Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: /QBnOThKCsZ3YbammYCts2ECf0UCvvpYsZQTF7Pr+y0=
Subject key identifier: F0:BA:70:7F:C9:D3:EF:2F:7D:64:30:73:B5:0D:BF:D7:60:C7:CB:58
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 019674F987585525AB60F6E3650B22886793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0907
Signing time: Sun 27 Apr 2025 02:00:32 +0000
Manifest this update: Sun 27 Apr 2025 02:00:32 +0000
Manifest next update: Mon 28 Apr 2025 02:00:32 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: 6JF6L47DMOUJ4czB8ZJ9H9017sHOfbppbz1usovMZHE=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:87:58:55:25:ab:60:f6:e3:65:0b:22:88:67:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: Apr 27 02:00:32 2025 GMT
Not After : Apr 28 02:00:32 2025 GMT
Subject: CN=f0ba707fc9d3ef2f7d643073b50dbfd760c7cb58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:8e:3c:8c:dd:18:5a:09:02:97:0e:17:90:
e5:e6:ec:c5:ef:22:7d:10:2a:0b:19:75:63:2e:61:
62:6f:00:0d:94:98:b5:15:cf:de:ac:35:40:e7:f2:
58:0e:db:84:c6:19:58:0e:73:31:ae:e6:b9:55:b6:
0f:99:8d:b8:a3:df:14:ef:7e:c9:79:67:27:31:91:
9f:18:fd:91:5b:cd:16:ec:1d:a6:c2:d1:a9:42:46:
62:40:9c:4b:08:0e:8b:57:1b:31:b8:5c:9f:b5:7d:
b2:9f:2e:af:78:eb:18:04:48:ed:49:c1:6a:43:cb:
30:20:55:39:3e:c6:f0:d2:d5:71:3b:fd:c5:5a:5b:
4d:39:c9:62:62:9f:b8:83:fd:d5:06:3c:dd:c8:b9:
f4:09:33:20:ba:38:26:07:28:14:8f:e3:85:7c:cc:
0b:65:21:11:f1:0c:e4:89:c2:0f:32:d1:c2:59:20:
2f:42:73:84:08:53:b9:61:bc:5e:7b:5e:48:47:ce:
3c:68:db:9e:52:4a:2e:78:ff:b1:03:a7:c2:74:18:
41:80:70:cf:25:c4:61:86:27:bf:ff:61:29:d9:b5:
46:ba:e2:3a:ab:af:39:a9:18:90:e2:94:78:95:28:
aa:da:32:77:f6:13:d0:0e:b4:c8:35:24:3e:8c:7d:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:70:7F:C9:D3:EF:2F:7D:64:30:73:B5:0D:BF:D7:60:C7:CB:58
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a2:79:6d:5f:a6:ed:12:a0:5a:0c:eb:69:62:36:3e:62:5d:
6d:22:5f:b2:fa:be:4b:54:06:b3:cd:91:32:55:61:6e:52:40:
f4:12:36:ac:63:55:93:70:a6:f6:3d:cd:9c:0b:4b:7b:42:47:
00:10:34:e8:2a:f1:0b:6e:d6:e5:a0:37:ac:22:e8:5c:d4:01:
4d:67:4b:4e:dc:31:f2:65:c6:b2:86:25:8b:f1:12:bf:75:8d:
bd:95:cb:c3:87:cc:14:66:60:ba:19:4e:ea:f9:fc:06:33:25:
76:a1:d6:d1:e4:01:fe:d3:fb:38:90:4a:fc:50:16:89:45:94:
b7:26:ec:e6:64:5e:61:5c:9d:4b:21:19:62:db:34:c9:eb:21:
17:a4:ec:d4:ba:03:86:82:b6:19:0a:b9:98:0f:bb:bb:6e:30:
46:c5:de:bb:62:4e:e0:63:f2:c7:c8:ca:fd:9d:6e:6d:1c:1d:
ef:4f:06:b3:96:2b:18:c6:68:ed:21:03:1f:a1:28:b2:da:59:
83:cc:54:b9:e7:de:65:f3:e8:29:cb:7d:6e:7d:d9:fb:75:f8:
f1:72:cd:b0:c0:02:9c:69:d3:2f:26:d2:6b:9c:63:2d:8a:e2:
d1:31:9f:64:1a:cd:d4:2f:2a:5f:94:94:ee:33:c5:20:c1:3c:
00:f9:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:36:10 2025 by rpki-client