Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: wGxGHz+qgNXFv5Eq/X302AoUXZ0N8uslNcAAnO6Ea+0=
Subject key identifier: 8C:C8:79:C8:A4:2A:E2:9C:A8:A2:B4:C7:01:7D:60:01:B3:C2:B5:8F
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 01967C0E5236FFB33B1528E4431C1D95A7EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 10ED
Signing time: Mon 28 Apr 2025 11:00:35 +0000
Manifest this update: Mon 28 Apr 2025 11:00:35 +0000
Manifest next update: Tue 29 Apr 2025 11:00:35 +0000
Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: 0GmCzvcraiMM7Nj8YwvdPxyZXQ7PfEZi7hG2zWUD6EQ=)
2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:0e:52:36:ff:b3:3b:15:28:e4:43:1c:1d:95:a7:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Apr 28 11:00:35 2025 GMT
Not After : Apr 29 11:00:35 2025 GMT
Subject: CN=8cc879c8a42ae29ca8a2b4c7017d6001b3c2b58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:96:21:d1:fd:62:1a:af:8a:21:a2:b8:99:
05:7d:d6:f7:34:ce:5b:ab:c9:87:05:27:ed:65:be:
90:3a:e8:01:2e:85:bf:ce:02:61:53:c3:a0:47:63:
91:64:10:0b:12:65:22:c7:49:a4:bb:e3:68:c7:60:
ed:b8:70:71:20:a3:25:08:b5:73:85:ee:79:50:42:
ba:c9:ee:2e:92:65:38:ab:b1:80:21:d1:fa:af:d0:
b8:ad:0c:b7:bb:2d:91:c3:60:b2:73:8c:25:69:d2:
9e:38:a8:7b:21:2f:01:4e:53:18:78:32:08:5a:40:
51:ca:9b:79:ba:10:2e:66:e7:96:95:6a:34:ec:1d:
3c:40:45:91:55:f5:a6:2c:f3:5c:ad:a6:90:ef:7b:
27:8f:10:02:a3:e7:12:2c:c6:f2:9e:9c:0d:bf:8e:
02:ff:9e:56:e6:08:a7:82:06:53:74:02:4a:26:d8:
a0:c3:d5:81:f9:63:e0:9a:e9:70:4d:4c:4e:bb:82:
f3:ce:a4:74:24:3e:01:9c:fb:c7:d6:ff:f8:87:96:
ad:7b:6d:36:8b:4b:b9:f2:a4:68:fc:5a:77:6e:b8:
2b:9b:fd:77:50:a3:23:7f:c8:eb:d0:83:42:10:01:
23:60:63:a4:07:35:4e:1e:22:20:10:37:50:bb:fb:
bf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:79:C8:A4:2A:E2:9C:A8:A2:B4:C7:01:7D:60:01:B3:C2:B5:8F
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8f:68:4b:22:6f:68:80:3b:ff:32:06:31:b0:11:3d:9e:ba:
08:ef:fa:bd:74:38:2e:0f:c8:19:5b:35:c1:33:87:49:2b:80:
95:a0:75:5a:23:84:a9:b0:34:84:b3:d4:f8:3b:50:e7:9e:9b:
46:20:83:11:89:62:fa:78:b6:ed:a2:bd:ef:19:a5:3a:94:4d:
5c:4d:ec:18:8a:76:a3:1c:09:a8:c6:1a:3b:20:b7:f1:ab:98:
82:ce:84:10:1d:ab:2c:07:06:d2:92:10:c6:c0:ce:96:bf:a2:
8c:29:6d:f1:ea:41:e9:27:8e:00:01:c3:f1:3a:0b:21:dd:2b:
2d:9e:fe:d8:fe:53:01:1f:c6:5f:44:4e:6b:a5:9a:f7:c7:0e:
92:63:90:c6:05:94:16:8b:5a:9d:69:d5:19:cf:d4:1a:f8:d0:
ab:82:a8:b9:69:3b:49:f8:aa:2b:a2:b5:fe:cb:36:77:b9:53:
53:95:20:d8:2c:9d:8c:12:af:e5:6c:b6:b4:3e:d3:1d:e2:fa:
de:fe:05:ff:76:dd:bc:a6:3d:a7:fe:73:3d:a1:24:fd:ec:b8:
7d:0b:bb:9d:58:ef:fe:a1:00:5f:c8:b3:8e:40:d6:07:33:cc:
9b:10:2e:fd:ad:bf:e5:9d:5d:99:20:5c:90:f4:1b:d1:1e:cc:
8d:06:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:06:15 2025 by rpki-client