Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
File: hZjLxOjf8YUkBKmSddIwpWERBV8.mft (raw, json)
Hash identifier: ogGmuKACE1cAjJXblt76c0es+KkbT2K8RRzUp9LADmM=
Subject key identifier: FD:DE:A6:0A:AD:09:5F:F4:48:B3:9A:7A:AF:76:1C:28:C4:89:E2:07
Authority key identifier: 85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
Certificate issuer: /CN=8598cbc4e8dff1852404a99275d230a56111055f
Certificate serial: 01967ED87F3816AAFEAE56A303E648B34931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
Manifest number: 0562
Signing time: Tue 29 Apr 2025 00:00:39 +0000
Manifest this update: Tue 29 Apr 2025 00:00:39 +0000
Manifest next update: Wed 30 Apr 2025 00:00:39 +0000
Files and hashes: 1: XOOVHbvdi1PyG7OFqAlrThvaXr0.roa (hash: FXkyjiQc3j4OAi/BA8pdWLXnVuKz/SxHMWNuTxG6YRs=)
2: hZjLxOjf8YUkBKmSddIwpWERBV8.crl (hash: 4YOKjWjlTmn/KlwKAy66P0wE8b1dLc9Fc3UujcLm0b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:7f:38:16:aa:fe:ae:56:a3:03:e6:48:b3:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8598cbc4e8dff1852404a99275d230a56111055f
Validity
Not Before: Apr 29 00:00:39 2025 GMT
Not After : Apr 30 00:00:39 2025 GMT
Subject: CN=fddea60aad095ff448b39a7aaf761c28c489e207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:34:d6:2f:48:26:b1:f9:97:45:fb:d4:08:
73:ab:cc:5d:c8:6d:da:b7:5b:34:04:2f:96:52:73:
6d:0d:5b:9a:34:c7:73:16:b1:37:1a:56:3d:12:1c:
2b:7c:2a:fc:1d:a0:86:b1:2e:9b:7d:b1:c7:0d:8c:
61:d8:85:c4:f2:bc:df:9b:44:bd:5a:04:54:a4:0d:
c0:44:e4:17:65:ba:7c:88:d1:5d:80:7c:18:e7:b5:
84:62:6b:6d:9b:a6:33:16:70:94:e4:59:43:1d:79:
e4:33:b0:01:4b:29:04:93:c7:88:8d:ee:8d:c1:28:
7d:18:37:54:45:8b:34:64:ff:19:5e:d7:b7:50:fe:
2e:5d:06:da:79:f1:e8:89:3d:16:63:f5:f2:95:6d:
e4:06:81:a7:fe:13:3f:50:95:77:59:68:cf:f8:8e:
42:bf:8c:4a:67:e4:74:ae:89:37:6c:9a:8f:3f:94:
a8:c6:23:b4:93:13:66:a4:1a:f5:6a:ba:63:3d:0b:
11:0d:a3:ed:aa:50:85:d0:fe:30:9f:86:7e:7f:ea:
70:84:b7:17:69:1c:53:f1:18:81:4e:82:8d:ed:6a:
fe:c2:58:3b:95:ed:9f:80:af:97:28:8e:32:90:e5:
4f:54:32:75:6e:93:e7:73:bb:43:4c:43:ac:84:62:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:A6:0A:AD:09:5F:F4:48:B3:9A:7A:AF:76:1C:28:C4:89:E2:07
X509v3 Authority Key Identifier:
keyid:85:98:CB:C4:E8:DF:F1:85:24:04:A9:92:75:D2:30:A5:61:11:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZjLxOjf8YUkBKmSddIwpWERBV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/049ab2-9226-4b40-ab8a-51e4a5eafc8e/1/hZjLxOjf8YUkBKmSddIwpWERBV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:7e:b5:65:9e:8b:f4:c7:71:55:f4:9a:5d:8f:90:e4:40:
c6:f4:c2:75:fa:bc:1d:df:d2:c1:f1:29:fe:87:ed:b5:a3:7c:
88:26:3d:47:40:87:eb:cf:bb:a2:06:82:f2:75:09:90:5e:ad:
9c:ad:6a:40:97:08:96:7c:dc:a7:56:2a:2d:a0:8e:0a:ed:dd:
b3:16:b6:21:84:f9:63:79:bb:81:87:bf:2f:7d:72:57:c0:16:
0d:8d:1f:80:46:bf:51:7b:ad:4c:ad:dc:54:d1:59:7a:d6:21:
5a:c8:fa:ed:ba:85:e7:59:e4:11:64:bb:11:ce:4f:d0:7b:76:
c8:11:8d:08:6c:41:24:35:1f:1a:75:30:fe:5d:02:48:f4:47:
43:61:68:13:24:7e:79:42:a1:fe:f9:e9:05:09:dc:97:c2:4a:
54:a2:15:e9:ed:35:27:92:44:07:1e:1d:d6:bc:a0:3f:ef:eb:
d0:2b:46:77:d8:8a:4c:c2:2c:45:29:2c:7e:25:68:26:0b:3e:
38:5e:c2:85:b3:53:b3:1d:3a:7f:eb:31:7d:c8:a3:2a:dd:51:
68:58:a1:d9:34:36:25:4b:cb:00:3b:b8:76:e8:d0:c5:d0:d0:
fe:ce:d7:c2:f4:e4:f8:2c:1f:be:df:1b:4c:02:b8:1e:59:12:
64:dd:e8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:36:08 2025 by rpki-client