Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
File: huGrpgDN5ewxgxmxVZS2irlslWw.mft (raw, json)
Hash identifier: QS97NKaeVg2Im87jUo+TJ6MwFpHpyxHON2JxIdtImP8=
Subject key identifier: A7:6E:56:3A:07:E2:F1:1E:DD:44:7D:ED:0A:95:A7:C7:3D:39:67:4A
Authority key identifier: 86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
Certificate issuer: /CN=86e1aba600cde5ec318319b15594b68ab96c956c
Certificate serial: 01967B329491AD06F9E136554B576239DE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
Manifest number: 0E14
Signing time: Mon 28 Apr 2025 07:00:34 +0000
Manifest this update: Mon 28 Apr 2025 07:00:34 +0000
Manifest next update: Tue 29 Apr 2025 07:00:34 +0000
Files and hashes: 1: Q7vNAscnF-4OhkgVonOsxeJBDjA.roa (hash: 0ioDa0FuPDgR/Y4yLPplBITqL6YDwLS4b5dcomdJX+s=)
2: huGrpgDN5ewxgxmxVZS2irlslWw.crl (hash: nILalKl8kGiQwn5bfuQT2vrQXtwvPSAxX3wJoslDJZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:94:91:ad:06:f9:e1:36:55:4b:57:62:39:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e1aba600cde5ec318319b15594b68ab96c956c
Validity
Not Before: Apr 28 07:00:34 2025 GMT
Not After : Apr 29 07:00:34 2025 GMT
Subject: CN=a76e563a07e2f11edd447ded0a95a7c73d39674a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:32:4e:49:48:64:89:e5:58:5d:8a:2e:9f:58:
01:57:e4:47:47:2e:91:af:11:eb:17:fe:d8:ad:e1:
96:c4:e4:24:00:1a:81:b1:cf:4f:ef:fb:83:ee:2f:
90:48:07:00:bc:79:be:8f:04:20:47:6b:31:ab:3c:
f8:c4:6f:35:1f:6f:07:8a:c1:88:cf:d8:a6:f1:3b:
17:3e:a6:d5:2c:fe:06:9a:27:f3:0f:15:ca:b1:d5:
1d:f7:32:78:1f:6e:7b:af:a2:46:a4:31:36:01:23:
e5:3d:c0:c2:22:52:43:44:58:d9:05:90:4d:77:95:
fb:1b:be:c0:79:74:f2:2c:99:5e:e1:dc:73:74:d8:
1b:ec:3e:18:59:b9:0a:42:9d:09:87:ce:68:a7:a1:
18:ab:3f:94:3b:f1:62:06:e0:51:30:6b:84:90:e7:
bb:92:fc:aa:80:87:1c:ea:d8:29:b4:66:bc:87:29:
ce:5e:2b:21:c3:3b:54:0e:7c:db:e5:51:46:89:59:
2f:e7:6c:52:96:b9:11:29:10:9c:cb:e2:e1:cf:49:
29:0d:54:e2:aa:06:8c:c9:6e:19:02:ba:bc:a6:ff:
2d:f7:fc:86:f6:79:18:b8:c3:ad:84:db:31:ce:97:
42:be:10:e0:40:8a:3c:de:85:49:63:86:1f:99:13:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:56:3A:07:E2:F1:1E:DD:44:7D:ED:0A:95:A7:C7:3D:39:67:4A
X509v3 Authority Key Identifier:
keyid:86:E1:AB:A6:00:CD:E5:EC:31:83:19:B1:55:94:B6:8A:B9:6C:95:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/huGrpgDN5ewxgxmxVZS2irlslWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6845d-1c3c-48d6-a6b2-d605c53a35be/1/huGrpgDN5ewxgxmxVZS2irlslWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:f5:51:a4:29:20:f7:d8:be:d8:fe:b0:06:cf:e9:be:4a:10:
99:8f:ab:c2:d4:ef:7a:fe:df:dc:24:b9:05:3b:f0:33:07:00:
a7:7d:55:07:eb:22:3a:0a:63:3a:e6:f7:2c:af:b5:86:77:84:
e6:e1:9b:e0:79:24:a2:ed:8d:2f:8b:c1:c7:51:4b:91:8f:b5:
d6:8a:09:fd:ae:70:08:15:04:70:e6:c8:2c:27:61:bd:01:40:
78:00:05:6c:73:05:74:2e:0f:f6:fb:78:3e:ba:a5:71:18:e8:
a3:bb:68:71:1a:d4:3a:02:0a:e3:f6:d7:a8:35:86:aa:5e:b7:
77:74:14:86:e9:1b:47:3f:c3:4a:6c:a9:4a:54:0c:6e:3a:68:
ef:33:80:93:43:49:b5:a7:f3:01:56:b5:df:cd:fd:fb:d7:fc:
b1:90:9b:0d:65:1a:c6:23:15:92:e6:21:fa:51:ef:33:b2:1f:
2f:d3:7c:b2:c2:47:39:f4:3e:a5:6b:5a:40:c0:43:4a:16:b0:
7c:37:bc:e1:4c:0e:e9:eb:a3:8b:67:1e:08:64:ed:51:e8:8f:
ca:fc:66:e3:af:cf:65:d8:89:d2:2f:fa:34:35:37:b5:27:a5:
cc:e4:32:ac:a1:1b:38:ec:24:91:89:87:37:fe:33:3f:ae:13:
a6:5a:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:18:51 2025 by rpki-client