Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
File: hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft (raw, json)
Hash identifier: ZH+aOPeyI3EHY5jpdsZ+x8rFLizRpqqNk5z1wNcl09A=
Subject key identifier: 8B:6C:A1:A2:E4:02:30:89:4F:B7:E8:32:15:23:9D:B5:83:55:40:19
Authority key identifier: 86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
Certificate issuer: /CN=86623a8458eff347d424348588829ee137b45a3f
Certificate serial: 01967BA068EEED36718B4F6E63BD7EBAC0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
Manifest number: 0665
Signing time: Mon 28 Apr 2025 09:00:32 +0000
Manifest this update: Mon 28 Apr 2025 09:00:32 +0000
Manifest next update: Tue 29 Apr 2025 09:00:32 +0000
Files and hashes: 1: HrSCIGhI5pLFciUXIMT4CnC-hSs.roa (hash: eWiCHygAovdf0PgGIUiCzBDgPi+OqepoXf9QONvD3xk=)
2: hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl (hash: t4zT6rOl6j4OPovWZnjQdIwV6dE6faLoyv3Rt7Ejq4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:68:ee:ed:36:71:8b:4f:6e:63:bd:7e:ba:c0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86623a8458eff347d424348588829ee137b45a3f
Validity
Not Before: Apr 28 09:00:32 2025 GMT
Not After : Apr 29 09:00:32 2025 GMT
Subject: CN=8b6ca1a2e40230894fb7e83215239db583554019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:00:b0:5d:b1:48:b1:84:e3:d9:bc:c8:84:
f2:4e:0f:54:9f:23:7e:35:dd:0f:32:42:27:ea:e5:
72:1c:06:dc:75:66:3c:43:21:50:20:91:bc:da:f2:
d1:86:6e:f7:21:cb:e2:e3:39:72:2b:73:f0:43:7c:
93:3b:81:2a:64:fa:2e:d7:50:d9:97:87:3e:4e:cf:
85:e9:f7:1a:b0:81:0c:ac:7a:2f:d6:34:0b:78:33:
98:fc:2a:1f:cb:57:ad:1e:8d:f4:d1:d9:36:e1:6e:
b7:86:67:e1:d4:2f:30:53:94:0a:ec:fc:de:d6:b9:
76:e5:b0:45:93:d8:75:97:71:fb:67:4a:77:ed:f1:
b5:5f:eb:02:48:8d:5c:36:26:86:9c:2c:94:da:77:
d1:ea:40:7f:18:e8:bb:5f:cc:30:44:e5:cb:6e:24:
82:5e:ee:54:fc:1e:d5:ee:bf:9c:3a:27:20:22:61:
99:82:09:7c:dd:81:3b:31:42:12:11:e4:e1:63:a9:
38:4c:b1:c4:38:b6:fe:e0:84:01:ec:8c:8d:a4:3e:
d2:01:94:d2:22:d9:ca:8e:99:14:19:17:09:98:4e:
d3:d6:42:fd:c4:79:22:fa:a9:f9:b9:dc:81:fb:ce:
4a:5e:bf:e0:6e:96:44:b8:d0:fd:0d:45:2d:c9:5a:
dc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:6C:A1:A2:E4:02:30:89:4F:B7:E8:32:15:23:9D:B5:83:55:40:19
X509v3 Authority Key Identifier:
keyid:86:62:3A:84:58:EF:F3:47:D4:24:34:85:88:82:9E:E1:37:B4:5A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hmI6hFjv80fUJDSFiIKe4Te0Wj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/39db4d-e93f-4139-aad8-6c28bb40d52e/1/hmI6hFjv80fUJDSFiIKe4Te0Wj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d8:b2:a7:05:0e:f1:33:77:cb:2a:5a:56:84:3d:a5:88:bf:
c5:80:f9:b3:19:3e:61:e1:91:53:6b:7c:67:83:cb:31:ab:ea:
17:27:be:72:60:62:f7:17:16:7c:a4:93:bb:c7:19:4c:95:44:
44:8b:c4:a0:3d:b8:8a:7e:60:63:5d:9e:5f:fc:13:b5:9f:a9:
1c:a2:26:1d:d2:35:98:44:60:79:03:b4:69:9a:f4:f7:93:9b:
ca:8c:82:aa:08:d0:d9:4f:0b:ca:67:c5:aa:d3:58:df:39:2e:
bf:02:0f:e4:d5:ce:ea:fb:9b:cf:23:26:59:66:4f:c3:32:ab:
53:2e:99:eb:c1:be:62:ce:6f:4e:10:06:91:2d:1d:4f:ec:d0:
26:86:ab:a7:f6:b1:db:de:1c:59:2f:65:83:65:25:4c:cd:46:
46:70:c2:3c:7c:20:90:fe:45:cb:31:07:bf:1b:96:be:22:b7:
8d:9f:54:12:76:0b:96:01:dd:f6:82:e2:61:7d:3b:0c:34:a3:
e7:cb:8a:60:48:f0:91:33:b2:90:97:29:ad:49:39:5c:af:43:
41:ff:87:ef:3a:6c:a9:11:bf:e7:7c:74:03:cd:25:8d:48:7d:
82:c8:be:92:73:a2:45:40:54:28:d6:e8:c9:7e:6f:b4:8f:a7:
d6:1e:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:51:19 2025 by rpki-client