Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: DsEF2RnnON90fQeAsy/b3G4sX5Ol8Z9tGc8ztjqpxi4=
Subject key identifier: 08:D2:44:9E:15:41:DC:D1:69:BE:CC:F1:FB:41:0C:79:23:45:CD:10
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019682108D2AA330EE27C613A049E18BF02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 021B
Signing time: Tue 29 Apr 2025 15:00:44 +0000
Manifest this update: Tue 29 Apr 2025 15:00:44 +0000
Manifest next update: Wed 30 Apr 2025 15:00:44 +0000
Files and hashes: 1: am3Sy264Yl-JO5WdEXeWKKEs9ps.roa (hash: 9k8mynHVOZTwg4WDO/sfA0hKUXErmcKqWcYze5ZqrNU=)
2: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: TQH9I0bPs3odXfTta0OQVer23/194K8cKPUMyQOrrrE=)
3: sXyVeEgdrOK8h5ebOKwuNo_SSAg.roa (hash: ESBdMDmOcBiwaOXHXdAgFsuBwburzoKdU0lwdUGfYAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:8d:2a:a3:30:ee:27:c6:13:a0:49:e1:8b:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Apr 29 15:00:44 2025 GMT
Not After : Apr 30 15:00:44 2025 GMT
Subject: CN=08d2449e1541dcd169beccf1fb410c792345cd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:2c:32:7e:85:99:7e:7a:bb:a3:80:41:3b:
ec:de:50:e3:d0:c4:91:4b:38:af:65:8f:b0:4f:e7:
93:f6:12:59:9d:cf:7e:24:cb:9c:37:47:29:4e:12:
a1:22:d4:8e:72:46:b1:4f:cc:45:6d:b3:ee:a5:ab:
69:99:65:c0:12:28:fa:0a:e8:fc:01:53:5f:e5:d4:
5a:11:86:4a:f0:4a:07:c9:cc:44:04:26:ff:10:e4:
a8:65:e6:26:0d:7a:08:00:86:22:dc:94:fd:69:bf:
f9:9d:dd:2a:af:f2:cd:6d:26:8f:72:5b:c8:de:2d:
be:81:32:c8:8f:b9:6e:ce:ee:25:e1:69:d7:08:e1:
c4:ff:16:8d:80:c1:43:2f:6a:bf:c4:99:a5:44:66:
a9:b0:0a:df:23:fe:c6:f8:24:0b:f9:5e:af:a6:a9:
68:1a:f9:5f:8d:d0:95:aa:fe:b4:0e:89:bf:24:ed:
cb:6c:b0:d2:70:c9:e9:7a:53:5c:d7:f5:4b:9f:6c:
03:bb:87:6b:9a:55:a4:86:bb:09:28:67:c5:11:c4:
e8:07:ca:81:a8:21:8b:fb:aa:85:d2:9a:06:66:42:
32:42:97:72:b7:75:19:f6:3d:70:bc:4c:b6:2f:1e:
d0:f1:02:24:d1:fb:fd:e3:f9:55:58:0d:49:10:ed:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:44:9E:15:41:DC:D1:69:BE:CC:F1:FB:41:0C:79:23:45:CD:10
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:39:03:86:29:72:f8:32:f1:2f:22:00:f1:b5:9e:1c:25:02:
01:db:bf:17:30:96:59:24:37:98:95:c1:a8:5a:74:21:34:10:
3f:65:0c:c4:ca:c0:24:46:f6:ed:a9:a4:db:70:70:9b:42:a7:
c6:3e:73:8c:03:e2:34:11:38:9e:9a:be:b7:7d:78:98:07:80:
a2:e0:45:ee:05:73:ee:2e:2f:69:56:57:38:0c:46:63:f5:eb:
4e:17:00:15:c1:57:28:80:eb:d4:fa:0a:28:0d:7d:9b:92:4e:
af:58:e3:cb:b2:0c:1a:34:6a:be:c7:da:87:40:8a:a9:02:f7:
73:4b:41:8a:ba:b6:76:8b:08:08:26:07:94:99:9b:7d:fd:f6:
07:9a:75:53:6b:c3:fb:3e:2a:5d:9f:47:2b:57:03:b9:c0:f0:
71:51:68:d6:d5:74:d2:f9:10:8f:b0:a4:cf:33:6b:ad:64:69:
b1:17:ea:46:9b:e2:00:7f:ab:48:99:20:2b:61:53:b5:f9:d6:
5c:f4:68:60:7d:73:06:36:ea:99:42:89:b8:3a:6e:76:ee:06:
32:b1:e4:a5:16:65:d2:eb:1a:c4:76:7b:6b:a4:67:48:ff:d4:
f3:fc:c9:15:9e:b9:bb:6a:44:0c:89:5b:9e:b0:42:15:62:e4:
b6:39:cf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:39:53 2025 by rpki-client