Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
File: hIJ9422jg4AexCqAQ8eHJTd2A34.mft (raw, json)
Hash identifier: jHa8VJrkb025SOSI6OibwsT24MrJxAkoGLfkTlSXNv4=
Subject key identifier: 8A:85:23:1D:B2:CC:10:7E:5D:82:CA:58:7F:92:B3:E5:C8:E0:41:CF
Authority key identifier: 84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
Certificate issuer: /CN=84827de36da383801ec42a8043c787253776037e
Certificate serial: 01964D7EEB29E9B24E3353285FF881BBBF35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
Manifest number: 093C
Signing time: Sat 19 Apr 2025 10:01:25 +0000
Manifest this update: Sat 19 Apr 2025 10:01:25 +0000
Manifest next update: Sun 20 Apr 2025 10:01:25 +0000
Files and hashes: 1: d4QzmUrPPbJQxMw96G7I8wKAY_8.roa (hash: kCIIAo6mIinxOh21iDNSoj9jRYqWTcCgtvPqYHHPUqY=)
2: hIJ9422jg4AexCqAQ8eHJTd2A34.crl (hash: 6Y9lSva9ntoX3T9WZee5CyxJHoQu8kzbmziwqXK7s5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:eb:29:e9:b2:4e:33:53:28:5f:f8:81:bb:bf:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84827de36da383801ec42a8043c787253776037e
Validity
Not Before: Apr 19 10:01:25 2025 GMT
Not After : Apr 20 10:01:25 2025 GMT
Subject: CN=8a85231db2cc107e5d82ca587f92b3e5c8e041cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:4b:95:32:3d:d2:b5:24:fd:bd:15:3c:e6:
5c:42:ff:3d:55:d6:04:bd:e2:1f:8c:f7:e5:43:7d:
d7:63:76:16:04:68:64:e8:3f:4b:33:e9:06:9b:f8:
26:7d:21:d8:da:10:be:8b:ef:fd:7f:b2:a7:df:89:
b5:d4:47:aa:30:5a:72:a6:f4:57:f7:70:ed:e2:82:
d5:c3:2b:04:9d:0d:0e:a4:41:02:8f:32:68:21:ff:
0b:1f:2b:33:20:55:8e:f7:cd:a2:a3:28:73:0e:dc:
5a:e6:f0:e5:27:f9:22:11:52:2b:44:8f:ad:5b:7e:
4b:dc:a3:86:0e:ca:4b:10:44:f6:25:3d:5d:bf:9b:
a1:ce:a6:ed:f1:8a:4c:8e:97:2d:77:1f:f0:6f:4b:
ee:31:26:2f:cd:be:ce:8a:ea:05:d9:0a:f4:b4:69:
51:86:28:d5:ff:ac:a2:fd:f2:d8:9d:e3:02:37:56:
56:ba:ef:04:5f:40:6d:f1:14:c6:11:6c:2f:bb:2f:
39:c7:ae:5a:ba:fd:99:f7:00:36:88:85:f0:07:fb:
40:bf:23:f4:93:52:12:fa:37:83:25:28:49:e6:e2:
64:61:ea:58:0d:db:ec:db:c7:f3:f6:89:8e:4e:2e:
34:bf:d5:9b:d0:ab:64:53:80:5f:2e:1e:c1:51:09:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:85:23:1D:B2:CC:10:7E:5D:82:CA:58:7F:92:B3:E5:C8:E0:41:CF
X509v3 Authority Key Identifier:
keyid:84:82:7D:E3:6D:A3:83:80:1E:C4:2A:80:43:C7:87:25:37:76:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hIJ9422jg4AexCqAQ8eHJTd2A34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ec84d7-ed3e-4ada-beb9-18e65e64df71/1/hIJ9422jg4AexCqAQ8eHJTd2A34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1d:d3:fd:61:30:ca:4c:91:b0:82:16:58:c7:30:76:d3:da:
78:43:4f:e4:e1:9d:40:2f:b8:90:4b:f1:d8:97:36:ef:02:36:
7d:9e:ed:76:e0:1d:11:22:16:c8:a8:61:00:c0:e7:27:17:67:
be:bc:8f:33:bc:27:2a:a0:c9:4a:39:fd:cf:f2:86:8f:53:20:
c8:8e:21:eb:3e:28:ca:f8:c4:5f:f8:bb:c4:f7:a1:b4:28:64:
53:b3:bf:24:36:91:18:a1:a6:5d:6c:91:49:35:b9:08:84:6e:
4e:e6:b7:72:02:9e:d7:a9:3b:28:18:96:ef:fe:07:d6:d1:6a:
36:15:36:0d:9f:f3:11:a9:62:dd:47:dc:41:fd:4b:ae:ba:b5:
74:de:bf:8e:26:46:c6:d9:43:f4:5d:95:01:f0:22:b0:03:28:
bf:07:81:9d:94:5d:27:f7:45:40:da:50:90:74:b7:13:7d:c0:
15:d5:dc:c9:1c:08:cb:c6:59:f2:f6:8a:2a:4c:b0:24:5a:7a:
33:ce:ea:07:bf:e0:54:34:ba:43:de:1a:9d:ae:cd:52:b6:2a:
b9:0b:45:e7:30:6b:76:da:b3:d3:96:51:f1:02:52:ea:4c:38:
2c:35:98:d8:b3:b1:ee:32:78:6d:95:b5:33:c3:7a:94:97:90:
a8:71:46:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:32 2025 by rpki-client