Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: RF1eXgXL7E7wsazoearFDbaNJWxg6NZ+/icr1OmO84k=
Subject key identifier: 90:A1:E7:54:1D:08:52:E6:9D:79:FE:12:E9:9C:81:03:34:53:49:7E
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 0196741E2FA4DB82FDCBF5014D0D824AD273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0EEC
Signing time: Sat 26 Apr 2025 22:00:57 +0000
Manifest this update: Sat 26 Apr 2025 22:00:57 +0000
Manifest next update: Sun 27 Apr 2025 22:00:57 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: XNDsd1amb5qpjz1E9T2/tjDVaiILHVPyBg2ijDcqp8A=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:2f:a4:db:82:fd:cb:f5:01:4d:0d:82:4a:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Apr 26 22:00:57 2025 GMT
Not After : Apr 27 22:00:57 2025 GMT
Subject: CN=90a1e7541d0852e69d79fe12e99c81033453497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:73:7e:30:d1:43:79:17:43:0a:96:8a:66:
13:35:ab:04:03:75:c0:68:48:8e:5c:45:20:0a:9c:
78:c3:b8:dc:33:01:87:5c:ea:2a:da:d8:fa:c4:f0:
b6:24:b9:a8:49:7a:ce:96:90:37:c7:44:b6:30:93:
cb:96:b6:9a:bc:88:d9:f1:b6:c7:e1:71:6a:04:62:
d4:67:06:5c:39:8b:50:c7:d0:b8:e4:b6:a2:3d:e4:
a1:93:aa:6e:bd:33:b7:05:c4:c0:5e:12:e3:1d:30:
b9:f6:ac:57:b4:c5:09:96:0d:9e:23:d1:39:97:ab:
0f:25:ba:20:eb:d4:b0:2b:28:70:bb:87:16:f9:6f:
fb:7f:07:2f:a2:a2:c2:1a:ab:90:70:9d:8a:08:b0:
a7:a3:a2:27:05:38:22:9b:bb:ed:d8:73:08:06:ed:
74:a3:70:a6:de:8d:59:17:c0:a7:6b:72:e2:14:60:
22:49:7b:19:6f:47:7e:bd:a4:8e:ad:6e:dc:9f:39:
1f:37:dc:7f:62:ed:06:ee:7e:c0:c4:45:06:11:d5:
bb:a6:f7:21:45:d9:e9:f8:05:16:82:59:b1:0d:33:
e7:4f:e0:f0:61:51:f8:55:29:fb:5c:c4:3d:a1:73:
a9:46:fc:95:f9:f0:d5:9e:22:23:e6:da:49:77:62:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A1:E7:54:1D:08:52:E6:9D:79:FE:12:E9:9C:81:03:34:53:49:7E
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a2:f5:44:86:3a:0f:96:44:67:3d:a8:4d:92:e6:5f:69:78:
07:de:98:03:b9:59:0d:5c:cb:fa:96:5f:0b:51:5b:5c:d9:6f:
d8:82:c7:d2:5a:c0:4e:c1:e3:6e:21:84:b6:da:e8:a0:6c:00:
4f:7a:c4:d6:3f:bd:55:c4:4a:7c:72:fe:a9:57:b6:f9:68:0d:
88:9d:e2:0b:d1:c3:bd:4a:0a:96:cf:75:ea:5e:00:9a:d0:27:
69:97:be:4e:6e:21:f1:5f:49:12:a6:e5:1e:3b:70:80:80:78:
e4:50:74:d5:31:6a:c8:fd:22:ea:6b:a9:d5:9b:49:e8:f0:f4:
fb:81:d7:8e:7c:c4:12:1c:a2:d8:24:fb:c0:52:fa:fc:b9:a4:
6b:8d:12:3b:d7:8c:14:02:59:88:43:d6:13:d5:54:23:0f:05:
f9:5a:06:4c:05:22:5c:a8:df:60:53:7a:89:0b:87:ba:2f:0f:
6c:81:e9:c3:82:5d:94:06:a3:31:13:7e:3b:3a:56:6c:bc:91:
90:38:40:08:5d:39:4e:f3:c8:d6:83:2b:6f:40:a6:7c:1a:c1:
57:8b:e7:a6:f5:cb:0e:94:52:38:24:88:c5:95:c7:07:d9:56:
bb:07:27:cd:ea:1b:27:03:77:af:4d:b3:15:b4:e1:fb:db:a8:
c1:af:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:53 2025 by rpki-client