Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: DEdhRp1msDwWbt1wuWs1AMrT9OZDA/ceTBAU3K3QYN8=
Subject key identifier: DD:93:4D:33:37:36:7E:DA:4D:03:B8:E8:63:C1:8C:1E:C5:55:A8:05
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 01965A5DB901AF747DA978208DB345D42A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0F04
Signing time: Mon 21 Apr 2025 22:00:13 +0000
Manifest this update: Mon 21 Apr 2025 22:00:13 +0000
Manifest next update: Tue 22 Apr 2025 22:00:13 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: WVdl-uCV2iOAd5QeDrWIMC8ZaZo.roa (hash: CehMTtzEG7E3qCdiNMcnQ4ftqXLEiDLiNKB1gOKsgck=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: 6EIXBLHmQ9MljQFwSNg5RSzqjCID5QrxCVbvmwCl+lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:b9:01:af:74:7d:a9:78:20:8d:b3:45:d4:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: Apr 21 22:00:13 2025 GMT
Not After : Apr 22 22:00:13 2025 GMT
Subject: CN=dd934d3337367eda4d03b8e863c18c1ec555a805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:63:2a:e1:60:75:98:6f:29:c8:61:7d:e7:e0:
ed:50:51:fd:1b:ab:b2:9b:9c:d6:ef:fa:7c:b2:76:
cf:56:43:21:2e:f3:da:c3:48:68:6d:47:22:28:5a:
54:62:7f:ca:38:e1:6a:a1:2b:63:4c:6e:74:a0:e4:
fc:d7:12:65:c2:b4:f0:e0:a7:8c:54:a6:37:7b:25:
dc:38:ee:78:f5:73:72:18:f8:11:71:91:78:4f:11:
40:f4:03:e0:cd:2f:23:b3:ef:fb:3a:1f:27:02:af:
c5:92:b9:7d:df:b5:1f:41:63:3c:c4:e4:25:90:d4:
98:5d:4b:d3:a5:4c:46:91:37:78:28:cb:24:22:1a:
52:7a:98:1a:04:31:38:78:fc:68:1a:f6:31:82:7c:
76:81:27:ea:cf:4c:d2:cf:47:9a:5a:63:ae:de:7a:
e8:b2:41:bc:c3:2f:47:66:83:14:28:bc:e0:6f:77:
e5:b1:18:35:08:77:c9:60:7b:0c:4c:3b:ba:68:1e:
18:83:44:66:18:1a:2c:51:6e:4a:33:fc:ad:71:88:
5d:62:01:0c:7f:58:f6:73:7f:2a:0a:30:05:50:97:
45:e8:fb:c9:55:ba:2b:59:9f:b6:f9:cf:a2:a6:80:
7c:88:ad:0c:97:e6:3d:e0:50:52:fe:90:3b:b7:f3:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:93:4D:33:37:36:7E:DA:4D:03:B8:E8:63:C1:8C:1E:C5:55:A8:05
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:16:b8:83:85:03:91:c2:4e:fe:c9:f8:06:75:e3:46:be:33:
84:f8:de:09:37:a8:90:40:32:0d:e5:51:f3:13:2c:79:9d:a6:
b0:8d:4c:9b:91:ce:af:73:95:db:ed:69:66:6f:ff:fb:be:f8:
eb:6d:db:fc:d7:23:18:3a:32:d1:bb:3e:5f:95:5e:44:e7:7b:
0e:7d:9b:b7:5b:03:6f:20:c3:ae:cc:7a:a8:a2:8c:72:07:77:
3b:82:66:99:1e:5f:dc:b1:e9:a4:b0:5d:6d:02:c9:14:38:95:
df:69:12:51:0f:f6:98:60:4c:4f:a6:44:a7:b3:da:ec:ff:95:
28:33:2e:89:44:d7:7b:88:1f:9e:e8:06:21:24:4b:5f:02:a4:
fc:7a:80:02:99:f2:60:cc:d9:a1:cf:03:a0:c9:de:16:ec:98:
37:70:4b:76:f7:39:56:9c:f3:63:06:fa:e0:bb:b0:f2:fd:d7:
71:4c:07:47:1c:e9:5a:34:e7:8c:48:8a:cc:c2:66:6a:53:de:
f8:2a:85:b5:61:15:33:96:a2:ac:34:cc:0a:8a:8d:47:8b:56:
d8:d0:e0:0d:e7:14:b1:de:dc:71:c6:7f:a9:32:57:58:db:45:
c8:3a:d3:ea:ee:ee:e2:0e:42:03:05:f6:59:39:62:bb:26:7c:
8b:a9:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:19:02 2025 by rpki-client