Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
File: HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft (raw, json)
Hash identifier: CO8A+M0PYkijoLA3/qdByUKPdfEzTjTVeVzHKqQG2WE=
Subject key identifier: 0D:F6:EA:29:85:85:92:97:3F:2B:61:C6:10:A9:52:04:44:5B:6A:8E
Authority key identifier: 1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
Certificate issuer: /CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Certificate serial: 019680C6E4E11AA30E81A988FF61C9F11E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
Manifest number: 0C0A
Signing time: Tue 29 Apr 2025 09:00:40 +0000
Manifest this update: Tue 29 Apr 2025 09:00:40 +0000
Manifest next update: Wed 30 Apr 2025 09:00:40 +0000
Files and hashes: 1: 8seasK16GsaOFWr-SwwyW57ek-Q.roa (hash: qX7qnakcmcX1EuhGkXbf2jHBxhoO6I07uSRi1nBbABs=)
2: HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl (hash: hbFYjg3KL0bsaXySCM43Jn9YrqKYc6r8Dw/1JPOIIwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:c6:e4:e1:1a:a3:0e:81:a9:88:ff:61:c9:f1:1e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e01986e6551bb3a015ac64ed6747c234b2a79e0
Validity
Not Before: Apr 29 09:00:40 2025 GMT
Not After : Apr 30 09:00:40 2025 GMT
Subject: CN=0df6ea29858592973f2b61c610a95204445b6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:6a:bf:91:59:e9:b0:c0:bb:5e:49:ef:a6:
e6:c9:d1:b5:11:03:30:40:38:1c:ea:97:c7:fc:48:
94:28:71:19:26:28:81:d7:d9:d5:55:73:a7:ec:a1:
fc:68:33:1c:7c:ae:ba:c2:0f:b4:9c:89:6d:fb:1b:
1a:72:fc:d9:ca:3e:55:31:b1:81:48:52:c3:f8:2c:
07:b7:1e:06:b2:1c:a8:e7:af:6a:93:66:6b:3e:e1:
52:96:85:82:77:1e:70:4a:e4:97:ef:94:1f:38:fd:
fb:b6:9d:a0:c1:02:28:6b:c5:a1:92:7e:78:24:2c:
af:da:8e:59:e7:d5:ba:b6:4d:70:2a:aa:b5:40:d2:
99:48:39:95:53:47:2b:d6:f4:a1:78:02:4c:db:79:
10:8f:82:31:80:11:32:32:cc:18:2b:21:c4:c2:9a:
24:fb:3c:8b:99:5c:93:6b:ac:fc:e7:21:bb:96:34:
03:f9:61:df:ba:24:4a:a8:c0:22:e3:fd:f3:de:5a:
7f:7d:df:91:2c:2b:fa:69:2b:84:cc:93:4a:01:5a:
14:78:94:4e:ca:1c:ce:08:f9:9f:08:ea:55:10:41:
7b:e3:27:7a:7d:17:fe:5e:3c:9c:bf:90:ef:30:c3:
ea:92:c9:b3:bc:02:7c:85:4b:31:4f:7a:fe:d2:76:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:EA:29:85:85:92:97:3F:2B:61:C6:10:A9:52:04:44:5B:6A:8E
X509v3 Authority Key Identifier:
keyid:1E:01:98:6E:65:51:BB:3A:01:5A:C6:4E:D6:74:7C:23:4B:2A:79:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgGYbmVRuzoBWsZO1nR8I0sqeeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3cbb9c-5006-46be-b4c3-ff8f5545eba2/1/HgGYbmVRuzoBWsZO1nR8I0sqeeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0f:88:61:b5:79:02:08:d3:18:6f:51:30:6b:75:15:be:44:
fc:f7:8e:c4:45:90:dc:94:9e:af:c0:f4:67:02:3a:6e:ac:a6:
d2:ba:7a:14:df:c3:62:75:a7:f9:13:79:15:49:b7:8c:c8:9d:
0c:3c:a0:fe:be:8e:a3:14:53:b0:b8:fb:c6:fc:a8:8d:75:6d:
44:0f:8a:be:92:f4:5d:6f:51:48:0d:81:16:df:70:33:56:3f:
b1:03:d7:fd:4c:98:40:e4:82:24:7a:f6:32:b7:72:28:43:bd:
f1:8b:06:70:a6:af:2a:60:f5:f6:2f:24:07:dd:b2:13:6b:c9:
35:06:4a:c4:d9:3c:12:42:c5:c8:b1:a9:c3:c7:2d:2a:20:a4:
66:30:49:2a:83:55:68:87:a0:b2:d3:dc:fc:a9:90:67:6e:9e:
d2:aa:22:bc:7c:f8:1c:29:13:5a:40:1a:91:aa:57:9d:04:73:
c9:89:fb:f8:4c:77:79:17:90:3b:ff:57:b9:2a:61:a7:aa:be:
4a:2f:2d:ea:53:11:b4:55:ad:fd:27:68:aa:9d:13:94:db:5f:
9b:2e:ad:7f:f4:5c:ce:4f:25:5e:cb:05:d7:2e:3c:12:cc:ab:
74:6b:1f:31:62:16:ff:2d:7e:7b:bd:a4:57:ee:23:16:78:d3:
d9:d2:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:05:58 2025 by rpki-client