Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: aDlKxrNSU47B/J1w6FDJIupJ26Wul67TqeC+CwfkqRg=
Subject key identifier: E5:52:CE:C3:D6:6E:AB:AE:D9:7A:9E:E5:5E:BE:CB:AA:58:7B:EC:C9
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 0196564A91704D3031832A4D97B518085890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0A97
Signing time: Mon 21 Apr 2025 03:00:49 +0000
Manifest this update: Mon 21 Apr 2025 03:00:49 +0000
Manifest next update: Tue 22 Apr 2025 03:00:49 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: jc8u5q5yRcYMCpIM2Slq5Cqd+CCurVju93q0XyU0KyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:91:70:4d:30:31:83:2a:4d:97:b5:18:08:58:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Apr 21 03:00:49 2025 GMT
Not After : Apr 22 03:00:49 2025 GMT
Subject: CN=e552cec3d66eabaed97a9ee55ebecbaa587becc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:8e:94:a9:6f:fa:28:dc:74:b6:3a:cf:ad:
e3:7a:41:8a:46:74:9c:ab:d3:a1:e0:83:62:1e:4d:
82:92:d2:a2:59:5f:59:9d:89:78:e8:c6:cd:fb:b1:
0c:92:32:7f:ad:38:37:4a:43:77:df:a3:42:ba:a1:
f4:63:04:af:be:aa:4a:82:f0:03:33:72:ba:3c:da:
36:0f:d8:1b:0e:ec:7d:ac:d0:ac:f2:a6:43:31:ea:
44:37:5d:e2:36:ec:80:a2:4f:f6:94:b5:28:8c:89:
0a:80:01:42:b1:70:cc:8f:44:1e:a2:b2:dc:ab:6d:
53:2b:b5:35:e9:69:be:2b:e3:c4:74:53:e3:4d:45:
5f:c3:ed:04:ca:c0:bc:89:21:58:55:86:2f:e9:92:
18:88:29:1c:63:d4:c6:aa:b1:a0:c9:0b:41:98:00:
f2:66:27:c7:35:4f:da:31:3c:e4:56:8c:f9:1e:36:
63:d5:23:08:a2:9e:85:a1:3e:52:ab:ab:93:b5:cf:
3c:e1:f2:59:8b:fe:cd:02:e5:3c:a6:c6:06:10:4b:
e8:81:d4:b3:1b:2a:6f:26:6a:c0:01:dc:54:06:e9:
38:e5:17:95:b0:2d:d5:e9:d8:46:c7:66:8f:45:2a:
45:de:d4:64:18:14:1f:6a:5b:5e:05:45:ec:44:dc:
8d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:52:CE:C3:D6:6E:AB:AE:D9:7A:9E:E5:5E:BE:CB:AA:58:7B:EC:C9
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f1:9f:f1:05:75:91:ae:8f:f9:c5:62:1c:0b:03:32:a3:69:
94:ab:8a:a9:20:15:12:3e:a2:ab:ba:27:6a:6b:9b:5e:48:29:
3b:be:cc:f0:4d:70:24:d8:46:95:31:a6:bd:30:ce:54:6f:05:
b5:bd:11:46:3e:1b:db:93:14:32:0f:25:e5:8d:58:01:5c:08:
7d:80:04:d4:c0:90:e1:27:4b:d7:1c:70:8c:89:62:b8:b2:4a:
db:3b:ce:c1:fd:7a:b7:9e:bd:83:50:0f:5b:e8:db:3d:0d:e0:
a1:f0:a4:94:d9:2e:f3:be:8b:99:21:20:17:55:4c:e8:f8:23:
a1:01:40:a9:68:4c:6e:e5:b6:c7:4a:53:ec:b3:3a:12:24:c2:
fc:8f:fc:58:36:e1:56:a6:5d:90:41:b8:d5:35:ca:db:e9:6f:
01:e8:a2:c1:f1:74:23:4b:d0:f1:c2:68:1b:4b:c6:ff:7e:47:
b6:39:e3:40:4d:75:29:b5:6c:fc:5c:ca:4e:da:ae:f2:d1:7f:
f9:08:d0:7a:a2:26:0c:d0:48:07:92:ed:90:a3:5a:85:a3:b9:
eb:a0:94:38:17:03:32:00:08:8c:d8:cc:85:08:ac:2a:29:e1:
08:45:64:23:64:a2:55:c7:c0:a3:88:b8:bd:c4:d0:f8:98:e2:
9a:74:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:24 2025 by rpki-client