Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: 7vavZ0JCG0igDGeJjqxMZoTKa57yhOHiLc6rJas4uv0=
Subject key identifier: A0:8D:8F:1D:55:A6:7D:EA:CB:E6:F9:80:35:16:F6:4E:BC:18:7F:73
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019655377B6C1A995A12A79C9DBCB28328EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0B06
Signing time: Sun 20 Apr 2025 22:00:21 +0000
Manifest this update: Sun 20 Apr 2025 22:00:21 +0000
Manifest next update: Mon 21 Apr 2025 22:00:21 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: MZuPrdXvu+ZGyTJj6HuWLh5xoz/WrZx/lYBKOyRP2iY=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:7b:6c:1a:99:5a:12:a7:9c:9d:bc:b2:83:28:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Apr 20 22:00:21 2025 GMT
Not After : Apr 21 22:00:21 2025 GMT
Subject: CN=a08d8f1d55a67deacbe6f9803516f64ebc187f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:dc:2b:cf:b3:af:ac:11:b9:be:dd:02:dd:61:
6a:dc:92:8b:16:4e:d7:7a:38:6e:01:bc:9e:8b:0f:
79:da:db:4a:3c:07:e2:99:eb:e1:79:32:d1:1d:18:
93:c4:bb:b9:a4:6e:92:4d:10:a8:ee:0a:6e:8a:e8:
4a:ec:9c:d9:2c:72:91:87:1a:e3:ce:40:af:65:94:
65:b9:e6:49:b4:de:f5:b3:77:a6:18:a0:e4:60:0f:
72:7f:5f:f3:ad:28:5d:0a:7e:4a:e4:08:d6:c6:23:
58:91:3a:24:c0:ac:8a:d7:5b:98:40:91:66:3c:fa:
b6:0d:2c:8c:e5:99:20:31:af:87:8e:b5:34:3c:9c:
1b:95:00:d4:1e:7f:7c:69:12:ad:28:44:f6:63:e0:
e8:35:ff:28:cf:43:a1:ed:e1:19:d0:31:34:98:27:
dd:8b:4e:43:a1:e8:05:d6:18:6f:b3:5b:ee:59:e4:
4d:6a:a4:e8:6b:4e:08:22:86:42:aa:15:4f:79:93:
e3:3d:9c:59:a5:24:b3:ea:01:ad:4f:60:72:11:56:
e9:67:96:8c:fa:ba:c5:cd:47:cb:4d:9f:06:9d:be:
bb:89:c0:1d:7e:fb:b3:74:05:74:61:56:98:b5:21:
7d:82:1b:e1:3d:4d:ca:9a:53:4b:2b:53:66:98:b9:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8D:8F:1D:55:A6:7D:EA:CB:E6:F9:80:35:16:F6:4E:BC:18:7F:73
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:34:a5:ab:6b:ad:7a:6a:58:38:91:b9:fb:da:e2:7c:ac:60:
84:38:73:73:2e:88:09:de:4c:20:f3:3a:87:69:84:aa:71:7c:
11:b0:98:70:58:75:25:56:eb:b7:b8:9d:d0:0d:99:84:d0:38:
79:96:6f:f1:c9:93:9b:61:99:60:a8:34:04:67:be:3f:43:7a:
53:4e:7b:9b:c6:f7:06:2c:b6:b3:95:38:89:fd:79:e1:f4:ce:
8e:f1:0f:6f:ff:9a:19:1f:f9:cb:e1:85:4b:31:67:98:0a:43:
6b:b7:c0:40:19:9f:85:93:00:c3:6d:71:89:8f:9e:76:40:c9:
c9:c7:39:f4:f5:03:18:19:87:95:2b:ba:61:53:67:d5:79:62:
2b:5a:8b:1d:66:cf:f0:af:a3:de:ac:28:9f:2a:3d:da:cd:d2:
a5:84:ad:3b:26:3f:37:a5:1e:1b:09:f0:b4:16:59:ab:06:a6:
83:dc:34:ed:73:58:5b:81:af:3d:19:5b:bb:7b:41:db:ac:57:
30:df:63:49:d8:50:95:a5:c5:94:6d:a3:aa:3b:8f:60:50:d5:
1b:74:df:b1:18:e5:01:80:72:d7:33:c7:e5:57:5c:ec:a3:2a:
06:aa:5f:6b:4c:96:79:ed:7c:6a:83:c1:02:de:54:f0:5e:9a:
7f:55:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:02:16 2025 by rpki-client