Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
File: hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft (raw, json)
Hash identifier: qebMCyzH7nQGa+8qVMfxrehfhDQqH6iDzciGfNFqc1Q=
Subject key identifier: 99:6A:84:5B:53:B1:24:FA:45:E5:0A:0C:AC:91:67:8E:AC:48:AE:5E
Authority key identifier: 85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
Certificate issuer: /CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Certificate serial: 019644B258123687C3342D708F1FDF1ACEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
Manifest number: 11AB
Signing time: Thu 17 Apr 2025 17:01:00 +0000
Manifest this update: Thu 17 Apr 2025 17:01:00 +0000
Manifest next update: Fri 18 Apr 2025 17:01:00 +0000
Files and hashes: 1: d07SpQbRU8GC6VlWm7_Lbsn9Sb8.roa (hash: cERcZw5Z94F+CMFJAljz3XdDY1JrRkuGSpDxJHDgzq8=)
2: hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl (hash: u+5yHOK8aUFamvd+2naRTkdWFpKVnzVBTDUQFeGwDr8=)
3: vBX5hh9jIQFLXk1AFr7Iw7Y-XTE.roa (hash: AhPFv/8nWSRXANQRSY1wzdZ4XMNkwwYufrm8inXx3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:58:12:36:87:c3:34:2d:70:8f:1f:df:1a:ce:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852dc0d0998b8126babb9775ab40c162ef96fa2d
Validity
Not Before: Apr 17 17:01:00 2025 GMT
Not After : Apr 18 17:01:00 2025 GMT
Subject: CN=996a845b53b124fa45e50a0cac91678eac48ae5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:b4:4b:2a:21:02:59:9e:aa:b4:86:5d:be:
38:b4:82:ba:a7:84:b0:6d:a6:5a:c3:8c:c7:19:aa:
7b:3f:aa:07:a4:c2:62:da:ee:06:ad:f5:87:86:0f:
09:fb:97:f5:9b:1e:18:0b:17:96:0e:8d:df:2c:5c:
b1:6a:ca:b2:30:d7:7d:cd:62:a1:95:a7:cc:71:42:
ac:8d:a2:ad:21:4b:06:95:87:71:aa:52:67:2d:dc:
04:a8:a0:52:6c:76:62:2e:bb:d2:a0:b1:6d:f1:a7:
04:98:7b:d9:93:b0:13:30:d0:a9:79:f1:6b:07:f6:
85:9b:d3:ab:16:87:a3:53:d1:6b:f7:be:bf:6d:cf:
a4:c2:7b:f1:fc:e5:a5:c0:0f:5f:43:14:20:52:55:
73:9e:3e:1b:a7:65:61:45:f9:c0:66:0c:30:76:5e:
fa:d3:ed:1a:4b:15:b0:56:0c:01:0f:86:b6:de:52:
26:12:4c:80:a7:0d:94:62:bd:db:b3:e3:6f:3e:6f:
31:24:12:29:e1:48:d1:d1:38:26:e6:b0:0f:93:8c:
a7:ee:48:d2:f2:28:6a:d9:99:66:e7:2a:fa:d6:3a:
f3:89:b5:3d:a6:98:33:8a:f4:57:b8:dd:d7:3e:16:
d2:69:fa:73:51:6a:c1:cb:e0:b4:64:04:c9:9c:19:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:84:5B:53:B1:24:FA:45:E5:0A:0C:AC:91:67:8E:AC:48:AE:5E
X509v3 Authority Key Identifier:
keyid:85:2D:C0:D0:99:8B:81:26:BA:BB:97:75:AB:40:C1:62:EF:96:FA:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS3A0JmLgSa6u5d1q0DBYu-W-i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/1cd6ca-c052-4e3d-974d-d32e56d79b2a/1/hS3A0JmLgSa6u5d1q0DBYu-W-i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:38:3f:f8:03:98:94:cd:94:4a:d4:4b:de:d8:fc:46:c5:b9:
b0:d0:e9:48:90:e0:c9:93:d3:00:50:15:2c:77:00:da:18:1d:
e8:b6:5d:31:f5:91:e9:d0:c8:51:9f:5e:ea:f2:d7:49:e0:1e:
e6:a4:64:ab:12:5e:95:15:28:c0:1d:60:30:cb:be:31:a1:e3:
1a:31:b3:69:9f:7f:79:ee:6f:1a:3a:e6:68:5d:19:6c:6f:61:
1e:7b:c9:48:c6:4d:b3:39:0f:ef:07:6b:5d:89:43:5e:8a:36:
8d:6e:b0:3e:dd:7e:da:aa:23:c9:5e:90:5e:e8:fa:b8:44:a1:
70:c0:90:56:7b:25:3a:f9:d9:70:fb:6c:83:e8:28:14:02:81:
ad:b5:68:f5:79:50:cc:62:11:bc:c8:c5:51:5b:00:4c:f6:c7:
2e:13:b5:32:c9:9b:a7:23:46:33:2c:e4:a8:84:f4:5f:f9:2d:
4e:e8:78:2f:6a:68:ae:65:53:66:9f:fa:6b:d4:f0:47:87:ea:
2d:43:23:3f:b8:51:83:3b:26:e6:16:16:b3:ce:92:16:2e:f3:
a9:66:86:19:46:90:5b:5d:5d:1f:ec:c9:7e:9c:6f:8d:1d:aa:
3f:56:e4:e7:26:37:6c:52:39:cc:a1:52:29:fa:53:8d:9a:a8:
3c:fa:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:41:48 2025 by rpki-client