Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: 5YK5qpX2/Opan0QZLC2DZGT3U6x10uXF+XlrBarGQKM=
Subject key identifier: A9:E6:5D:C2:47:4C:79:55:58:23:5A:66:28:AA:E7:A5:05:44:57:16
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 0196771EF193A1C97AB1B4B72D4CE2685465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 12:00:38 +0000
Manifest this update: Sun 27 Apr 2025 12:00:38 +0000
Manifest next update: Mon 28 Apr 2025 12:00:38 +0000
Files and hashes: 1: 6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa (hash: XDeNGBG9FcZmfX7y784opBbXWR4Kqd1BKc6tmbydzsk=)
2: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
3: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: QMVM/4XJb1nGOXtR5kg4n0azuRK6pYjx8AAuZ4KSq34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:f1:93:a1:c9:7a:b1:b4:b7:2d:4c:e2:68:54:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Apr 27 12:00:38 2025 GMT
Not After : Apr 28 12:00:38 2025 GMT
Subject: CN=a9e65dc2474c795558235a6628aae7a505445716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c3:90:3f:7d:da:7a:d2:25:c0:bc:76:37:22:
5e:a6:bf:d7:30:6b:25:9f:77:60:93:c6:b1:c6:06:
14:e1:7a:cc:0f:82:69:69:7c:21:6e:5f:d3:9c:c7:
e0:cc:34:a8:bc:df:c7:c4:b9:84:1d:04:c5:a2:c9:
6f:ab:a0:56:08:c1:d6:42:9f:83:20:30:27:a8:5e:
fd:c1:12:02:41:66:62:b9:38:14:f8:ba:c3:a8:76:
c5:8a:e7:ff:0d:94:91:22:1e:1e:57:0c:71:23:a3:
ec:a5:20:95:7e:56:06:e6:b8:9a:1b:16:76:1d:09:
5a:cb:d5:5e:14:66:39:1a:d8:1d:ef:b1:22:28:f5:
43:23:d3:2b:1c:e9:a9:af:eb:1f:53:8b:91:20:7d:
60:5e:23:3a:80:7a:3a:36:94:35:2f:9c:16:9a:e7:
45:47:a4:97:c0:5f:6b:59:1a:87:04:da:70:36:6c:
06:fb:9c:5f:03:9a:9c:f0:af:47:f3:90:99:7f:d3:
c2:7f:d1:f4:11:de:ed:1b:3f:2e:6a:76:4c:12:52:
b7:a8:0b:8b:10:17:2b:c8:e7:b7:c8:63:9f:15:69:
e5:3f:ff:45:b6:15:0c:91:23:b1:a9:39:5d:f5:48:
9d:3b:87:d1:25:cd:47:8d:91:2e:fb:b6:1b:47:6a:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:5D:C2:47:4C:79:55:58:23:5A:66:28:AA:E7:A5:05:44:57:16
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:db:81:3e:3b:6e:e3:a6:1b:6c:db:c9:3a:0b:05:78:d3:14:
9c:c7:1d:32:a2:58:d0:60:85:42:0e:1e:a3:d6:64:44:25:d0:
c9:f2:34:25:b7:af:45:d7:01:2a:43:18:a6:5a:c3:66:00:5b:
55:f5:af:99:46:64:af:61:f1:9a:3e:d0:c4:d3:82:d9:39:a5:
49:1e:13:3d:3a:a2:46:4d:4e:1d:7b:08:7a:97:8d:36:c6:d7:
a0:5b:fd:8c:7a:9f:4b:c6:2c:d6:8d:69:74:c8:e4:e2:89:75:
6f:21:ac:e1:3e:32:42:7a:0a:30:6c:80:06:fe:1c:6b:67:85:
6a:dd:cb:b1:20:fc:0f:8a:6b:11:72:38:cd:23:e4:10:83:89:
90:0c:f9:b6:aa:e5:c9:4d:07:41:16:f7:71:c0:e4:29:1e:78:
26:a6:80:59:4c:c2:42:b7:b1:77:4b:ad:61:20:3d:9c:91:4f:
54:ea:17:9b:7e:c8:96:77:6d:5f:a2:bd:c5:f7:da:b3:a7:be:
b5:7a:6e:29:99:37:bb:dc:92:bc:bd:e8:ef:3c:71:07:33:f4:
f7:b9:ea:f6:7f:15:54:b9:3c:7b:99:00:1e:21:43:d7:84:7c:
7d:d3:d9:48:4b:a5:69:a0:ef:04:8d:95:15:17:df:bc:d4:6b:
56:9f:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:49:48 2025 by rpki-client