Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: bzVNQA3RqeURrXJGk4ee980FW9L8wyL/ZgGhArDHNS8=
Subject key identifier: 0D:78:82:B5:06:6D:59:AF:DE:14:B3:50:DA:6C:63:53:40:72:81:BD
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 019676B0D0D4953CC32948B77311117B3FD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0CD2
Signing time: Sun 27 Apr 2025 10:00:21 +0000
Manifest this update: Sun 27 Apr 2025 10:00:21 +0000
Manifest next update: Mon 28 Apr 2025 10:00:21 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: MC5b1MuTIaXzhEyNi7tG4m2zY1erInrJx1CkAvTkMY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b0:d0:d4:95:3c:c3:29:48:b7:73:11:11:7b:3f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Apr 27 10:00:21 2025 GMT
Not After : Apr 28 10:00:21 2025 GMT
Subject: CN=0d7882b5066d59afde14b350da6c6353407281bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:f7:1a:df:03:1f:14:0e:a6:10:7f:99:ff:
57:31:b7:44:88:0f:22:8b:e2:a3:3d:4c:d9:ff:07:
fc:9a:8b:77:b6:2c:d9:d8:05:f7:49:e8:12:ce:d6:
89:15:38:87:f6:c3:5a:32:70:11:e7:b4:6d:00:e5:
77:0f:31:43:b2:eb:83:ba:67:61:a4:36:f3:78:f4:
f6:c0:f3:81:34:70:53:05:7a:69:f8:98:2c:57:6e:
f5:21:13:d0:81:3e:98:63:8f:2d:f6:92:56:6a:b7:
80:99:e2:20:b0:50:a3:d6:dd:46:bb:40:23:47:75:
12:38:51:1b:6f:43:a3:b1:3e:f6:4a:bf:d4:b9:27:
97:db:3b:b5:49:7b:f5:2f:63:c7:55:a8:d0:18:88:
60:95:d4:33:59:21:b6:0a:67:29:6c:c2:06:08:05:
a1:d0:17:be:c9:c2:1c:c2:f7:f3:97:ab:6b:19:49:
e0:a3:7c:4c:15:2a:29:46:21:23:fb:d6:f5:30:4e:
29:55:d2:8c:4c:1c:ca:b6:93:14:da:bd:c5:45:0c:
d8:23:55:cf:15:db:13:f9:be:2f:f4:b9:49:cc:d7:
c0:a0:75:88:e8:81:a5:d5:c1:c8:e0:28:47:17:65:
0b:a3:66:c3:b2:49:4b:cc:a8:9e:f9:9e:41:01:fe:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:78:82:B5:06:6D:59:AF:DE:14:B3:50:DA:6C:63:53:40:72:81:BD
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4f:37:61:37:b1:b7:5f:e9:e2:c3:99:bb:3e:0f:e1:6e:5b:
d2:04:95:38:f7:aa:62:d0:78:ce:9b:9a:df:53:79:12:c0:db:
51:da:13:ba:0f:58:f4:2c:50:72:6c:9c:cf:ce:83:ec:a1:75:
85:1c:cd:df:fa:40:89:50:d2:ab:12:5b:fd:70:98:c4:67:7e:
d6:44:cb:b1:99:df:9f:5e:1e:ad:50:64:4b:e2:8f:69:59:b2:
bd:84:24:ae:36:e3:90:bf:f8:17:17:a8:86:31:27:a0:c3:51:
71:e4:48:db:d1:44:85:b4:77:b3:99:31:9d:51:84:61:c2:93:
40:8d:44:0f:1c:23:fa:57:f9:61:6f:b7:76:ec:83:de:ed:9d:
45:00:f2:3a:1a:52:7c:3b:d6:db:78:6b:ff:6c:c9:da:3f:4f:
2a:01:4c:29:da:29:02:0c:4f:62:4c:ad:ad:4c:44:f9:8b:71:
61:e5:bb:cd:c4:14:e1:73:6c:54:82:77:94:ab:bc:1d:ab:0c:
02:69:63:13:d6:e7:cd:6d:b4:23:e2:ea:08:c2:dc:87:4c:57:
ed:8b:78:c0:0e:fe:cc:b0:c6:63:33:5b:64:04:3d:a7:a5:44:
2b:a2:56:0c:d7:d4:20:f5:79:e8:35:59:8a:d0:74:27:c5:a7:
36:57:cc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:35:34 2025 by rpki-client