Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: 8e+85vPFXoG3aGBVZzrcyNnuKriI3/LR/h+zm6pnYGg=
Subject key identifier: 93:D4:A9:21:E5:4B:37:20:46:E4:D9:7B:4F:9C:C9:DB:D2:93:D9:C7
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 01967A56957067D96749BEA63BDD9BDA60BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0A48
Signing time: Mon 28 Apr 2025 03:00:16 +0000
Manifest this update: Mon 28 Apr 2025 03:00:16 +0000
Manifest next update: Tue 29 Apr 2025 03:00:16 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: JBh6WvqWxH8vB1zfW6WPEHYIWoVlQoslq3sXUFaFM9s=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:95:70:67:d9:67:49:be:a6:3b:dd:9b:da:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Apr 28 03:00:16 2025 GMT
Not After : Apr 29 03:00:16 2025 GMT
Subject: CN=93d4a921e54b372046e4d97b4f9cc9dbd293d9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:fb:d8:db:31:24:8a:9a:b7:df:b1:bb:92:
52:26:89:a9:0d:0a:cb:bc:bd:5a:b0:89:85:a8:99:
95:de:f2:dd:0f:24:f6:23:85:3d:32:c2:e1:ab:a1:
32:f0:5a:96:fd:a4:c3:96:06:dd:bc:59:b6:75:ff:
ab:25:a8:3b:cf:f2:28:c0:a2:d8:b1:21:3b:1f:6b:
d7:47:3b:f0:75:38:62:54:8e:09:f5:46:4e:c6:03:
f7:2e:fb:46:59:3f:e7:9f:5c:ed:a5:bc:ad:00:04:
21:7d:26:52:e8:0e:65:3e:8f:5c:ad:c2:fc:90:5d:
b5:1b:49:45:33:67:d6:02:48:69:12:01:2b:e9:72:
aa:d5:4a:9a:bc:24:c8:80:88:64:8b:36:1c:9f:35:
d3:d4:9c:a0:1f:92:a7:ad:6d:8f:19:27:99:2a:81:
c7:58:d0:2a:c6:96:09:4c:a8:00:98:55:73:d3:9c:
ef:0f:60:51:db:58:d8:16:ed:ae:c1:fc:ee:48:ef:
18:55:80:d6:ca:5f:46:93:45:5b:93:7d:ca:c5:48:
fe:52:4d:11:bd:09:84:e2:3b:d6:0a:82:de:c6:c1:
15:77:17:4f:b8:35:68:5a:2c:53:45:91:96:1b:0a:
05:3f:ca:5d:da:2e:2a:b0:0e:0e:a1:c0:43:33:da:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D4:A9:21:E5:4B:37:20:46:E4:D9:7B:4F:9C:C9:DB:D2:93:D9:C7
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7f:7a:65:29:4a:4f:a2:60:a9:74:d7:a2:a0:65:04:32:1a:
7e:2f:f0:33:0d:2a:71:e7:dc:8f:5a:e2:0b:97:89:f4:79:f6:
13:0e:38:b3:ad:42:6d:b9:33:0c:83:f4:39:60:9e:1b:5e:02:
d7:1c:8d:69:1b:1f:90:f8:08:7b:00:90:c6:d3:dd:e9:f8:fe:
d7:5d:7c:b1:c7:96:0d:92:5b:4c:d9:e0:5b:96:41:3f:7d:48:
59:53:13:0a:06:f3:25:cc:fd:2a:77:4e:38:43:88:fa:12:77:
9e:d4:fe:86:bb:e0:75:cd:5e:ed:c6:99:db:1f:19:3e:dc:ef:
b4:e9:26:6e:b8:67:b9:0a:cb:cb:79:1e:f2:2b:f6:b3:15:08:
27:65:5a:7e:c4:64:94:ce:1b:7b:2f:e3:8e:d2:5c:b3:99:5b:
ed:dc:ff:e4:26:8b:dd:94:35:2d:f3:32:db:b9:82:a5:54:98:
91:77:31:c3:3d:a2:7a:c3:69:24:72:71:b0:7a:85:c5:87:c2:
54:49:bd:73:7e:a1:d5:ac:a3:fd:1d:44:d4:4f:ec:8b:49:42:
2e:ed:77:b9:72:77:83:3a:b7:d8:d2:d0:df:c9:fe:96:4f:44:
5c:e1:5a:0c:a3:10:01:aa:69:95:25:27:32:f3:11:bf:4a:58:
d0:a4:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:33:25 2025 by rpki-client