Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
File: HqCp60fYJLUfFURCSBolcWg5RVE.mft (raw, json)
Hash identifier: y7HpoMfZWTWPk3jnFDGA3+I4Zjv9kdxC+POEAvv6EBU=
Subject key identifier: B9:2D:9E:5B:79:F8:47:C7:1E:80:92:F2:5B:08:84:29:DF:8C:D0:A9
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 0196797B1519231E6B48F607600F46DB6169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
Manifest number: 0BD0
Signing time: Sun 27 Apr 2025 23:00:31 +0000
Manifest this update: Sun 27 Apr 2025 23:00:31 +0000
Manifest next update: Mon 28 Apr 2025 23:00:31 +0000
Files and hashes: 1: 44WcjUyhdWbouJas9-vY_4pr1wA.roa (hash: Qx8y85cpYAiQ8a63DXW295iCOgGuHySiBFYnU925DiI=)
2: HqCp60fYJLUfFURCSBolcWg5RVE.crl (hash: 5dxLvfBbMVBmt9JyxgzfrFN231nrRySkIB7VyOcWl/4=)
3: fRE2vmwaleUiCvDWsnGTFljoLXg.roa (hash: cXGlfKUnhuEwN1qNGkHimtKeqEP4GZPiithL8Ca7L8g=)
4: ozy_SqJO31cdT9G4hyw50Q2EOCc.roa (hash: R3WNXYhsYfa7jL2TY7tebzPrDv7v+6108twGkeh1bj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:15:19:23:1e:6b:48:f6:07:60:0f:46:db:61:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Apr 27 23:00:31 2025 GMT
Not After : Apr 28 23:00:31 2025 GMT
Subject: CN=b92d9e5b79f847c71e8092f25b088429df8cd0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:5d:0c:a0:2c:2a:4c:e3:3c:b2:29:d4:f2:
9c:1e:43:dd:9f:7f:3c:78:5c:34:9c:13:16:06:fc:
34:30:17:cd:85:49:2c:bd:7e:45:48:0c:67:7e:55:
51:0b:94:3e:63:c3:81:3d:37:68:d1:6a:08:98:01:
bc:02:c9:40:9f:69:41:b3:53:36:21:2b:46:e8:66:
02:fa:31:52:56:fa:b9:bb:24:42:07:32:bf:78:63:
16:17:11:82:e0:cd:82:fb:d0:5c:7f:98:4f:34:3d:
44:ad:27:18:c9:d8:88:fc:a9:40:97:d5:04:09:17:
88:06:11:88:67:1a:c6:50:17:2f:0a:d4:59:77:6c:
59:fb:1e:a7:ee:d5:a5:75:a2:56:a4:1d:72:62:6f:
2a:f8:90:f7:85:ae:f3:1e:7a:c5:19:54:00:73:95:
d5:38:3e:37:07:aa:e6:3d:34:9e:1b:ef:2a:7b:fc:
e1:95:0d:df:0e:e3:9d:c1:64:7f:e3:12:60:e9:ce:
68:8d:b2:29:87:f0:cf:eb:a8:24:13:16:8c:2d:14:
47:da:05:84:c1:45:57:7b:66:79:a8:bf:3c:dd:52:
7d:e7:fc:7d:76:c8:b9:2b:16:e9:fe:3a:14:34:19:
56:bd:ff:21:0d:14:47:2f:f0:c8:07:da:0e:93:38:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:2D:9E:5B:79:F8:47:C7:1E:80:92:F2:5B:08:84:29:DF:8C:D0:A9
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:30:a4:02:77:4d:6f:e7:1e:ff:b0:bc:4d:9f:e5:8b:59:76:
4c:79:08:af:85:5b:29:98:6a:ce:d7:9a:27:da:62:b4:45:7e:
4b:ee:08:55:a3:2e:09:40:e3:3b:77:7f:71:de:3a:53:83:a9:
3e:da:cf:ec:6d:e1:64:a0:f1:55:95:fb:df:67:9e:a0:bd:cf:
70:34:59:6a:e1:ce:49:b7:72:45:99:16:ad:a6:5a:c4:06:d3:
05:2c:c4:4a:61:9b:3a:e3:12:2c:23:ae:23:57:ce:55:8c:a7:
ef:b5:00:89:87:33:68:fd:31:98:49:83:3e:df:9c:09:3d:84:
a5:91:e8:38:91:c7:c1:02:fc:a1:96:b9:3a:c0:c2:ce:06:a2:
d1:9a:a2:0c:fc:66:45:ce:78:4b:8d:85:f8:1d:50:bb:a6:4c:
04:61:ea:b7:9d:fe:21:81:3d:17:d9:97:b3:32:7c:3b:28:51:
f4:99:66:0b:76:05:9b:7a:fb:63:19:59:05:c2:49:aa:d5:b9:
8d:b6:88:f9:98:c4:7a:e9:4c:3c:4f:d2:bc:ba:a1:f8:07:7f:
b9:eb:e0:18:05:96:cc:ee:6d:44:f9:a4:a3:ac:ae:37:ed:c2:
77:7c:d5:d8:2a:43:4b:42:2d:cc:db:b9:e4:1c:00:bc:d7:bb:
8e:e4:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:53:36 2025 by rpki-client