Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: aryqG++g7BCl7xGdFHAH1iCkKGErcfy9VSwal5gDnjs=
Subject key identifier: 0E:6C:08:F9:6F:AD:7B:83:3D:CE:3B:19:CF:2B:DE:A0:E9:FF:8E:39
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 019677FB22E39BA8B41DC33F7DE90BA1C64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 0952
Signing time: Sun 27 Apr 2025 16:01:09 +0000
Manifest this update: Sun 27 Apr 2025 16:01:09 +0000
Manifest next update: Mon 28 Apr 2025 16:01:09 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: t3AAARutMsR+6chNESTY9wwxBdfNNh71j+JOwVJMwzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:22:e3:9b:a8:b4:1d:c3:3f:7d:e9:0b:a1:c6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Apr 27 16:01:09 2025 GMT
Not After : Apr 28 16:01:09 2025 GMT
Subject: CN=0e6c08f96fad7b833dce3b19cf2bdea0e9ff8e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5d:2c:aa:82:11:04:28:31:35:d5:e8:22:5d:
3e:d9:78:81:4a:86:3d:a0:ad:00:c9:7b:c9:08:9e:
6c:50:9c:49:f7:e3:62:c6:c0:5e:ec:33:44:4c:6c:
5c:18:8a:fb:b8:b2:ba:a5:8b:7e:ee:4b:76:d5:51:
42:4b:b3:d4:68:16:c3:a9:f2:d5:f3:67:dd:2a:53:
b1:e1:c7:33:5e:4a:22:a4:05:49:dc:30:0f:2a:d4:
2b:d5:ad:d4:c0:89:c2:26:0e:ed:ef:6e:91:4e:a0:
6e:96:bc:0c:c2:e2:2f:97:24:fc:39:0b:d0:10:20:
fd:34:be:5c:68:aa:1b:81:6a:cc:1a:7c:c8:02:fd:
b2:bf:9d:11:12:d0:52:0b:27:60:b9:24:eb:03:eb:
db:b6:d7:4e:d1:d7:23:0d:26:5b:c7:6a:04:96:6a:
68:59:1f:d0:c8:fd:aa:f0:5d:87:c2:9a:39:ee:d4:
2a:be:03:87:cf:ad:7a:72:98:c0:b8:4e:be:49:d0:
48:fc:ef:ea:d3:b7:7e:ab:32:db:25:c3:f8:59:40:
8e:a8:8a:62:a8:b6:e7:a6:35:aa:e0:b0:3d:b0:99:
2f:e2:b3:cc:84:f0:b7:e8:df:50:d9:90:3b:7d:b4:
60:28:96:77:26:ad:ba:7e:cd:8d:fe:f0:44:f5:73:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6C:08:F9:6F:AD:7B:83:3D:CE:3B:19:CF:2B:DE:A0:E9:FF:8E:39
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:22:90:a1:6a:77:14:6b:ac:44:6b:53:d0:e6:5c:ee:33:
cb:c8:57:f5:35:5f:cc:6d:1f:54:33:c9:57:b1:0d:de:c2:e5:
e8:79:bc:30:79:28:f7:41:bf:6e:5c:c0:d2:0a:3f:97:21:55:
22:00:e0:a0:02:01:5d:62:5f:6d:12:84:77:bb:8c:b1:89:8e:
d1:f6:f1:be:77:97:5b:af:4b:b1:95:3d:f6:01:49:b7:8b:01:
f2:27:9f:90:7e:e2:75:10:7e:9f:f4:9f:2c:b0:25:d5:b8:af:
6c:bb:e8:bc:81:e3:27:ef:f5:3b:6b:34:f0:40:85:47:4f:60:
0f:1b:0a:c7:2e:f8:29:37:b0:96:d1:bd:7b:d7:ad:f5:48:17:
73:72:23:68:0d:5a:6c:73:b2:f0:88:f8:af:8a:19:21:25:b0:
9b:19:28:8d:b1:5b:03:f8:e9:84:7c:32:3a:ab:f0:73:f8:c6:
07:aa:4e:69:21:fe:01:3c:fd:cb:59:01:91:6b:11:89:85:66:
62:85:29:59:c8:0d:64:a9:52:75:88:ce:a5:bb:2e:82:6f:3e:
48:c1:06:e5:36:1d:b7:98:0d:f4:57:11:37:a7:45:40:25:24:
f9:83:0a:ef:ca:ef:f9:c1:d7:b7:0c:4d:28:a7:ec:fc:11:58:
21:f7:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:33 2025 by rpki-client