Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json)
Hash identifier: UJRChg3CqQTv3Xx+lSYAua7BEcXMD9WoqBLJDCHZEQ4=
Subject key identifier: 00:3B:83:F0:7B:A9:1F:0B:BE:62:A1:8B:52:AC:3D:F3:96:B5:7F:69
Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Certificate serial: 019678D62480E089073BE603E28846DD7BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 20:00:22 +0000
Manifest this update: Sun 27 Apr 2025 20:00:22 +0000
Manifest next update: Mon 28 Apr 2025 20:00:22 +0000
Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=)
2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: f99I0NTSwWepWoQdmyyFDrsk4nJEzHMTU437a00yWZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:24:80:e0:89:07:3b:e6:03:e2:88:46:dd:7b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b
Validity
Not Before: Apr 27 20:00:22 2025 GMT
Not After : Apr 28 20:00:22 2025 GMT
Subject: CN=003b83f07ba91f0bbe62a18b52ac3df396b57f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0c:03:96:67:b3:1d:00:44:f4:30:99:49:5b:
d7:d1:3f:33:44:a3:97:4e:c0:f4:71:6f:82:91:38:
df:d0:32:a1:9e:b8:a9:b2:2f:a7:00:ff:d0:57:30:
2e:e6:ae:cb:0b:d7:e1:b1:0b:3b:85:5d:e9:ff:a6:
02:f0:9c:09:10:02:42:91:47:88:60:c2:22:5a:b3:
db:a7:44:c0:e3:69:d6:ea:24:14:8d:b8:3b:19:96:
1d:0b:5f:49:ad:53:40:40:a9:68:38:41:1c:81:46:
53:ce:6f:23:62:74:e8:8f:bc:09:d5:88:d1:34:5c:
42:e9:24:32:17:2b:90:3a:9e:66:c5:38:09:cd:d5:
73:21:63:b7:56:4b:a5:13:f9:0a:c3:40:06:c4:09:
29:f4:d7:4d:d3:96:c9:b0:e8:3c:62:a2:dd:5d:16:
93:64:73:26:eb:5c:04:c8:23:29:6e:79:1a:f6:03:
7b:cb:62:c2:25:f1:85:0a:83:1c:60:3c:d1:20:8d:
ff:13:23:29:07:1f:32:09:c9:ce:34:f9:69:7c:6e:
f8:1c:1c:ad:4e:83:80:09:f3:77:68:d7:e8:4e:49:
5d:92:f5:fe:75:fb:a1:ca:ef:dd:fd:ab:11:1b:37:
80:55:88:f4:16:11:91:db:21:98:2a:c8:30:80:77:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:83:F0:7B:A9:1F:0B:BE:62:A1:8B:52:AC:3D:F3:96:B5:7F:69
X509v3 Authority Key Identifier:
keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c6:46:81:c0:a3:8e:47:a9:09:1f:03:ca:f3:e0:07:71:84:
8a:26:bf:e5:94:97:8b:96:9d:b6:df:e6:c7:6c:d1:4e:22:c7:
96:56:c4:c8:cf:df:ea:6d:7a:77:a7:ff:2d:5b:3a:8f:0a:39:
74:3b:7a:b5:5a:f3:e5:6b:fe:28:b7:13:03:15:44:0d:df:e4:
da:15:b7:99:e1:23:81:29:43:e0:6c:ef:ce:31:fc:c5:ae:6d:
eb:02:a0:4b:70:f0:4f:92:43:76:d3:d0:90:77:87:cc:8c:e3:
2b:8c:5a:48:1c:9a:26:0c:aa:e7:18:00:0c:54:f6:3a:93:a7:
d0:88:56:a3:f3:0c:5f:82:23:d1:59:38:b2:92:b1:3c:73:81:
76:e9:86:2c:93:1d:03:fe:05:13:05:be:de:fb:06:dd:64:b9:
2a:b1:df:87:cb:f0:6d:2b:8a:83:9b:a4:18:be:05:6a:a6:7c:
b8:f2:86:ba:69:00:37:a2:fa:06:ea:27:5c:7c:35:6a:c7:60:
68:33:74:a5:96:3e:5f:e9:12:a0:68:4b:a8:af:18:87:d0:ad:
13:e0:6f:d0:9c:41:40:72:d0:e2:20:34:d5:83:80:d1:fa:84:
18:f7:1c:89:59:61:e8:7a:30:73:c5:c0:04:c0:05:df:ab:73:
6b:9d:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:44 2025 by rpki-client