW3JK91nfNjIEDHdLe+grDG6p0570ue39trIFTw=)
3: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
4: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
5: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: TVvcO210VkduqdmdPVQK2n3geAZLgF2hJqXqlOmhA/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:a8:1d:95:ba:54:1e:f0:da:cb:b3:05:56:00:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Apr 28 21:00:36 2025 GMT
Not After : Apr 29 21:00:36 2025 GMT
Subject: CN=11af7c37d41c88774747b2b60fa4c102a018ef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:f9:11:0f:69:dd:cd:07:9e:c1:1f:77:4d:
db:80:cd:e2:d7:92:e3:bc:70:ff:1a:f2:f2:7e:8e:
fc:c8:27:d2:23:c2:bd:b9:90:6d:e1:00:9a:e6:fd:
52:d4:72:eb:e5:88:d6:c0:4d:86:5e:c7:87:bb:38:
6e:45:e0:31:b8:31:de:cf:1a:e6:82:66:b8:7b:91:
82:4f:30:57:5d:c4:b0:e8:00:13:c8:99:7d:ae:4a:
20:12:be:f7:66:f9:cb:0f:dd:5c:26:d9:fe:6f:15:
36:14:37:b7:b8:e2:7b:2d:7c:7b:38:71:ad:1d:9d:
55:90:dc:5b:c5:cb:3b:24:f0:72:56:2e:82:86:bc:
7a:2d:84:09:c3:d3:65:42:16:28:58:79:f4:bb:09:
a2:59:fe:69:62:ce:51:0b:25:7b:fd:00:14:08:a7:
2c:1c:d8:44:fa:52:df:f1:dd:9b:22:c8:96:44:a5:
b4:a9:45:ff:46:43:8c:7b:f6:29:41:42:9e:5e:9d:
1a:0b:79:d6:2d:39:27:d4:d1:be:35:b1:09:20:bc:
60:5a:6f:68:58:12:f1:f5:a7:9c:6f:82:2e:26:9d:
01:ab:84:44:79:da:7f:bd:19:9f:34:c3:0b:1d:52:
e9:b0:0f:9b:3d:ff:98:7a:d1:0c:eb:1c:4a:09:b0:
04:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:7C:37:D4:1C:88:77:47:47:B2:B6:0F:A4:C1:02:A0:18:EF:1A
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8c:de:8e:77:d8:76:68:17:e4:2a:f4:f7:11:5b:e1:f9:a4:
0d:eb:84:41:f0:73:16:ba:23:36:7c:2c:85:22:0a:28:87:43:
5b:0d:2f:04:67:26:ad:39:09:83:e3:19:aa:44:b1:a4:47:7a:
c6:52:3a:5b:ec:45:d3:a0:fc:70:62:e0:20:f2:a5:d1:86:b8:
bd:b4:1e:17:f8:44:b4:24:08:44:38:6c:f0:e9:10:4a:21:52:
23:16:d6:fc:23:dd:7a:a1:8c:d0:73:6b:3d:49:99:82:ad:d9:
95:5d:e0:53:e7:c1:08:75:51:9e:52:3d:85:04:db:b5:82:f5:
1e:a2:39:22:71:73:5e:fe:35:ab:cc:09:68:1c:63:86:66:ec:
e1:95:6f:a2:e1:bf:ba:52:70:4b:8c:f0:ed:af:15:05:08:cb:
63:b4:c8:fc:44:e6:94:ac:f7:b0:2e:32:4e:eb:1a:fd:29:c3:
e7:10:45:f2:ce:b3:34:5f:5c:58:3e:39:4c:31:02:54:5a:15:
a8:c2:8f:93:51:fc:b0:65:e7:be:90:05:6c:2e:30:1c:0a:8b:
c2:0a:08:64:99:1d:b3:00:ed:00:69:b2:c4:a3:41:9c:79:46:
11:d2:9a:5f:2e:8e:ba:74:eb:d2:ba:bc:2f:20:cc:61:25:59:
9f:9d:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:53:59 2025 by rpki-client