Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
File: hEWs0xvMvTRflkrZB8p3g9UEAm0.mft (raw, json)
Hash identifier: YtFU+BSvYfYQyFD5O0DxSRtbpsClS+zvxgm7Mo4rK5U=
Subject key identifier: E1:D1:99:26:AA:C4:C8:5E:CE:EA:E0:E7:97:09:B7:69:9C:25:73:F8
Authority key identifier: 84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
Certificate issuer: /CN=8445acd31bccbd345f964ad907ca7783d504026d
Certificate serial: 019653B6DC7EC42F12B952ED514A16E25A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
Manifest number: 022C
Signing time: Sun 20 Apr 2025 15:00:14 +0000
Manifest this update: Sun 20 Apr 2025 15:00:14 +0000
Manifest next update: Mon 21 Apr 2025 15:00:14 +0000
Files and hashes: 1: MIsHJfMxCSM1WvbxV6mjQ2268Dg.roa (hash: 7IHu7bEPJwg7z9jyxbfl0xePWRPgEqdEgg/sFRD/jOU=)
2: hEWs0xvMvTRflkrZB8p3g9UEAm0.crl (hash: cluho5ZbwXkCNZ7xoXt956R+U8I9HMYIycHXUmvnTJQ=)
3: tXUyhf07-eQaf37r4yK9NmJ5yPE.roa (hash: GWIxTVoGfPA2NfNvC8esjl5GZCoj69LgeTwNbdVaqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:dc:7e:c4:2f:12:b9:52:ed:51:4a:16:e2:5a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8445acd31bccbd345f964ad907ca7783d504026d
Validity
Not Before: Apr 20 15:00:14 2025 GMT
Not After : Apr 21 15:00:14 2025 GMT
Subject: CN=e1d19926aac4c85eceeae0e79709b7699c2573f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:93:8d:91:26:5e:83:dd:af:da:e6:fc:c4:43:
df:37:2a:ee:53:15:3d:de:f0:c4:94:97:54:d8:af:
30:b9:0d:d0:cb:e9:06:45:cc:44:08:7e:8d:df:f9:
ce:9a:9a:ab:be:e0:3d:3c:eb:ba:85:30:f4:23:e9:
aa:4a:91:f3:da:52:74:3f:b6:2e:ef:d7:59:a9:3a:
22:f4:82:3a:93:f0:25:9e:18:88:a6:4a:3a:e8:e1:
22:b5:dc:ce:08:ff:52:29:ee:d0:d5:29:87:8a:8b:
1f:45:37:2b:51:a7:56:58:38:bd:b8:3a:a3:1b:5d:
fd:a2:e1:85:cf:f1:de:2d:d1:77:53:f3:26:6b:d3:
9e:3b:03:05:fe:33:98:13:ec:a5:4c:5a:db:11:e5:
d6:cb:c2:25:e2:b5:d3:a6:0a:a8:df:f5:47:1e:96:
89:10:9f:df:87:9a:5b:68:22:d0:4d:73:bf:ce:a5:
04:6a:c3:1e:55:d5:f5:c5:20:d4:df:45:e7:cd:14:
35:91:32:80:78:66:06:1f:b0:12:e5:76:ff:9e:3b:
a1:91:38:9c:6a:0e:31:1f:cb:93:12:60:8a:11:61:
e5:16:b3:7e:87:cc:d5:39:f2:bb:21:ba:3a:e1:44:
f5:d9:e2:ac:16:38:06:7d:bf:d3:fc:76:16:a1:31:
01:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:99:26:AA:C4:C8:5E:CE:EA:E0:E7:97:09:B7:69:9C:25:73:F8
X509v3 Authority Key Identifier:
keyid:84:45:AC:D3:1B:CC:BD:34:5F:96:4A:D9:07:CA:77:83:D5:04:02:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWs0xvMvTRflkrZB8p3g9UEAm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fcb7af-56d0-4c55-a778-073e3b7ad850/1/hEWs0xvMvTRflkrZB8p3g9UEAm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:36:54:2d:c1:1b:71:d3:c8:b1:2c:0a:b9:08:47:96:d8:
f7:fb:92:f2:b5:39:9e:02:28:7e:4d:0c:dc:40:e9:a5:3a:74:
06:69:d8:b7:90:29:99:e4:6c:26:38:d3:5b:61:15:e4:29:ab:
9f:c9:3d:2c:c6:fa:25:0e:8a:b8:bb:10:17:a6:3a:8e:f6:ee:
cc:06:38:06:f6:36:af:4f:dd:9e:b1:13:26:b3:4b:6e:39:9d:
2b:dc:36:87:4f:f1:40:4d:d2:9f:14:d2:23:fb:75:7f:73:a2:
35:da:a6:36:bc:59:2a:e8:17:56:e2:84:6c:e4:5e:c9:78:16:
cb:ec:c1:35:f9:93:15:a7:33:06:82:fa:62:3b:42:0a:e8:c5:
32:5f:ba:ae:43:3a:61:07:17:4c:23:10:fe:0d:1a:37:2d:b7:
b3:ef:71:3a:cf:15:fe:7a:1a:d2:4f:b5:55:08:7a:7d:00:c8:
ab:19:20:c4:07:ca:11:77:5d:66:06:c0:9d:66:93:dc:5a:53:
8b:78:d3:d7:64:13:99:dd:33:59:e2:f7:e7:41:0f:c8:a8:35:
d3:b6:ae:85:8e:89:a4:7d:0d:b8:09:42:7e:1f:d6:71:6f:b7:
aa:e8:9b:07:26:85:0b:a9:b3:55:cc:86:44:b1:e4:88:6e:58:
89:6a:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:30 2025 by rpki-client