Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
File: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft (raw, json)
Hash identifier: 8fMfugMEGucHIjQnUB7j5cuybATllsu487Sn92vOStI=
Subject key identifier: 13:2F:BD:36:D4:3E:55:D6:66:C0:C8:3C:01:CC:B5:C3:19:5D:39:E4
Authority key identifier: 84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
Certificate issuer: /CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Certificate serial: 01965FF241AA670F55E86D1AE1644AFD74FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
Manifest number: 1504
Signing time: Wed 23 Apr 2025 00:00:34 +0000
Manifest this update: Wed 23 Apr 2025 00:00:34 +0000
Manifest next update: Thu 24 Apr 2025 00:00:34 +0000
Files and hashes: 1: BZnndlQQXrhtsi1w92QwnbcTVos.roa (hash: xdoIZn2kmQaThra2U5g+oAnP8t2eo6iub1zi69U/YhE=)
2: hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl (hash: j20nd+fGwJt/CqsGD17ygt4JjeYEEsjNuSWZQj6jSF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Apr 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:41:aa:67:0f:55:e8:6d:1a:e1:64:4a:fd:74:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84106bfa023f17cf6d67eac9fdd2868a72f76680
Validity
Not Before: Apr 23 00:00:34 2025 GMT
Not After : Apr 24 00:00:34 2025 GMT
Subject: CN=132fbd36d43e55d666c0c83c01ccb5c3195d39e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:b3:fe:30:80:fa:87:ef:c9:06:39:5d:5c:
b4:ca:c5:7f:37:55:c3:64:a2:d4:bb:b3:c9:cc:b2:
91:54:e9:bc:61:09:c4:0d:a7:d1:04:b3:90:5d:3c:
e7:31:3c:15:65:a2:df:f4:c7:ce:0d:c0:e9:0a:df:
24:08:b2:81:af:36:ed:28:b8:d6:b7:55:60:4c:76:
44:0b:2b:2d:aa:db:ba:05:ce:e3:d4:0e:62:10:f8:
3d:26:08:76:14:57:cf:c0:24:2a:dc:e4:8d:cc:a9:
79:9a:af:e3:8e:88:ea:07:a0:4e:b4:b6:b1:71:e3:
35:2b:1d:02:5a:a2:1f:8e:32:ce:3e:a7:e7:6a:a3:
bd:fb:db:56:b6:15:33:c5:3c:f5:5b:bb:0f:8e:63:
32:12:33:e6:80:9b:24:6d:25:c0:ee:c3:79:05:9c:
88:5e:46:af:a0:0b:66:f2:f0:7c:4f:d6:da:99:00:
a2:c9:ec:5f:49:1f:ae:aa:a1:ec:48:31:9c:4c:ea:
36:ff:1b:11:62:95:77:f5:d8:d6:b5:a8:c2:87:51:
97:be:6b:65:7a:15:47:ec:e4:44:d6:e9:06:d4:ab:
78:7a:99:44:31:3b:a9:b2:22:66:26:35:2b:81:be:
4c:c9:54:68:68:f8:35:87:45:9f:8f:59:ed:96:c0:
c3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:BD:36:D4:3E:55:D6:66:C0:C8:3C:01:CC:B5:C3:19:5D:39:E4
X509v3 Authority Key Identifier:
keyid:84:10:6B:FA:02:3F:17:CF:6D:67:EA:C9:FD:D2:86:8A:72:F7:66:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/7eb293-8e76-470f-855f-b626d5746d13/1/hBBr-gI_F89tZ-rJ_dKGinL3ZoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5a:a4:98:80:99:57:b6:11:19:6b:83:5f:ce:4f:f7:46:eb:
4b:22:1b:eb:af:b1:a2:c2:c4:51:35:05:fc:01:2a:6c:82:1d:
43:82:bf:19:b4:35:12:12:9c:53:4e:d2:40:ca:ff:82:c8:43:
8c:24:90:cd:af:c8:86:c7:c0:de:a8:1a:e2:67:e7:aa:3b:13:
50:5d:82:c4:cc:86:6c:4d:c5:30:1a:78:22:f2:59:a5:59:91:
63:7a:c2:db:a4:ca:c7:c6:a2:cf:e9:e2:b3:6a:80:a2:db:e0:
b5:be:d2:86:94:85:e6:1d:d8:77:f6:6a:23:93:6a:85:60:79:
21:18:f9:38:70:fe:e4:e5:60:39:32:03:4f:55:69:34:17:71:
6b:a2:c5:ca:6a:5b:ca:72:72:0e:c3:98:4c:28:9e:31:e3:ad:
88:64:e8:45:d0:e8:85:c4:0a:13:36:bc:5f:a6:b0:5b:92:d4:
86:5a:a2:47:08:5a:78:29:39:2e:a5:0f:46:d1:41:1c:49:54:
6d:90:d2:57:e1:9a:ee:0c:ed:d4:56:d8:e7:f0:81:35:99:26:
ce:b6:61:df:a4:3b:db:cc:62:31:e9:40:a4:09:0f:8a:be:47:
a4:0c:f5:27:11:54:22:95:42:2f:a8:29:12:f3:78:33:2e:a3:
24:ba:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 10:08:20 2025 by rpki-client