Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: d8eaVTl9S4qOOkYY4f2z4JqR4k0JGvQS6i9XDIWNyVM=
Subject key identifier: 11:DC:CE:0F:87:47:10:11:5B:50:3F:2B:13:4C:38:51:16:9D:08:04
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0196767A49F55DFDBA46C002C19FCB1DA846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0B18
Signing time: Sun 27 Apr 2025 09:00:47 +0000
Manifest this update: Sun 27 Apr 2025 09:00:47 +0000
Manifest next update: Mon 28 Apr 2025 09:00:47 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: fZh6eq4h8GFkJ1TCI1uvu4SDY0K+tJRPzu5DctCeoVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:49:f5:5d:fd:ba:46:c0:02:c1:9f:cb:1d:a8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: Apr 27 09:00:47 2025 GMT
Not After : Apr 28 09:00:47 2025 GMT
Subject: CN=11dcce0f874710115b503f2b134c3851169d0804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:dd:17:c5:e1:7b:9c:5b:94:43:2d:bb:b1:
f6:84:ec:d8:7b:01:91:dc:40:cf:52:f0:34:e5:2c:
9e:d5:e7:cd:68:04:ff:ba:ca:d4:ef:4b:1d:6c:33:
9b:35:bb:c3:c6:7d:72:e6:55:ca:a7:a6:08:b6:99:
98:d1:97:3f:22:5e:73:d4:c9:44:e2:63:c8:e8:56:
15:47:40:0b:73:25:39:3c:bd:91:09:49:1c:42:92:
f9:d4:6f:83:74:e0:63:14:bd:0d:af:f2:90:21:27:
23:05:65:59:0e:fa:04:d5:55:0a:cc:45:92:0e:55:
2b:cf:25:b9:27:70:d7:7a:cb:4b:11:80:f3:f2:15:
5c:55:1c:81:6b:46:9a:20:2f:64:5c:34:9f:65:7c:
cc:98:6d:cc:ea:01:37:13:5d:e7:bb:a8:ab:96:0a:
ff:d1:14:2a:6d:b3:9a:d8:31:ef:a0:38:03:48:b1:
ea:99:fc:3f:d4:37:d7:e3:1a:e5:89:ff:6d:0c:d9:
ac:35:33:8c:5a:e5:0b:00:7b:5d:0f:ff:cf:79:4d:
8a:f9:93:4f:55:85:99:08:a4:bf:11:1c:e9:00:1f:
5d:f4:1f:68:d3:64:7c:b5:c1:52:cb:4e:ab:37:4d:
26:39:51:81:09:34:c7:68:0b:7c:f4:68:71:04:46:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DC:CE:0F:87:47:10:11:5B:50:3F:2B:13:4C:38:51:16:9D:08:04
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fb:7b:f9:1b:bd:1b:f3:b0:74:21:58:36:27:9f:75:a4:29:
71:4a:2f:ac:d5:4f:0a:a3:12:9e:5f:81:51:be:fb:d2:c1:5f:
08:2e:dc:97:d7:5f:c9:4e:5d:30:4a:a7:ac:28:ff:00:d2:2f:
0c:5f:42:e8:45:0d:27:2b:49:6a:6a:e2:9d:65:b8:2b:40:02:
a3:01:c0:f1:05:ea:aa:68:4b:26:15:24:3f:1f:f5:71:e2:bc:
c2:d2:d0:cc:7b:d4:72:c3:fe:6f:7c:c8:86:ff:d9:d5:60:3d:
93:1c:9d:90:0d:6b:cf:43:44:a1:5b:0c:d5:aa:a2:45:ca:27:
d6:52:db:e8:44:df:94:8a:08:2d:22:8a:94:c7:70:d6:ab:f9:
16:71:ee:16:4a:4c:7f:d6:bc:6e:e4:d6:e7:e6:a1:3c:4a:c9:
3b:92:64:5c:38:f7:10:e3:77:f0:de:09:54:e5:b3:3e:ab:a0:
59:1b:c3:c3:c6:02:ef:95:08:1f:bb:8d:db:43:32:1a:19:0c:
53:06:8c:a6:29:75:32:4d:0e:a5:a7:1a:91:7c:12:13:44:17:
84:33:54:86:89:ff:b9:bf:16:a6:e3:a2:71:29:c9:45:1e:2e:
6b:d6:62:13:4e:f0:98:05:7b:b4:51:70:7a:27:be:80:0c:c2:
b5:1b:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:16:28 2025 by rpki-client