Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
File: hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft (raw, json)
Hash identifier: aG+m4VS4tXK8smhvJ2X5zVSAHgMHbFIVAREBg2b4Ks0=
Subject key identifier: CB:11:41:FF:18:34:0C:19:04:76:D1:7F:86:77:92:33:68:67:80:1A
Authority key identifier: 85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
Certificate issuer: /CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Certificate serial: 019676E7B60CCA0C9BDACDCC8624DB07B87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
Manifest number: 0C35
Signing time: Sun 27 Apr 2025 11:00:18 +0000
Manifest this update: Sun 27 Apr 2025 11:00:18 +0000
Manifest next update: Mon 28 Apr 2025 11:00:18 +0000
Files and hashes: 1: 574W7z-0GVSyQ6o383reYXA7QZc.roa (hash: 7oxCz8Z8dYajS9esPzPSpl386CuN+PzQh5YVWvXB59o=)
2: hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl (hash: xgne31rNPJzEv7Muco1n2Ad4xIo0kHrdNJM9sS33ZUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:b6:0c:ca:0c:9b:da:cd:cc:86:24:db:07:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85d05e017e333d17b3aeb8c5d4943be8dc67c084
Validity
Not Before: Apr 27 11:00:18 2025 GMT
Not After : Apr 28 11:00:18 2025 GMT
Subject: CN=cb1141ff18340c190476d17f867792336867801a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c7:3d:01:73:3c:38:a4:2c:30:c6:f3:46:8c:
82:74:c5:6c:67:81:1e:bd:ad:20:ac:7c:10:a7:3a:
27:0e:f8:d6:63:29:9d:bb:c4:32:3e:24:0d:35:27:
8c:37:aa:3f:5c:03:71:c3:cd:45:0d:bd:61:da:e6:
ee:b5:2f:45:71:ce:3f:80:8c:62:28:84:ec:99:c1:
d4:c3:04:c2:40:2a:30:2c:a2:4b:43:5e:97:91:2a:
82:57:63:83:c7:bb:cf:97:b2:70:f9:d3:2d:30:f0:
2d:f9:c5:e6:63:f0:4f:2b:1a:a7:7b:e8:9b:88:7b:
f0:f5:48:a9:a9:01:50:f9:a0:83:7f:17:dc:74:db:
5b:4b:7c:70:9a:13:89:5b:05:2a:a1:40:16:0b:a5:
e6:42:25:de:9f:4f:10:da:a9:82:d7:8d:a4:43:0c:
31:f5:3e:cc:85:c1:2b:57:8c:ce:73:1b:e4:03:f0:
9e:7b:78:ea:da:89:3d:39:6e:8b:2b:78:40:c2:db:
80:6d:80:9e:65:c4:e3:1b:bb:6e:21:81:98:1e:a7:
80:f9:27:49:0f:05:46:af:2e:83:8c:fa:c9:da:23:
c7:67:ca:8e:b8:35:2a:80:e9:10:45:b1:bb:b9:42:
fb:43:4e:0b:91:0a:03:d4:e0:65:f0:db:4a:84:3c:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:41:FF:18:34:0C:19:04:76:D1:7F:86:77:92:33:68:67:80:1A
X509v3 Authority Key Identifier:
keyid:85:D0:5E:01:7E:33:3D:17:B3:AE:B8:C5:D4:94:3B:E8:DC:67:C0:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdBeAX4zPRezrrjF1JQ76NxnwIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/095ac9-c3fa-465d-831d-47c950336e2f/1/hdBeAX4zPRezrrjF1JQ76NxnwIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:95:74:04:71:82:e8:ac:9f:c8:05:f8:da:a9:2b:02:2b:a9:
6f:fa:e4:e2:77:e7:0f:9e:39:61:64:ec:0d:ef:a2:14:c1:92:
b9:ad:25:40:15:46:86:95:97:0a:2e:2c:5f:20:3a:c9:d5:fb:
c6:ba:1c:6b:f4:40:43:82:70:29:7e:71:62:56:64:cf:4d:e5:
91:af:14:62:23:a7:fa:69:a5:99:4b:8a:5b:83:49:77:7c:dd:
18:e6:68:20:64:b9:2d:55:7f:70:fa:22:84:59:21:f5:bd:b9:
06:d1:f2:8e:89:4d:63:2e:9e:e8:78:8b:d9:0b:00:d4:2f:88:
8b:fd:11:6f:98:42:20:61:1a:b5:77:4a:99:b4:92:2e:b3:b7:
d2:db:ec:b8:17:3b:c8:78:ba:9d:44:7f:a2:fe:cd:f3:53:33:
61:80:b7:66:d9:f1:7e:62:81:64:a6:de:2c:d5:c8:3f:1b:70:
1c:89:8a:7a:52:08:49:31:6f:2c:df:80:b2:fc:5e:e9:51:e7:
7b:65:e5:a9:b6:5b:40:8b:46:42:b2:1b:eb:5e:e8:61:41:56:
12:4f:1f:c7:7e:3e:11:c0:60:22:46:cc:2e:1a:83:07:56:fb:
b5:db:7b:07:45:35:34:50:5b:6a:bc:b2:de:19:3e:0d:f9:8e:
be:4d:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:30 2025 by rpki-client