Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
File: HqvXZaBQUv7FmmonPV70v8ekA1o.mft (raw, json)
Hash identifier: o7O34JUq99AKw8ltYyO6GB9neVdTSxoJ4q5bFchYBHs=
Subject key identifier: 94:A4:89:6A:D2:45:84:9F:C8:80:64:7C:53:71:66:2E:4C:CB:B9:98
Authority key identifier: 1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
Certificate issuer: /CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Certificate serial: 0196748BAB1F85D8E85985C88C586241E8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 00:00:32 +0000
Manifest this update: Sun 27 Apr 2025 00:00:32 +0000
Manifest next update: Mon 28 Apr 2025 00:00:32 +0000
Files and hashes: 1: HqvXZaBQUv7FmmonPV70v8ekA1o.crl (hash: +RfrjxhFRp+vYkJ36NQEibr3cQOOjFg2nBTY4kgw6EQ=)
2: MFHqmqIi0lc_Re9PoYpL1Pw-ATg.roa (hash: iQ8gQVoAElI9FMya7NrxkBP0Xq9GVsJ7ePhe9Fu3PJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:ab:1f:85:d8:e8:59:85:c8:8c:58:62:41:e8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eabd765a05052fec59a6a273d5ef4bfc7a4035a
Validity
Not Before: Apr 27 00:00:32 2025 GMT
Not After : Apr 28 00:00:32 2025 GMT
Subject: CN=94a4896ad245849fc880647c5371662e4ccbb998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:54:b8:3c:5e:44:70:c2:91:33:65:1a:00:d2:
8b:2d:2c:8d:af:34:09:3a:99:ef:fd:51:a1:53:36:
53:f7:86:2c:4e:e5:b2:a1:33:09:42:7c:44:ac:b5:
ff:58:eb:b0:48:38:23:bf:2f:61:b6:41:b6:e6:28:
26:8e:23:0e:1e:dd:fb:8c:b5:03:67:b9:7e:80:49:
0e:b2:65:ed:16:f2:dd:ba:5f:4f:74:b9:b2:14:02:
49:8e:0a:85:3e:67:d1:df:08:01:be:37:82:77:ee:
8c:d8:3f:46:78:4b:d0:a1:47:4a:46:d9:92:e6:be:
ae:90:fd:8f:5b:22:c2:26:50:81:f2:bb:64:2d:7f:
46:0c:56:63:cd:35:1b:93:14:42:07:51:d3:0b:9e:
42:d1:6a:d5:43:b2:e1:74:1d:ba:5a:5b:a2:2a:e3:
98:e0:05:77:5d:64:3b:ff:22:a5:1d:7b:3d:59:03:
2c:dc:bb:90:7a:20:c5:89:39:bd:bc:bb:b5:a1:42:
35:dd:11:e7:c4:07:9f:5a:1a:69:ec:39:35:8e:ad:
b0:ef:80:b8:fe:66:bb:d8:0c:ee:62:00:ff:b6:9b:
f3:b8:fb:24:8e:8c:6a:93:a5:3e:cd:ba:0c:ae:9a:
f0:74:b0:28:76:24:6b:1f:90:e3:1b:86:4d:9e:1d:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:89:6A:D2:45:84:9F:C8:80:64:7C:53:71:66:2E:4C:CB:B9:98
X509v3 Authority Key Identifier:
keyid:1E:AB:D7:65:A0:50:52:FE:C5:9A:6A:27:3D:5E:F4:BF:C7:A4:03:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqvXZaBQUv7FmmonPV70v8ekA1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e10722-dabb-4a41-8923-b1b682e2060f/1/HqvXZaBQUv7FmmonPV70v8ekA1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:77:50:e9:66:bb:b4:d5:31:d9:18:ec:69:30:ce:97:d7:a6:
0e:3a:a0:5a:27:8c:11:20:13:40:34:f7:3d:75:26:28:fa:15:
05:7d:e1:a5:4b:da:bd:fc:8b:63:a4:eb:5c:de:53:36:14:50:
67:25:f9:b5:73:12:58:d8:c8:81:dc:a2:7a:23:d7:9a:40:bb:
86:20:64:3e:c0:de:70:22:2d:40:07:69:77:88:e9:26:14:af:
c4:5c:fa:40:5d:bf:5f:ba:ae:59:53:a6:e9:c4:a6:78:39:29:
b5:68:3b:29:94:da:fe:b0:3e:7b:84:c9:f1:bd:86:c9:f5:7b:
1c:a7:cf:48:74:d1:fe:9c:7b:79:25:7e:d7:c0:43:2f:f0:c3:
59:12:a0:bc:a4:e8:c2:eb:12:22:56:9d:15:6f:92:13:bd:1c:
c5:e8:0f:aa:97:90:37:8d:7b:bb:b2:5d:83:b4:ab:b0:aa:53:
0d:62:d5:c8:62:2d:a0:a4:2d:2c:45:03:af:08:dd:d6:00:5b:
d6:bd:7e:e9:55:5c:9d:43:69:ba:d8:44:4a:f9:45:5d:13:45:
bc:f0:8e:21:f3:6b:93:27:71:30:58:19:0d:bc:92:d1:89:39:
06:64:9d:fc:80:bc:6d:da:e1:19:b1:90:89:53:86:4d:95:3e:
0b:ed:19:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:37:38 2025 by rpki-client