Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: KC8YUkV0t3y/EWWHTCp9TjU0QjRidNvQBwriSkODiUI=
Subject key identifier: 28:4E:24:58:82:6A:53:C9:FA:E7:85:12:99:3C:42:A2:12:D7:0C:A5
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 0196730B38F803012C335EE6137B91B67089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 17:00:37 +0000
Manifest this update: Sat 26 Apr 2025 17:00:37 +0000
Manifest next update: Sun 27 Apr 2025 17:00:37 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: ipJh1ipkihWpNFY/9NEemvPZ9ux1hjRar8fGkhWbW2I=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:38:f8:03:01:2c:33:5e:e6:13:7b:91:b6:70:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Apr 26 17:00:37 2025 GMT
Not After : Apr 27 17:00:37 2025 GMT
Subject: CN=284e2458826a53c9fae78512993c42a212d70ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:63:94:4c:2b:a3:72:05:01:9f:71:b1:4f:
aa:88:da:ee:46:81:c2:22:e9:17:41:40:71:6e:fb:
be:98:c2:78:5b:63:13:48:c0:f0:f0:85:5f:7a:11:
52:25:cc:e3:5b:e4:5c:ee:25:b5:60:21:0f:e5:3c:
9a:a0:ae:94:37:b6:cd:1b:c7:21:eb:2f:d9:22:f1:
79:d4:f9:3e:ba:6d:e3:ff:6a:e1:3b:65:41:bf:cf:
8d:66:bc:f3:cf:85:97:28:74:16:2d:6c:25:ad:cc:
39:15:62:f4:cf:f2:36:fe:c7:06:47:86:2d:94:64:
51:8a:90:e8:21:02:96:79:aa:cf:57:54:00:e8:e2:
04:c0:a3:9b:d1:36:bc:37:7b:0f:93:ae:9c:de:37:
1e:3c:8e:ab:29:b0:9c:f0:9c:dc:8b:5b:29:5e:5d:
a8:28:a8:4e:c0:4f:52:df:ab:ae:ac:6d:04:0e:14:
9a:3d:7f:7a:eb:a4:29:17:a4:85:51:f4:9e:ac:da:
bf:9a:a7:3a:79:3e:27:a5:d4:ce:38:34:84:73:a8:
34:f0:63:03:29:62:61:07:bd:5a:af:4d:31:c8:4c:
92:5c:55:57:66:c2:42:48:90:c3:cd:c4:ba:8f:4c:
38:84:4d:8b:e6:41:46:10:22:20:d0:14:16:2c:fb:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4E:24:58:82:6A:53:C9:FA:E7:85:12:99:3C:42:A2:12:D7:0C:A5
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:47:a6:1f:0d:21:ab:34:21:d5:98:2d:de:4a:2f:88:65:24:
b9:00:f6:53:4c:81:37:20:2b:e7:cb:b8:e3:8f:68:50:82:d4:
a6:d7:82:ab:ca:33:f4:df:17:67:51:2a:68:cb:e5:f7:d9:ea:
d2:3e:88:93:36:1b:ee:2c:9b:30:fd:1e:6b:8a:35:9f:ca:62:
27:0b:f7:a6:bc:ec:98:c4:c0:bb:1e:db:1b:11:b9:d7:e2:4c:
b1:6f:ba:e6:0b:28:5c:3f:1d:b6:5d:8f:54:a7:b3:47:77:ec:
e2:73:52:f9:2e:9a:6e:88:45:ed:c7:39:a9:14:86:02:96:7e:
ae:0f:1c:4b:3e:12:7f:b6:4c:d6:6f:81:61:1e:a9:06:51:55:
f9:25:14:22:c0:69:20:10:17:1e:8c:55:9a:e8:9d:ba:e2:46:
85:6d:57:06:18:06:15:d3:01:41:d5:de:ce:56:a5:c1:0c:27:
b3:ab:c2:a8:39:d5:38:c2:6e:a7:71:84:74:6f:ca:75:64:c8:
e0:0c:30:34:76:55:16:11:11:f9:f8:ff:e4:be:2f:52:ee:f1:
21:0f:b6:77:cb:7c:8c:00:17:23:4b:5f:08:f4:92:bf:0c:11:
2d:8e:5a:9a:72:59:40:5b:4e:f0:c4:0a:2a:c1:96:9b:71:1a:
07:8e:76:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:37:23 2025 by rpki-client