Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json)
Hash identifier: CqSWLcpSIZ3/H334QMGTkVdATTGm/r+oHwbSyQimDjA=
Subject key identifier: 9B:CC:EA:71:6E:69:D6:55:4B:4B:35:50:CD:7B:8E:5E:57:36:A9:B4
Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Certificate serial: 0196805909A7CD10913AF0D6768BC3EA58B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
Manifest number: 1515
Signing time: Tue 29 Apr 2025 07:00:40 +0000
Manifest this update: Tue 29 Apr 2025 07:00:40 +0000
Manifest next update: Wed 30 Apr 2025 07:00:40 +0000
Files and hashes: 1: VqHyyiIf_MNHRUQN5mAvsdQ_W6I.roa (hash: MDdqX3nQAwimP61KTWNfGEm7PlFzODAKVqf8oTIIVz0=)
2: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: rMN//JZdJ1zx957mvk+HnpFclvUrGZMbXKwVr/PfCXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:09:a7:cd:10:91:3a:f0:d6:76:8b:c3:ea:58:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c
Validity
Not Before: Apr 29 07:00:40 2025 GMT
Not After : Apr 30 07:00:40 2025 GMT
Subject: CN=9bccea716e69d6554b4b3550cd7b8e5e5736a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:8d:b5:4a:10:72:05:74:e0:9f:d2:52:03:
73:b6:b7:ab:ee:b8:5e:55:8d:f3:eb:4b:26:67:97:
6d:2d:98:eb:8b:c5:ce:78:72:f7:59:23:dc:47:c6:
4a:e8:2c:55:dc:77:83:be:1b:ac:04:69:0d:5b:19:
54:8c:41:2f:20:ef:d8:ed:3e:cb:8b:4a:27:78:64:
f8:b9:31:6a:30:ee:6c:d0:fc:3a:44:0a:f2:8f:bc:
3d:0d:5f:4f:8e:fd:c8:ea:23:c3:41:a8:5a:90:c6:
84:a8:2f:48:15:cd:9e:34:88:a5:a5:bf:17:4b:60:
b2:52:fe:a7:49:a5:03:a7:f9:17:aa:19:1e:45:39:
88:0f:5b:9b:91:69:a8:d3:1b:fb:23:1b:8f:46:4c:
c7:03:02:24:03:47:a5:6e:5b:08:12:30:f8:d8:02:
4a:f3:05:73:ad:b1:dc:bf:4c:10:52:6c:ea:fb:e9:
7c:52:09:aa:f8:05:42:ec:36:c2:ce:6b:53:0a:13:
4f:a7:b7:be:9d:9f:1b:da:b6:dd:69:ab:3e:6e:1a:
bb:a4:89:f7:10:d2:48:48:8e:ba:97:da:a3:db:22:
2a:ba:67:69:de:a4:e7:e7:f3:c6:5f:ab:bf:b7:fb:
61:de:fa:01:24:bf:a2:17:f5:93:92:f1:a9:b7:b5:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CC:EA:71:6E:69:D6:55:4B:4B:35:50:CD:7B:8E:5E:57:36:A9:B4
X509v3 Authority Key Identifier:
keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e6:2e:66:92:34:f5:f2:fe:e3:ef:6e:8b:c2:24:36:ae:38:
66:aa:24:d0:c4:56:5c:87:fb:f3:5b:02:a6:f2:a2:8f:88:2b:
ef:87:ca:e1:da:1a:66:8a:f1:fc:b2:2f:9d:2f:87:c3:7d:a2:
19:69:c0:7a:4a:47:8f:bb:b3:05:b4:ca:c9:21:e8:42:64:7c:
c9:bd:b5:2f:48:88:dd:5e:52:f7:94:50:b3:e2:10:e2:c2:15:
05:cd:1d:50:bc:18:da:f3:37:e9:ef:48:58:41:d1:da:7c:48:
e9:c3:21:77:fb:04:76:4f:42:58:4d:0d:d3:f0:5a:c1:96:e5:
ab:42:0b:f1:95:08:a0:2d:1a:5d:1d:65:ce:93:cf:94:7f:38:
5a:5b:8b:59:c8:58:5c:a3:ac:af:bf:92:2b:83:ca:4b:c2:e1:
22:75:59:e0:57:12:49:38:0d:d2:37:bd:0f:2f:dd:55:61:bc:
35:dd:62:bc:40:ec:51:a1:4a:b8:a8:38:d1:de:7b:fa:6c:8d:
98:af:35:bd:be:08:fc:55:d0:6d:ea:12:ea:f3:9d:f6:52:47:
a4:22:8c:57:e5:4c:97:b0:51:cc:1b:b0:c5:c1:3e:48:4d:7c:
43:f7:29:c5:30:e2:1b:bc:d7:22:16:1d:77:ce:dc:4a:22:46:
95:2d:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:38:39 2025 by rpki-client