Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft (raw, json)
Hash identifier: GTRHSI0ugMAuLIOV445cs7f0PkaNwnM5SsOco+6nL5I=
Subject key identifier: 43:E9:69:C8:17:DC:5C:4A:8A:67:F5:E8:C7:D8:B1:60:9E:17:CA:73
Authority key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Certificate issuer: /CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Certificate serial: 0196515AEF4C20BC6F02B4EAC2FEE7C5B0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 04:00:36 +0000
Manifest this update: Sun 20 Apr 2025 04:00:36 +0000
Manifest next update: Mon 21 Apr 2025 04:00:36 +0000
Files and hashes: 1: TYsIS3O-zzJUM31FOE8V5LwUjck.roa (hash: PgdOwzc5CsTmGlgxhk4B6gx5Y87krg/eEL18bNqE8Rk=)
2: Zqcute0EJxNZqsLIYM5IZaAu0eA.roa (hash: Ka5B3hGdb3O+/SiQ/oll6eB0Rldz6LRmTl/iQ6A8Wb8=)
3: hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl (hash: 84LvZaGb8/i5cxMJfttkdkHYNktuOuvRDhgKhVYPjEg=)
4: pruyBDp_cEEXKvqRx1kQTDgs6oI.roa (hash: noTc5adRBPeIH3/LBjn/ftfA3EYuQEQb7IQr66+/vn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:ef:4c:20:bc:6f:02:b4:ea:c2:fe:e7:c5:b0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Validity
Not Before: Apr 20 04:00:36 2025 GMT
Not After : Apr 21 04:00:36 2025 GMT
Subject: CN=43e969c817dc5c4a8a67f5e8c7d8b1609e17ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:bb:ab:4b:31:c0:e1:bf:f7:d9:aa:27:cc:
32:46:f2:f0:a9:8b:ca:00:ed:96:40:6e:d0:58:ce:
42:e7:2e:ab:6d:c6:55:c5:9d:60:37:c7:21:b4:26:
e2:7c:be:b9:5e:5b:97:c0:84:7a:fe:bc:93:38:b5:
5b:95:13:e0:05:55:b5:01:fb:6e:f6:3a:97:8f:6f:
e2:ff:96:e8:1c:76:d7:ca:36:91:c8:ae:6f:75:85:
03:74:06:d7:6d:c3:fb:70:bc:75:2e:c9:f1:3f:f5:
c8:f5:0f:e1:39:de:57:ab:30:b1:b9:f8:0d:a9:c3:
78:e9:13:67:46:89:b5:3a:99:0b:ec:01:e7:01:2b:
bf:f6:7a:ca:f6:9d:86:21:5f:0d:fe:63:c9:f8:67:
f3:2f:1d:44:11:e9:0a:a1:af:9e:95:f3:8c:fd:38:
18:f8:cb:f4:02:93:62:4d:32:06:2e:01:45:ec:33:
af:dd:30:be:5a:3b:5c:be:f0:71:5e:20:a9:90:f4:
4f:d9:31:8b:ea:4e:1e:be:27:a1:24:f9:05:82:87:
63:c8:65:24:34:f2:68:8c:dc:48:19:b0:5d:00:4b:
bc:8f:d3:3b:e7:77:40:10:72:cb:11:ba:17:03:3e:
80:17:b4:86:86:93:19:7f:0a:e5:aa:d7:9c:5c:df:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E9:69:C8:17:DC:5C:4A:8A:67:F5:E8:C7:D8:B1:60:9E:17:CA:73
X509v3 Authority Key Identifier:
keyid:84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:24:7b:d3:f7:76:63:61:11:01:9e:ac:16:07:04:a4:52:bf:
ae:31:a8:53:25:dd:4a:16:11:ad:46:93:77:91:ca:8a:b7:76:
6b:e6:a6:81:2d:22:19:0f:ce:ca:fc:90:58:69:3d:43:87:9a:
03:87:86:6f:6b:cb:cf:4c:57:80:0a:56:4c:3a:03:6b:23:b0:
d5:d0:1a:ff:22:0a:77:2f:08:f6:bf:41:fa:5e:ab:0e:cf:40:
02:ed:72:c0:2c:6e:76:c0:a4:40:b5:d2:02:aa:c3:03:6b:81:
3a:16:b2:1d:4d:18:b5:f4:4a:e7:09:4e:61:92:77:8b:6c:6e:
54:c2:cb:bd:a7:87:7c:b8:83:07:80:71:ae:6f:50:84:c5:83:
ac:d3:97:86:75:db:f8:43:4b:ae:13:85:7a:b4:9c:39:c8:93:
98:28:a3:1e:24:c0:0f:e1:4c:20:2a:46:be:93:4d:9a:50:76:
93:ba:ef:bd:2e:56:0f:29:5a:70:c2:f5:62:08:17:dc:e8:30:
d0:90:da:7d:44:65:98:5a:bb:ab:bc:41:e7:72:5e:14:a4:8a:
cd:28:ba:f5:ae:3f:14:ef:eb:1c:e9:79:b7:c5:a4:c7:45:e4:
f5:95:52:96:0a:b5:34:b1:a4:af:53:3b:bf:d2:3e:cc:87:6d:
51:ff:f2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:10:32 2025 by rpki-client