Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: 7/f5QYfZtKRPIb9HhxCO7rxwWxmGvJHeqaUMwWbpx/M=
Subject key identifier: 5E:AC:6D:C7:2E:1F:9E:1A:8B:C4:D2:50:8D:3F:36:1F:94:A9:F4:F8
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 019686245E3738AE5CE962B75E4D26344F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 10:00:52 +0000
Manifest this update: Wed 30 Apr 2025 10:00:52 +0000
Manifest next update: Thu 01 May 2025 10:00:52 +0000
Files and hashes: 1: J2vDIE39ML2dQIioX-84LBq6-7M.roa (hash: 8kL6c8FUmTdyZfSSSH7csG9NWpaHPuGePFXhn8lYBjs=)
2: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: Uf5ry/0V1nM++JoVthuixPVxmNXWPfwk2e4J4DHuPJE=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:5e:37:38:ae:5c:e9:62:b7:5e:4d:26:34:4f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: Apr 30 10:00:52 2025 GMT
Not After : May 1 10:00:52 2025 GMT
Subject: CN=5eac6dc72e1f9e1a8bc4d2508d3f361f94a9f4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:d1:48:15:61:ad:21:30:0b:71:b3:25:a8:
bc:4d:a7:fd:c8:b9:6e:44:d9:fc:45:0e:0e:1e:8f:
cc:89:35:b0:b8:87:bf:15:ba:b4:7f:dd:9d:99:6e:
53:06:e2:53:d5:a0:df:cc:34:8f:98:82:17:da:76:
e7:ef:6b:b7:31:0e:69:02:08:57:d6:d4:ce:f1:46:
a7:27:16:bf:17:4a:69:0b:13:07:50:9c:7b:d2:4f:
4e:1c:62:68:01:af:53:3b:ff:e7:06:20:46:62:79:
54:a8:8b:4c:a8:27:e1:3a:3f:c2:e5:81:71:f2:bb:
6e:66:79:31:73:e0:de:06:b2:c7:cd:90:3a:d5:5b:
3a:33:4c:c1:e1:bb:e5:c3:79:a1:1b:c0:7b:cd:8f:
ce:9d:73:e2:27:95:c1:ec:a5:b5:9e:c9:89:9c:ea:
cb:11:49:35:be:2d:b0:f8:13:c8:5f:25:51:fd:8f:
68:4a:64:86:f0:a8:cf:76:94:bf:bb:b1:ab:ba:f0:
6f:e3:33:80:65:f8:b4:13:cf:cf:4e:6a:35:ac:60:
03:1e:ba:17:26:72:70:03:30:50:80:af:39:f5:97:
78:df:73:4e:83:31:f3:54:db:ba:87:04:e7:1c:3e:
14:78:e1:e7:15:0f:7a:a0:b5:eb:19:f0:ac:01:37:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AC:6D:C7:2E:1F:9E:1A:8B:C4:D2:50:8D:3F:36:1F:94:A9:F4:F8
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2b:30:c2:2d:8b:55:41:94:4c:87:b0:b4:33:6f:52:7c:63:
cd:2d:76:9e:46:00:b1:0c:59:21:5b:9a:fd:52:a8:ce:36:d8:
f2:5e:2a:a3:03:cf:3d:f0:de:47:aa:28:81:d9:2c:d1:c3:32:
fd:da:1b:2f:a1:6d:24:b4:a3:b7:f7:16:3a:5e:9f:f3:05:53:
8a:99:64:53:9d:1d:42:ef:b8:4a:34:30:73:21:6b:49:80:46:
36:ab:18:9c:1d:e6:9a:57:48:b3:43:64:1d:6d:81:dc:6f:f9:
06:d1:a5:23:f6:05:21:11:9c:7a:5c:34:93:f7:50:b3:07:33:
96:0a:b5:90:35:17:b5:5d:c7:7a:30:83:73:7d:f6:bc:50:2c:
8e:ce:7a:38:8d:3e:da:79:46:97:f0:86:20:89:4e:b0:dc:19:
07:29:19:ce:da:bb:90:90:1a:58:a6:89:fd:f0:39:4c:c8:91:
33:7e:e1:0e:21:49:3d:48:f8:69:68:25:36:24:4d:6e:fc:fe:
7c:c9:6c:b5:b2:72:52:7c:f5:fc:fc:c5:68:88:cf:d0:cc:49:
e6:51:d9:2e:ab:36:2c:d5:2b:12:e8:41:88:70:a9:e4:ef:86:
45:4a:bb:a3:3b:f9:d5:e9:00:72:29:3f:8f:46:20:9a:b3:8c:
2c:67:f4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:02:19 2025 by rpki-client