Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: s2jVDTWWSKh5VnDfX77t4ZTf4OQUPaNYR6E3KOsCJdU=
Subject key identifier: 85:39:7A:0D:C3:B1:FC:20:E8:DE:6B:BD:DD:72:13:98:1F:EA:57:D3
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 019682B56CCBA47D418374FEFD008CE4DDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0AAE
Signing time: Tue 29 Apr 2025 18:00:50 +0000
Manifest this update: Tue 29 Apr 2025 18:00:50 +0000
Manifest next update: Wed 30 Apr 2025 18:00:50 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: TBAfcHaCWgchRqle/CH9udd/nUwAk5EiKvcY0RGOZFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 18:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:6c:cb:a4:7d:41:83:74:fe:fd:00:8c:e4:dd:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Apr 29 18:00:50 2025 GMT
Not After : Apr 30 18:00:50 2025 GMT
Subject: CN=85397a0dc3b1fc20e8de6bbddd7213981fea57d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:58:53:0a:5c:7f:94:e2:62:ee:14:09:9e:
bf:a9:41:40:67:dd:14:79:85:56:3a:d1:4f:2f:b9:
67:bf:2d:73:d4:d2:fb:64:af:d8:06:eb:bb:65:67:
c0:79:f2:6e:3f:2e:da:07:b2:1e:f4:36:ad:0c:ea:
75:c1:88:fe:33:a3:7a:57:e6:7d:70:83:35:6d:5d:
6e:fa:69:0d:5f:71:f8:cb:67:40:4c:f7:da:4b:0a:
12:de:10:b4:53:60:2b:99:70:ac:0a:08:92:5e:b1:
98:e8:e9:e0:02:97:b1:80:3f:c0:d4:a7:7b:95:98:
88:af:63:c8:94:d5:d8:54:d1:2f:35:3b:e4:27:9c:
ba:68:47:ef:89:69:a2:48:a5:3e:9a:1d:31:84:6c:
2f:c5:39:7b:89:3a:09:eb:c8:b7:c9:4c:74:af:92:
a9:5a:8c:7f:d3:04:27:9c:7e:08:35:6d:51:c2:02:
64:d1:ca:75:a2:78:5b:b3:11:11:c2:ca:96:bb:5c:
23:2f:ec:e6:d9:f8:74:35:ea:80:ab:54:7f:bb:c5:
e2:e5:b7:f9:44:3e:63:bf:41:96:72:e0:cf:a1:0a:
cb:58:47:76:29:67:cf:ef:a4:6f:9d:a3:6d:3b:01:
b3:b9:a0:5f:41:ee:d2:c7:26:95:c2:ab:90:38:7a:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:39:7A:0D:C3:B1:FC:20:E8:DE:6B:BD:DD:72:13:98:1F:EA:57:D3
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:3e:ac:47:4e:15:d0:e2:1f:e7:ea:e2:7d:75:1c:d0:94:41:
91:81:c3:41:3d:fd:2b:b7:7c:94:4b:4f:04:6e:4f:40:2a:51:
7b:ea:40:6f:e3:95:24:a7:8a:6c:de:af:20:57:fc:4a:26:82:
38:57:d9:fa:6b:61:ca:f8:01:16:f5:57:22:cb:5b:1a:8c:a9:
b5:ff:31:cb:de:49:8e:94:c5:d5:85:cd:3e:28:e8:84:8d:f3:
55:45:cb:ba:25:b1:ba:fd:4d:09:5c:66:6e:1e:f1:73:e9:2e:
a4:3a:1f:42:51:ed:e2:88:69:3f:a1:fd:be:0a:34:a1:1f:91:
df:e7:d9:43:b4:fd:91:e1:0b:c4:06:d9:9d:7a:f0:ca:a4:d3:
1b:49:5a:a1:46:4c:73:ef:2a:b3:7a:27:8d:54:b3:cd:18:96:
3e:f5:84:8d:37:cf:ed:52:21:4c:6f:c5:8c:0f:44:87:ee:8b:
50:d1:8e:7b:d5:22:a4:a8:e3:45:76:d4:44:6b:7e:9f:69:ae:
67:b6:72:12:f4:e7:27:4b:dd:56:5d:fc:c3:3a:00:d4:47:75:
53:6f:7a:68:cd:f1:45:93:b1:6f:53:6f:04:7b:c1:e7:44:d0:
6c:d0:9c:ab:4c:39:d2:70:59:3d:b8:54:eb:ce:85:d4:60:dc:
64:87:5c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:43:48 2025 by rpki-client