Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: OegO6Hv0R04FZnZTm7dCpmi9K6J9tVRXy6S07YFfsuE=
Subject key identifier: 58:13:69:17:E4:A9:64:1C:16:4D:8C:7A:22:C3:69:99:74:A2:C5:BB
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01967F7D4F49E18A8BE16EA2D4EEC0FDC194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0D31
Signing time: Tue 29 Apr 2025 03:00:40 +0000
Manifest this update: Tue 29 Apr 2025 03:00:40 +0000
Manifest next update: Wed 30 Apr 2025 03:00:40 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: /Q9UT6PaF61BU8tIRp7MeJ4ADdrDTsYanG4QobCTz0A=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:4f:49:e1:8a:8b:e1:6e:a2:d4:ee:c0:fd:c1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Apr 29 03:00:40 2025 GMT
Not After : Apr 30 03:00:40 2025 GMT
Subject: CN=58136917e4a9641c164d8c7a22c3699974a2c5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:b1:28:0d:c2:6f:5c:20:50:fc:3e:9b:47:
81:8a:6a:10:4e:8f:c2:5c:ee:1a:20:35:1e:c5:0d:
64:eb:51:19:99:72:aa:00:01:f1:9d:4a:91:a4:7a:
e4:70:0e:4b:6c:a8:70:99:f2:a9:a6:a4:c0:d5:c9:
2e:15:ca:71:76:43:17:1b:0b:86:78:45:8e:e0:60:
a4:29:9b:d5:09:43:96:b4:fa:0e:ee:6b:d1:c1:79:
0d:2b:ff:b4:b1:57:4d:75:40:d5:26:2c:15:7d:02:
c8:4a:96:38:a7:f7:e5:66:08:63:d2:44:c3:75:8b:
7d:c1:86:a2:fb:69:10:63:96:35:96:9a:48:7a:d2:
b8:eb:e0:81:38:5b:7c:1d:12:4c:7d:3c:68:1f:28:
34:d9:39:22:66:ff:90:f8:5b:ce:e2:e1:3e:f7:63:
cf:4b:b7:9c:59:58:cc:7b:c0:ea:a7:db:92:18:76:
ec:84:e4:83:7a:6e:fe:8a:ee:5b:e1:e1:e1:8a:dc:
c3:d9:15:b8:28:1a:db:1c:5e:ea:b6:10:50:39:3b:
2e:45:30:a7:df:54:44:92:93:01:82:92:28:0a:76:
07:54:35:e4:3a:f8:31:6c:09:36:19:c3:6b:0f:ae:
a7:6e:2d:ab:1c:93:5f:6e:13:92:20:13:b2:e7:a7:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:69:17:E4:A9:64:1C:16:4D:8C:7A:22:C3:69:99:74:A2:C5:BB
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8c:be:3b:21:a4:1a:24:9f:72:74:a5:20:eb:68:6d:60:f9:
ed:0a:1d:ca:95:d2:bf:70:92:40:7e:48:fe:b6:6d:17:58:fb:
f9:2f:5c:b1:6a:43:22:61:5b:ce:30:a2:7e:84:e8:9d:8d:12:
f1:7f:62:67:b9:cf:ef:84:99:1a:96:1f:7a:f1:67:4c:85:79:
e1:04:31:ca:ae:a1:21:62:56:92:c3:3a:a9:a1:f6:f4:34:89:
cf:ec:d9:be:37:38:4d:b9:9e:7b:ff:75:32:db:eb:0c:83:a9:
8c:36:83:02:e7:bc:93:60:88:16:6b:ee:18:4e:2a:73:cd:6e:
08:54:3e:8a:e0:bd:66:c7:31:88:4a:6e:be:b2:0c:0a:47:7e:
3d:1d:c4:6a:40:5f:89:73:cc:c4:28:a9:01:ca:de:c6:2b:23:
ce:31:cc:7e:3e:d5:6a:ac:52:f1:6a:30:5f:54:5d:58:73:cf:
54:3e:54:d8:da:85:61:ea:b4:3f:79:6c:5b:c1:26:0b:e7:b3:
bb:40:49:c4:8b:20:95:74:1e:f9:df:fa:74:e8:9a:0d:1e:48:
28:e5:51:0d:9d:c9:d5:f0:18:19:aa:77:b6:54:cf:87:e6:ce:
78:0f:46:8e:79:13:0c:c9:ee:26:be:e9:3d:a0:d3:04:de:a3:
71:7f:b8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:13:21 2025 by rpki-client