Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
File: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft (raw, json)
Hash identifier: gLzcMwJskxTGzWCSJiB2ENHSTT9bpvEcxEb/cXrrve0=
Subject key identifier: 11:1C:D1:5D:14:05:85:F3:35:BF:94:90:46:4A:9F:69:B9:2B:FF:27
Authority key identifier: 85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
Certificate issuer: /CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Certificate serial: 01967C7C603497ACD8353564B6652AA59C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
Manifest number: 0579
Signing time: Mon 28 Apr 2025 13:00:47 +0000
Manifest this update: Mon 28 Apr 2025 13:00:47 +0000
Manifest next update: Tue 29 Apr 2025 13:00:47 +0000
Files and hashes: 1: gBy9cD3j_tP--kqjiHxj-BEz2w8.roa (hash: GWls9v+X93Qb6tijazZ0OBt3/3oq/+caZQ2/zTy7cZA=)
2: hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl (hash: 3dRLfTmYpCauuAl3a8KownFmVw2GHL0fPgBjcw44AkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:7c:60:34:97:ac:d8:35:35:64:b6:65:2a:a5:9c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855dd93f2c7e6f522f2b2894b0359f6679bc8dfb
Validity
Not Before: Apr 28 13:00:47 2025 GMT
Not After : Apr 29 13:00:47 2025 GMT
Subject: CN=111cd15d140585f335bf9490464a9f69b92bff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:d9:ec:33:a9:a0:59:e3:82:fe:a2:e7:5f:
81:c2:a5:78:ac:3c:84:cd:bf:72:b3:cb:eb:8e:54:
d2:af:1c:39:36:9f:da:52:b9:f8:b1:60:0e:bf:84:
3f:b1:19:eb:71:ee:97:c7:01:c3:8b:b9:31:f6:43:
84:cb:57:2e:cd:6f:64:02:59:fc:fd:85:62:f7:40:
0c:67:2e:18:0f:b7:72:ea:67:1d:47:5b:cf:77:8d:
0b:ea:87:ea:e6:0a:87:31:c2:fb:f7:6c:3c:39:02:
b2:6c:ea:60:67:19:13:b9:8f:73:fd:a3:9a:e4:3a:
bf:6a:8c:19:93:99:9b:1b:e2:31:ad:84:c5:0e:fa:
71:a1:ee:3f:85:f8:7d:43:4b:38:00:52:b8:04:fd:
09:b4:ee:04:81:bf:d4:ed:7b:2d:62:a3:2a:2a:0c:
35:55:79:b2:0c:41:54:61:8d:41:d4:56:55:fd:4b:
ee:ec:6b:b4:2f:6b:2d:38:67:4a:54:43:32:7e:55:
bb:b0:c2:15:3a:53:95:9c:be:80:cd:f5:64:84:a3:
c1:26:0c:b6:05:53:96:a8:7b:f4:be:24:92:6d:c6:
71:d6:22:fc:d2:18:24:dc:45:a9:23:85:7c:88:a5:
ee:66:3f:72:bd:5f:86:62:e4:1b:d2:51:f6:01:8a:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1C:D1:5D:14:05:85:F3:35:BF:94:90:46:4A:9F:69:B9:2B:FF:27
X509v3 Authority Key Identifier:
keyid:85:5D:D9:3F:2C:7E:6F:52:2F:2B:28:94:B0:35:9F:66:79:BC:8D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8edca0-2706-4ec7-94eb-2b20894adec0/1/hV3ZPyx-b1IvKyiUsDWfZnm8jfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2b:6d:66:97:5b:60:15:96:de:e9:4c:64:04:25:ac:a0:a1:
70:b5:4a:1c:65:c7:30:1f:99:40:a6:e8:0d:ef:ca:7a:38:2d:
cd:e4:8a:31:ad:70:b8:b1:bb:ca:56:aa:63:d1:3e:ca:68:c5:
04:e9:47:af:01:f8:15:b5:4a:98:52:27:41:81:e2:df:a3:6d:
01:1f:86:a2:81:f2:35:f8:2c:de:67:6b:93:aa:fe:46:00:83:
19:d3:81:03:cc:60:dc:ef:d7:07:b4:27:62:ad:5c:f8:62:dd:
7f:79:44:48:e9:ba:42:b9:9b:83:20:69:ce:fb:99:96:d2:71:
ce:4c:50:04:7f:28:02:62:92:0b:60:2f:6b:2b:82:75:fb:fc:
1a:59:0b:21:c9:87:ca:48:10:a4:b0:4c:aa:b6:7d:ac:61:4a:
85:f1:5f:fc:f8:c1:85:e9:8e:93:40:e6:c3:17:30:80:92:27:
c1:05:d2:05:d4:da:f7:e8:a0:24:e4:eb:7a:64:ee:e2:14:6e:
02:fb:53:00:ca:79:8a:34:ea:d5:73:a3:98:d9:d5:5a:a8:b2:
8a:2e:a0:65:a7:71:8c:d2:c8:ef:dc:8d:c7:7e:7e:d6:f0:da:
27:e6:19:39:79:e3:eb:69:11:fc:38:10:7f:21:a2:4c:30:6a:
6c:7a:4d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:43:31 2025 by rpki-client