Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File: RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier: 76fad2DgBwOc5Y65atrEJu79i0be16AvMiXXBan4sis=
Subject key identifier: 85:5D:42:57:7F:5D:2F:04:AE:8A:11:1B:D7:04:0B:99:53:0B:52:AC
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial: 01967E6A64ACAB6BBB2D3F7979BD231F55E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number: 08BF
Signing time: Mon 28 Apr 2025 22:00:23 +0000
Manifest this update: Mon 28 Apr 2025 22:00:23 +0000
Manifest next update: Tue 29 Apr 2025 22:00:23 +0000
Files and hashes: 1: 0RTmTUPTdqVwMU5i8iRqJZA86F0.roa (hash: eIjsDcha7FolfU5e8Eelou/OO0UBzir5atE5Gevb/B4=)
2: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: 8zjLZBMnuBWp7NODRzMGk8KefHse46Mq6c6bQt7pXQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:64:ac:ab:6b:bb:2d:3f:79:79:bd:23:1f:55:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
Validity
Not Before: Apr 28 22:00:23 2025 GMT
Not After : Apr 29 22:00:23 2025 GMT
Subject: CN=855d42577f5d2f04ae8a111bd7040b99530b52ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:75:b1:09:6a:26:2c:b1:66:bd:0d:db:19:
e2:1e:7b:ea:2c:6b:cf:a3:bd:b1:4d:cd:ee:67:a1:
38:81:ef:7d:c4:29:a5:2d:f2:1b:fe:1c:03:6a:1f:
24:ca:b1:2a:66:d0:f0:79:ab:05:62:40:f7:24:0b:
80:30:b0:4a:15:fa:f2:46:38:9e:49:fe:68:68:c0:
03:a1:33:4c:88:5e:da:84:c7:0e:3d:db:98:55:4b:
75:1b:91:77:61:41:30:fe:5c:93:da:3f:0b:26:6b:
de:2a:05:8b:51:9d:43:e2:95:00:1f:e1:39:a3:7c:
ba:75:f9:b1:84:db:6c:b4:79:ae:d5:18:86:ef:12:
ee:1e:4a:28:b7:97:b3:da:3d:1a:63:16:60:1d:40:
cb:4a:27:c5:25:95:9d:1c:6e:80:d8:e9:17:99:43:
60:e9:d5:81:ef:86:33:25:68:5f:bd:d9:41:c6:93:
bc:10:3e:c1:99:03:fe:9a:d1:22:f7:a8:13:89:89:
ed:ac:12:fb:50:03:89:94:f0:49:80:6f:fe:11:d8:
be:06:d7:6b:8b:77:0a:e1:6a:71:90:80:9e:47:bb:
2f:15:36:8a:d3:0d:ed:2e:7e:2a:7d:df:4e:9b:9f:
53:69:2f:80:ba:9d:56:9f:6e:88:2d:a8:04:e9:2c:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:42:57:7F:5D:2F:04:AE:8A:11:1B:D7:04:0B:99:53:0B:52:AC
X509v3 Authority Key Identifier:
keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7e:86:97:bc:87:66:33:5f:2f:e3:35:35:8f:9f:15:56:77:
e3:bc:77:0f:77:52:e7:ce:46:78:67:40:a8:c0:2d:e7:eb:57:
4b:1f:5e:85:bf:f8:ea:db:f6:22:78:0a:44:9c:ed:24:c0:1b:
8e:33:27:50:a0:88:29:43:a8:b4:c6:40:ea:b0:a4:fa:85:f7:
64:e8:2f:d4:95:c7:38:73:70:3b:86:c5:d1:12:54:41:02:48:
05:cf:00:94:94:9b:10:91:4c:ea:fa:b1:85:21:60:96:8c:ba:
aa:1f:da:07:01:e3:8c:e9:c7:e1:6f:a0:73:01:f8:0e:75:fd:
ef:38:31:18:1e:83:ab:39:4d:c1:a8:e5:ca:d9:13:49:b4:74:
dc:b1:a7:1c:54:af:37:c3:a0:cf:4e:a6:31:60:77:db:e3:5e:
b3:81:14:3e:01:c0:7f:74:9c:38:4b:e1:89:8e:85:65:87:ac:
b2:80:f5:55:03:e4:e9:a0:39:1f:04:ef:ee:01:62:49:5f:4f:
11:b3:ef:39:3a:15:5b:9f:32:b7:6a:58:c8:27:23:7d:37:f3:
ca:79:cb:c8:34:9a:c4:01:ef:69:96:22:30:9a:86:88:89:01:
0d:3b:2a:f3:01:cc:db:51:cb:83:c2:ff:c7:ca:5f:83:ec:cc:
18:9e:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:17:22 2025 by rpki-client