Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: hV648FEARjGTdZXg7DYp4z2FuGk67NTqb6iXCkXys5o=
Subject key identifier: C5:56:8A:94:51:BA:95:A6:04:DE:9A:8F:F0:04:84:38:DD:DC:2F:70
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 01968390B335702A8BE1BC00D4160DBA1EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 22:00:20 +0000
Manifest this update: Tue 29 Apr 2025 22:00:20 +0000
Manifest next update: Wed 30 Apr 2025 22:00:20 +0000
Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: mLzaJM5BNln+0EfUToX1r3pBzDZCEjkDQNpXqR3YwVU=)
4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:90:b3:35:70:2a:8b:e1:bc:00:d4:16:0d:ba:1e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Apr 29 22:00:20 2025 GMT
Not After : Apr 30 22:00:20 2025 GMT
Subject: CN=c5568a9451ba95a604de9a8ff0048438dddc2f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:cf:83:70:9b:72:81:f6:54:12:84:50:42:
1c:b9:b9:d0:a4:5f:c4:47:7f:23:a3:7e:0f:70:ac:
a1:d5:0f:ce:ee:75:55:96:c9:05:f4:61:e3:54:d7:
1a:e2:0b:41:96:38:63:d3:1e:ee:85:24:c4:86:83:
ad:44:e2:fd:0d:09:6c:b2:2f:7c:c2:0c:47:69:b1:
e3:89:98:a8:bd:a7:21:f6:78:e4:83:40:b5:6a:62:
bd:e3:de:0e:e6:6a:a5:3c:44:b9:e6:62:e5:e6:df:
6a:f7:be:8f:d0:ff:43:7b:c0:f1:c5:ca:9d:a6:10:
81:62:37:ed:e0:e6:60:41:ef:d2:0a:36:7a:73:2c:
87:27:16:12:bb:eb:7e:19:44:1c:f7:7e:67:e7:b6:
3d:6d:96:c7:7d:8b:f4:4b:00:50:34:4a:fe:23:c1:
02:17:06:02:b6:ea:2c:96:d0:af:1c:b5:f6:3d:8a:
e2:9a:29:d5:81:dc:10:67:ec:8c:ec:f9:fd:27:70:
7d:df:ea:85:57:57:10:40:a6:ba:2e:67:98:3d:6a:
7e:62:1a:71:ad:21:6a:82:3c:4a:fa:59:07:6a:9e:
67:8a:95:a2:cb:a9:12:97:ae:d6:26:7e:b8:99:45:
7e:5a:fa:e7:33:d0:1e:d3:5d:1d:ef:1a:31:be:6e:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:8A:94:51:BA:95:A6:04:DE:9A:8F:F0:04:84:38:DD:DC:2F:70
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d8:a9:e4:0c:b3:8f:7a:82:b6:a9:37:04:a7:fc:e6:82:93:
0f:e6:5f:ee:89:5a:37:ad:d2:7f:d0:e9:1f:b2:d2:22:1f:72:
1d:01:86:e4:f4:46:62:66:23:05:ed:a8:53:f8:d3:93:50:cd:
e8:90:b4:98:58:be:01:c9:a5:0f:6f:5d:8d:ce:c9:ed:b2:3c:
a4:ce:4d:73:ec:fb:ef:5b:dd:1e:03:8c:c2:6a:bb:00:d3:de:
ab:a6:f8:22:f9:2a:2b:b5:b3:2d:50:c4:9c:43:2b:28:8c:ee:
8a:24:ed:81:f1:36:82:4e:59:de:f4:af:f5:fa:76:b3:7d:81:
d0:0d:4a:57:cc:24:96:55:22:6d:19:85:2f:94:61:25:40:af:
32:b4:97:df:14:c3:44:60:f3:ee:e7:31:77:53:53:fb:19:ef:
66:06:75:a7:a5:dc:83:b5:4a:13:70:53:ec:cb:72:4c:90:94:
fd:5f:c9:db:1d:30:ab:0b:8b:54:60:5c:e9:6d:d2:f1:27:1c:
2b:0c:76:9f:4f:3b:4b:ca:50:7b:a1:05:21:86:2c:fd:f2:21:
cb:20:4b:2e:d0:26:fa:da:07:31:18:cf:1c:97:78:23:1f:c2:
6e:39:c9:15:68:45:24:d6:7d:49:c1:34:50:c8:c9:bf:1b:a8:
27:5e:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:39:42 2025 by rpki-client