Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft (raw, json)
Hash identifier: hFMhg50ERLz7Pul6P288YB+cq0hDlxEqgZ3nMGOY7bY=
Subject key identifier: C2:AA:85:60:40:69:11:40:C6:ED:C3:68:9D:8A:F8:99:CD:4E:44:48
Authority key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Certificate issuer: /CN=854e8383e8208936802362a09f36085a50fcd85a
Certificate serial: 019684DAABA5018C065A0C0FB85E2634B995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
Manifest number: 14AC
Signing time: Wed 30 Apr 2025 04:00:45 +0000
Manifest this update: Wed 30 Apr 2025 04:00:45 +0000
Manifest next update: Thu 01 May 2025 04:00:45 +0000
Files and hashes: 1: TpP1ghqsvudxwpVNjEnVhO4RWww.roa (hash: 4+AlZPeiYc4qPwqWqByXnBYBTrZOMTJuwqjVuo2TCds=)
2: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl (hash: dvvU7Wm4dx3WwWah1IpS+QAIFYejmPStmmfoocNP3ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:da:ab:a5:01:8c:06:5a:0c:0f:b8:5e:26:34:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854e8383e8208936802362a09f36085a50fcd85a
Validity
Not Before: Apr 30 04:00:45 2025 GMT
Not After : May 1 04:00:45 2025 GMT
Subject: CN=c2aa856040691140c6edc3689d8af899cd4e4448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fe:80:aa:d7:9b:cd:c4:d1:19:76:bc:a6:95:
7d:7b:c3:81:39:7b:ad:5c:24:c7:af:fb:7d:ce:98:
f7:6a:4d:a2:6e:4a:65:00:03:2f:b6:a8:b7:e9:e6:
2e:59:23:53:f4:81:aa:7a:98:4b:ca:54:46:55:d8:
17:b7:50:5e:6c:42:5b:e6:fe:65:83:11:a4:ac:ac:
79:64:de:ef:02:50:b6:9f:cf:81:d5:83:9c:fc:7c:
80:13:28:10:08:1e:98:24:c6:ab:d6:0e:5c:9b:a3:
15:94:38:62:85:0e:7c:da:0f:ba:71:07:c2:ac:31:
26:74:6c:f7:07:a3:5e:ea:93:c7:cb:53:c7:45:21:
ba:77:56:d4:2f:67:7d:35:b8:58:76:5b:7b:10:54:
64:f2:91:ef:29:ed:d6:76:b6:02:24:fd:03:91:ea:
d2:af:a3:09:25:37:09:45:c2:88:ad:a0:01:a9:4c:
97:59:4f:dc:69:f3:3c:12:81:b5:47:c0:96:2f:9e:
65:bb:98:f5:a0:9d:dc:b4:e8:a7:2b:86:9a:b0:66:
16:ce:4f:4d:72:29:a3:bb:2d:61:46:6d:d4:a5:2a:
b0:0b:fb:71:ea:c6:99:19:ec:55:5b:0f:f4:75:4c:
5d:b4:77:eb:6a:78:b4:75:64:4e:ed:c7:fb:00:f1:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AA:85:60:40:69:11:40:C6:ED:C3:68:9D:8A:F8:99:CD:4E:44:48
X509v3 Authority Key Identifier:
keyid:85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:48:d3:58:17:44:71:30:2f:da:e8:53:cb:09:a6:66:2b:eb:
88:05:d9:5a:95:39:cf:57:2f:88:04:c1:ab:a3:ed:ab:05:d2:
7b:61:b1:9c:90:3a:98:11:21:d1:74:b3:75:a5:fe:f2:58:de:
be:5b:bb:a9:c1:68:b7:9a:df:fa:fe:29:85:9b:d4:22:e1:1c:
d6:b6:b0:3a:ba:be:5a:b5:c5:c6:b5:89:b4:f7:9a:b2:ab:c4:
89:4c:44:7f:ac:bd:cd:4e:df:7f:6e:68:aa:57:e6:11:fb:5d:
23:9b:b7:10:53:cc:7d:c7:60:06:0f:ff:b4:0e:cc:09:ce:c2:
34:e0:f4:86:dd:43:b9:12:cc:84:25:07:80:b0:b6:ed:13:4f:
a6:a8:44:03:84:a7:2d:23:a5:8e:f8:69:fb:43:59:d7:9f:1c:
27:a0:4b:d5:16:96:1a:b0:6b:71:cb:8d:84:cd:92:42:f8:7c:
7f:41:f2:87:63:03:a4:91:f7:5b:13:1d:dc:8b:24:89:f5:69:
b1:0a:44:c7:bf:34:95:f0:bb:da:ba:f7:00:bb:2e:e2:28:b6:
c0:28:94:ba:49:ec:97:75:bd:1e:55:d7:5f:b1:a4:0e:09:39:
e7:8a:cd:95:c8:91:fd:ca:0f:a4:a7:63:6e:7b:d0:f3:dd:70:
89:9f:da:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:24:23 2025 by rpki-client