Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
File: hkl2gukwfEaHk1AIFzFH0TKijGQ.mft (raw, json)
Hash identifier: ykK7+QM5Lxw41EUtxTUdJYuf+EFaydpBNKG3fCaiPIQ=
Subject key identifier: 65:59:D9:90:2C:3A:70:95:A1:FF:60:7D:75:DD:5A:E1:70:83:E9:3C
Authority key identifier: 86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
Certificate issuer: /CN=86497682e9307c4687935008173147d132a28c64
Certificate serial: 01968A00FA87D77B47CDF933059E5AC027FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
Manifest number: 10E6
Signing time: Thu 01 May 2025 04:00:42 +0000
Manifest this update: Thu 01 May 2025 04:00:42 +0000
Manifest next update: Fri 02 May 2025 04:00:42 +0000
Files and hashes: 1: BO3NQSZ4VV4Ik2Xgm0m98xsd8Po.roa (hash: zwimVc6fdY5wMVCx/Pfq1/VebJPothW3yZi++5QRFE0=)
2: hkl2gukwfEaHk1AIFzFH0TKijGQ.crl (hash: j9em7vOrfEe+4WRKLPpjsDnX1rG7SBTW33binbLSP8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8a:00:fa:87:d7:7b:47:cd:f9:33:05:9e:5a:c0:27:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86497682e9307c4687935008173147d132a28c64
Validity
Not Before: May 1 04:00:42 2025 GMT
Not After : May 2 04:00:42 2025 GMT
Subject: CN=6559d9902c3a7095a1ff607d75dd5ae17083e93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:7d:f6:81:85:08:56:f8:ba:1f:ad:bb:f8:
c9:80:71:7e:ff:72:17:5d:2f:7e:1a:d1:0e:73:c7:
53:27:dd:a5:8d:b3:b8:87:2d:dd:d6:0a:01:d6:84:
30:88:15:a9:0c:91:81:8e:8a:8b:48:8a:97:28:83:
e4:70:20:21:03:b6:11:ec:9a:fd:78:91:4f:a7:b8:
2c:73:5e:7d:c2:76:80:37:39:cf:11:9a:e0:70:8e:
50:b9:0f:91:d8:73:c9:eb:0f:50:91:0f:cf:25:bd:
93:bb:82:6f:6a:86:0a:04:04:5b:29:e4:f3:ec:f8:
ec:14:01:95:08:33:d1:49:95:6f:48:95:22:ae:ae:
da:da:c7:22:1e:1d:fd:13:6c:1d:93:37:ee:2a:6e:
0f:d6:a1:18:02:45:67:f7:1d:d7:d6:49:4a:2d:60:
f9:d6:32:64:1e:d8:bb:28:49:6d:da:0b:1a:3d:c3:
f8:4c:6d:a2:61:45:f6:3d:a7:62:9d:fd:48:49:2a:
f8:ca:c5:fd:5f:26:67:b6:ec:51:bc:c5:20:4d:56:
a5:4d:13:9a:08:b5:b0:a4:98:4d:6b:0b:25:1f:73:
62:e0:be:da:2b:f7:3c:93:03:fb:5c:c1:e4:96:aa:
9f:26:a2:10:45:ae:9a:e0:7b:12:d7:c0:b0:64:4e:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:D9:90:2C:3A:70:95:A1:FF:60:7D:75:DD:5A:E1:70:83:E9:3C
X509v3 Authority Key Identifier:
keyid:86:49:76:82:E9:30:7C:46:87:93:50:08:17:31:47:D1:32:A2:8C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkl2gukwfEaHk1AIFzFH0TKijGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c1a754-1f96-4500-8102-91140f329eaa/1/hkl2gukwfEaHk1AIFzFH0TKijGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:7a:c5:8a:4c:c9:01:a3:c2:ab:20:49:6a:1a:3a:8f:54:
1a:b5:2e:bc:a2:c2:27:76:92:bf:53:2b:94:19:97:7d:1f:73:
7b:d6:95:16:83:fd:f0:3d:b5:a2:d0:c2:22:49:86:b5:dc:3f:
c1:e0:0a:8d:95:1c:4f:f4:1e:2e:3e:d7:a7:25:db:2a:d6:84:
d9:67:ee:39:4c:d7:c0:6e:43:a9:ee:fd:38:7c:20:f0:14:c2:
32:7d:d7:a0:64:27:99:08:6e:24:b3:6f:5d:43:cc:95:bb:8d:
b1:2e:5d:f1:1d:92:bb:6b:5d:78:90:19:57:44:35:ac:aa:ea:
b7:8e:e3:20:ab:2c:a4:8f:58:41:f1:23:a4:c0:ff:e1:b3:a4:
df:7f:f2:c0:fb:7f:be:23:c1:af:f4:68:34:65:25:3d:3e:e5:
1f:3a:b0:a4:55:42:fe:f6:4e:64:04:56:94:db:6e:3a:44:eb:
d5:82:09:75:68:f1:b7:f2:a1:36:22:fd:7e:05:db:97:90:01:
e7:d5:42:49:55:4a:5f:02:61:6a:27:79:c4:c1:26:92:27:16:
0c:2d:a3:fb:0e:68:a8:7d:09:c7:8a:3c:99:88:1d:cf:9a:cf:
e0:2b:cb:9a:5c:3e:f0:7e:91:72:a1:e1:b1:85:be:dc:d5:0f:
2c:fc:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:28:39 2025 by rpki-client