Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: ci4STYBDfdgyJtPm7mbSAx3lA4UXW91duKlJQU6wI6U=
Subject key identifier: 5F:06:E1:B4:15:40:6A:81:63:4B:2E:5F:E9:3A:67:E7:52:0A:9A:2F
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 01968322C5C2E6790C3FE7D15CEEEA7A8B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 1519
Signing time: Tue 29 Apr 2025 20:00:16 +0000
Manifest this update: Tue 29 Apr 2025 20:00:16 +0000
Manifest next update: Wed 30 Apr 2025 20:00:16 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: Uv1coqolqOQGu4Ib24YxTw0qOEGkOB1y8I8GoH0yKag=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:c5:c2:e6:79:0c:3f:e7:d1:5c:ee:ea:7a:8b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: Apr 29 20:00:16 2025 GMT
Not After : Apr 30 20:00:16 2025 GMT
Subject: CN=5f06e1b415406a81634b2e5fe93a67e7520a9a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f6:92:5e:65:fb:33:a4:01:60:c2:1e:97:b6:
05:d9:c5:02:b1:26:2f:ea:0d:40:c6:0b:c2:88:ce:
58:9f:9e:67:fd:0c:9e:2d:95:8a:f8:c5:a4:ce:7f:
df:03:f1:dc:df:df:7a:ea:57:59:e0:58:43:66:d1:
50:a3:63:0c:a5:d6:62:ac:83:68:1f:f6:38:49:f0:
33:c2:cc:b2:1b:b3:01:21:63:ed:b3:d5:0b:58:48:
d3:2a:99:fa:ce:77:51:7c:14:1c:e1:0f:dc:b1:0c:
24:13:f5:d8:3b:0f:47:0f:e3:7e:1c:b4:02:1f:5a:
2b:67:02:0c:ea:9a:ec:2d:93:9a:e9:1c:17:96:56:
57:72:8d:93:73:4c:10:92:8c:52:5e:f6:b3:21:3a:
1d:2d:fd:0b:e5:33:37:55:f1:22:aa:80:4c:dd:19:
79:cb:43:a4:da:82:c2:d9:4b:b3:4d:48:4d:e2:51:
3f:cf:10:08:99:b4:4f:85:2a:c2:42:5c:15:0b:1d:
02:59:c0:ee:d5:41:4b:4c:20:ac:a4:b6:7f:17:cf:
e5:3b:a7:0d:88:88:7d:11:5b:66:4b:05:ec:b4:ae:
e1:cd:1a:55:80:db:ba:c9:b8:37:73:c2:6b:cd:c6:
fb:5a:db:92:ed:c2:9c:2d:1f:0d:86:bc:dc:2b:94:
80:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:06:E1:B4:15:40:6A:81:63:4B:2E:5F:E9:3A:67:E7:52:0A:9A:2F
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e7:fc:7d:61:47:41:c8:23:5c:a1:55:43:5d:b1:bc:3c:f5:
d9:f0:be:4f:ec:99:1a:0e:cf:4b:81:3d:f1:4f:8a:dc:91:6f:
e7:f5:b1:2d:5b:71:e1:70:7d:3d:27:27:e8:70:52:b6:51:e2:
fd:00:fa:78:ed:e6:85:90:2a:db:7b:c0:88:e1:10:7d:53:f4:
87:8f:42:03:56:99:40:00:2c:5c:ec:3c:91:e5:21:13:4d:18:
4a:3e:60:50:73:cc:02:c9:b4:0c:6a:be:50:57:ee:e8:f9:77:
68:c8:d6:ed:14:42:1c:8d:4a:2d:3f:45:ee:1e:ea:dc:bf:80:
6f:31:7c:93:26:f3:e7:d9:ca:62:ee:fc:d8:a4:9e:27:d3:d2:
f2:71:3c:04:db:50:84:46:87:ce:79:8a:1a:11:19:5b:84:9b:
4d:e0:10:ef:cc:25:e7:f3:fe:b1:69:33:d7:1a:fd:11:35:00:
47:cd:57:b0:03:ca:5e:c1:45:5f:00:4a:3e:60:9a:7d:19:d8:
da:97:a2:74:35:73:5e:51:6b:6a:2c:0f:42:85:68:4d:e2:e6:
f6:a2:4d:5b:c0:52:71:35:b0:2a:ae:86:49:d2:0b:3a:84:2a:
47:02:6e:6f:a2:62:97:db:c5:e9:c1:c0:fd:0d:00:f5:e2:cb:
2a:e2:72:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:09:34 2025 by rpki-client