Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
File: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft (raw, json)
Hash identifier: NNz4BKKLMzYeKJc14Uh1D02Sp/taXInb3zPKXHaqn8E=
Subject key identifier: 63:4F:55:DA:6C:B8:74:8A:25:77:96:87:8A:1F:EA:95:7E:D1:AC:A4
Authority key identifier: 85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8
Certificate issuer: /CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8
Certificate serial: 01968FCC5C16662E552C49E98B5317CA42FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
Manifest number: C5
Signing time: Fri 02 May 2025 07:00:56 +0000
Manifest this update: Fri 02 May 2025 07:00:56 +0000
Manifest next update: Sat 03 May 2025 07:00:56 +0000
Files and hashes: 1: cllA8kNp-t480y7IfyyWuiklziY.roa (hash: 5bq8pPC98WVuN+UCw7i3OOCXOObrhETW5cCP805rEU4=)
2: hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl (hash: EDGZcMuxh02/GHiENjlXPFHJYOejiWNTTNxAcfXrpsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cc:5c:16:66:2e:55:2c:49:e9:8b:53:17:ca:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85f870119e5921bf12495dc902dcfe3d8d4a37d8
Validity
Not Before: May 2 07:00:56 2025 GMT
Not After : May 3 07:00:56 2025 GMT
Subject: CN=634f55da6cb8748a257796878a1fea957ed1aca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:35:c6:08:48:43:66:aa:e0:5e:47:4b:a2:
a5:a0:7f:1d:0d:36:c4:67:0e:ca:23:2c:02:22:96:
1a:7e:b2:30:52:cb:0c:33:bf:29:77:7e:5b:05:37:
1d:0f:2b:2f:f5:a7:bf:b4:ac:95:ce:b2:01:a0:39:
93:b1:99:11:b3:f4:d1:8e:96:38:6f:36:8c:ac:18:
89:78:ae:d9:ae:e7:b1:6f:c5:52:ce:55:5a:3f:e4:
e8:8b:23:29:02:3c:9b:1a:3b:ec:2e:a2:5a:73:40:
16:76:cc:d4:22:28:0d:67:ea:30:ba:8d:ce:f0:44:
6f:9a:f1:fc:4e:27:b9:5b:fc:ab:83:df:44:3c:07:
36:06:9a:3c:2d:7b:a5:b7:f6:ed:97:19:47:7e:11:
10:38:43:fe:72:8d:dc:f4:e3:c8:db:4f:44:ea:79:
48:2a:89:3e:b9:6e:93:0c:31:33:db:11:9f:26:b5:
05:21:cd:f0:1e:96:1e:4f:9b:78:dd:73:3f:b4:59:
01:d3:46:b7:34:19:4a:88:e2:76:4a:42:08:4b:d6:
43:4f:72:c9:ee:c1:96:b3:91:5a:f8:e2:5e:79:19:
51:f0:d2:ee:c1:8f:8e:34:93:c3:29:1b:b6:7d:29:
88:63:ae:a0:f0:e3:50:8a:e7:a8:64:a3:0e:45:0d:
de:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:55:DA:6C:B8:74:8A:25:77:96:87:8A:1F:EA:95:7E:D1:AC:A4
X509v3 Authority Key Identifier:
keyid:85:F8:70:11:9E:59:21:BF:12:49:5D:C9:02:DC:FE:3D:8D:4A:37:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/bb6f34-347b-4bae-8f92-ea84a51eb3dc/1/hfhwEZ5ZIb8SSV3JAtz-PY1KN9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:70:90:c3:46:08:29:7e:db:9a:3d:52:42:97:a2:60:06:ca:
39:7a:95:16:cb:d1:23:64:87:48:d3:72:c8:d0:85:df:06:63:
17:8f:4c:af:fa:22:2a:1e:ae:e0:aa:a4:b5:1b:33:db:68:db:
a7:1e:58:af:6b:c4:2e:20:63:c6:1c:e5:67:cd:d3:14:b5:0e:
1a:8a:99:fa:41:84:5d:d0:51:de:69:8c:d0:1e:58:8f:e0:e3:
77:a4:e6:b7:6b:0a:1e:0c:5e:27:ae:70:7f:d3:10:49:ad:df:
46:54:c3:55:72:d0:10:04:c0:16:6a:86:3c:bf:21:2e:d3:af:
7d:52:5b:32:04:a6:68:32:99:e2:6e:ef:c5:21:7e:99:16:00:
3b:a9:ba:fe:60:5e:70:00:21:bd:c9:88:1c:58:f0:e7:ca:dc:
5c:43:4e:cf:1b:eb:61:c0:21:2d:ec:af:e0:1b:73:62:f0:c3:
ef:c5:8d:2f:b8:b4:a9:73:0d:2f:bb:e5:af:91:62:6f:6c:0e:
ba:1a:7b:0d:24:02:eb:d9:b0:02:9f:6d:a0:c9:ea:ae:38:68:
19:98:04:b1:d7:6c:84:85:dc:bf:2a:12:cd:62:c0:06:c5:ed:
eb:e4:ad:92:1a:fd:bb:ac:74:3e:e3:fd:8f:76:81:47:2d:f6:
a0:2b:58:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:27:02 2025 by rpki-client