Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
File: ha9TEIBex1YaGiL5yJDJcx-23r8.mft (raw, json)
Hash identifier: eVd7/sc39nkEAa+XhwZ4/WDsAMTXXJpT3Ny/phyGWBI=
Subject key identifier: C4:A0:A8:45:FA:0D:FB:F1:22:DF:4E:D9:8F:F8:65:8F:8A:88:4F:22
Authority key identifier: 85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
Certificate issuer: /CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Certificate serial: 01967AFB6C31286D9CF5C33FE1362308BD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 06:00:19 +0000
Manifest this update: Mon 28 Apr 2025 06:00:19 +0000
Manifest next update: Tue 29 Apr 2025 06:00:19 +0000
Files and hashes: 1: Gumma7CSH0QJDyYLGYO8JVucFbw.roa (hash: AHbFRK4oddEvM9hnH4lxRaSLOWlIxIkwfpWyReC2ymY=)
2: ha9TEIBex1YaGiL5yJDJcx-23r8.crl (hash: Elf0ygHt9Tnoiq6EpMMa/R63xlSpsfK3NdGwTXVv+pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:6c:31:28:6d:9c:f5:c3:3f:e1:36:23:08:bd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85af5310805ec7561a1a22f9c890c9731fb6debf
Validity
Not Before: Apr 28 06:00:19 2025 GMT
Not After : Apr 29 06:00:19 2025 GMT
Subject: CN=c4a0a845fa0dfbf122df4ed98ff8658f8a884f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:bf:90:18:d7:5b:47:72:f1:76:65:26:f9:
ee:e1:43:6e:cf:ec:37:57:ea:78:56:75:fa:28:22:
2d:4a:6b:10:9b:ed:9d:52:dc:b8:34:e7:d3:83:df:
2d:88:b5:31:c3:bc:df:3d:33:fb:55:97:a7:48:af:
65:d5:86:00:b5:eb:d4:71:36:ce:75:c7:99:1c:86:
83:20:16:67:06:02:8d:8d:e8:b6:0d:9b:15:dc:d4:
25:d3:ce:92:95:1d:91:bb:e3:bc:ab:d2:53:72:a9:
51:0b:c2:9e:9f:18:d5:f7:c4:56:09:0c:19:10:b9:
c7:cc:d1:c6:44:ce:b2:5c:22:41:f1:07:29:44:34:
67:63:c5:a1:dc:da:c7:24:c0:29:b7:05:a4:32:38:
15:ae:c6:05:06:cb:0d:61:a2:b9:3a:2d:a0:a4:a6:
63:ca:00:59:a5:9a:70:6f:a6:90:6d:81:3a:09:d7:
c9:24:fe:9c:ab:85:d6:13:b2:2d:22:64:cc:d3:4e:
7a:58:7f:1b:f8:1a:8f:ae:04:9c:62:50:d8:91:ab:
c7:d9:eb:e2:ed:ac:f5:be:a8:59:26:68:f6:fb:a3:
fb:01:b3:ac:c8:5f:c6:d4:94:ae:a9:00:ba:08:bd:
6b:1a:9f:a2:7a:96:c0:d8:ae:4b:bc:e9:1d:af:5b:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A0:A8:45:FA:0D:FB:F1:22:DF:4E:D9:8F:F8:65:8F:8A:88:4F:22
X509v3 Authority Key Identifier:
keyid:85:AF:53:10:80:5E:C7:56:1A:1A:22:F9:C8:90:C9:73:1F:B6:DE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha9TEIBex1YaGiL5yJDJcx-23r8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/001406-2e1f-4aeb-90a7-7528350d4c13/1/ha9TEIBex1YaGiL5yJDJcx-23r8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:da:8e:0f:ed:47:b4:d4:3e:ab:27:c4:34:72:4d:a9:d7:
02:7d:0b:e8:e5:76:de:43:ab:cc:f3:a3:54:6c:15:56:f4:ae:
30:1e:36:0c:88:08:ba:33:e3:1a:17:9c:47:cb:0f:79:2b:a5:
2c:ae:4a:22:0a:e7:87:4a:b5:d7:f9:16:ff:fc:de:4a:f9:0c:
0e:33:d4:bb:5e:fe:56:2b:cc:c5:f0:80:d2:55:a2:a0:ae:41:
a1:6b:98:d7:e1:a7:95:7d:36:f7:d6:41:8f:47:20:ae:2f:13:
83:f5:a3:63:02:eb:3f:f8:08:86:7b:ed:ab:f3:fb:55:4b:a6:
f1:c2:9e:5f:b4:f3:47:a6:d3:d2:30:cd:8a:4d:e8:ed:6e:9b:
05:2c:b1:fb:6a:22:3c:0f:96:9d:51:f6:9c:16:62:8d:61:91:
79:07:dd:37:37:55:06:0a:b6:e0:58:cf:5b:2b:52:90:4f:86:
18:ca:99:e8:fd:8e:d3:c1:04:c7:25:0c:d9:fa:af:83:d1:77:
25:d7:27:a3:fb:3e:51:d7:cc:c6:75:cf:00:85:7a:77:29:71:
5e:29:ca:44:67:88:11:81:fe:8f:a7:df:e9:9e:58:3e:76:5c:
ed:05:9f:61:c8:15:75:5a:96:a4:c9:14:cc:d2:31:a8:01:d2:
78:19:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:06:24 2025 by rpki-client