Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: UEkBg7WEPku7iFz7WmP4mIDvD9uu3/afRKv7UowEyJQ=
Subject key identifier: 90:F4:94:40:21:F4:70:2C:4A:8D:C8:4F:B5:CE:83:A2:F8:0B:B8:50
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019674C2A2F72E860EF583E5348261700BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 01:00:34 +0000
Manifest this update: Sun 27 Apr 2025 01:00:34 +0000
Manifest next update: Mon 28 Apr 2025 01:00:34 +0000
Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: W5zTcMsMe3TF41jYkRL+U9mN7GmygmKKSHW9QfS3X+8=)
2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:a2:f7:2e:86:0e:f5:83:e5:34:82:61:70:0b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Apr 27 01:00:34 2025 GMT
Not After : Apr 28 01:00:34 2025 GMT
Subject: CN=90f4944021f4702c4a8dc84fb5ce83a2f80bb850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:f9:b7:75:1e:35:b8:1a:d5:51:21:99:66:
12:23:20:73:cc:49:f3:3d:dd:fa:4b:84:f2:d8:31:
77:cb:40:cc:68:bb:5f:32:95:4d:da:88:21:10:94:
a1:f5:8f:75:f4:14:33:58:24:e4:65:ff:c8:1b:2e:
84:d5:68:fd:e7:a0:7b:bf:33:21:9a:9e:39:7c:3f:
4b:82:8e:78:6a:06:c0:7e:e7:72:ce:c5:f5:2c:74:
47:d9:ef:38:3d:74:c1:d8:34:c5:e2:0a:ee:31:c8:
8c:ce:5f:01:3c:83:43:8e:dd:bd:8d:80:dc:6a:c5:
50:c1:23:2c:64:e7:a5:27:6b:5a:6b:fe:b0:f0:44:
6e:ca:8b:fc:3a:6a:d7:94:d6:3b:b2:d6:4f:c5:d0:
2a:f6:ad:91:7f:71:fb:7e:b3:fe:40:48:58:1a:5a:
f5:c8:fb:cc:df:48:89:2a:86:21:44:31:44:3d:6e:
67:c5:dd:be:84:e3:5d:89:67:84:0f:65:a8:99:50:
62:98:f0:2c:0b:31:77:4c:73:10:d2:e4:df:6e:29:
44:cd:64:68:f7:0a:e0:d2:dc:4f:21:59:f9:ef:07:
19:de:6c:e2:aa:2f:f6:a0:aa:a0:9f:4d:79:f2:73:
40:ea:3f:9d:6a:f5:9d:f7:5d:eb:22:1e:21:a7:93:
9d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F4:94:40:21:F4:70:2C:4A:8D:C8:4F:B5:CE:83:A2:F8:0B:B8:50
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:89:95:6a:76:05:29:9a:d1:fc:1e:bc:4e:8f:7c:d0:9b:
9b:30:22:3c:51:ee:84:66:21:a5:1e:8f:95:51:2f:c5:f7:1b:
58:80:97:23:a1:76:56:cf:21:e2:e6:3d:ff:0e:2f:c4:a5:3b:
e1:b9:72:60:2a:e1:b0:a5:a5:8a:db:2d:86:05:6f:aa:48:cb:
e2:b6:d5:da:56:f1:3f:06:1f:ea:d4:2a:98:46:38:54:82:ef:
09:9c:0a:a8:c4:c9:cd:34:86:f7:cc:be:59:dc:74:62:e7:18:
1d:12:ea:b5:66:f5:6f:dc:0b:68:3b:cd:22:0f:ec:c7:e6:f0:
87:2c:c8:70:8c:bc:a1:eb:ef:d5:93:36:25:60:21:8c:00:a4:
16:a9:33:3d:a5:36:bc:3f:80:13:0e:7d:12:a7:48:24:21:23:
a5:60:c7:a2:9b:52:1a:e6:04:75:79:0c:0f:58:11:f3:d9:3d:
5a:8d:22:a9:e1:01:c9:2e:f7:fb:8a:88:3e:f2:b2:6a:63:e4:
f3:15:9b:9c:76:95:b1:22:0a:34:d1:fa:f0:83:d5:3e:6e:7e:
59:f6:7f:99:eb:29:a6:d7:79:93:c5:c9:61:84:fc:68:1c:fa:
48:62:fb:51:0e:56:cf:f8:83:1d:f7:f2:87:e2:2b:ab:df:41:
19:a0:1c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:50:38 2025 by rpki-client