Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
File: h-uX-YyILvQms2ZjQR1AgUMKxCE.mft (raw, json)
Hash identifier: g30sonS/lAWxLZUGGUWWTf7CeCfCNNG/g4HCNMhY37M=
Subject key identifier: 05:D4:E3:7C:FC:B1:C4:70:5A:B9:E9:34:D8:A9:05:A2:65:16:AA:D5
Authority key identifier: 87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
Certificate issuer: /CN=87eb97f98c882ef426b36663411d4081430ac421
Certificate serial: 019653B7055BD7B97C095EA1E9EA2940F9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
Manifest number: C8
Signing time: Sun 20 Apr 2025 15:00:25 +0000
Manifest this update: Sun 20 Apr 2025 15:00:25 +0000
Manifest next update: Mon 21 Apr 2025 15:00:25 +0000
Files and hashes: 1: f87u7kBdxRsndUbHafpkZkro0IU.roa (hash: zdIYsmtX/Gy6oFoVgbZrLwhX3d3gff2hTbpByuS7zVc=)
2: h-uX-YyILvQms2ZjQR1AgUMKxCE.crl (hash: DV4iVd+8fuKxj8lVCq/l8QCYQgPu0e4k7zNjSU1yFw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:05:5b:d7:b9:7c:09:5e:a1:e9:ea:29:40:f9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87eb97f98c882ef426b36663411d4081430ac421
Validity
Not Before: Apr 20 15:00:25 2025 GMT
Not After : Apr 21 15:00:25 2025 GMT
Subject: CN=05d4e37cfcb1c4705ab9e934d8a905a26516aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:ae:05:80:dc:db:a2:db:8e:69:6f:37:96:
42:d5:2c:d3:27:21:a6:9e:85:2e:99:29:67:d8:53:
f6:b3:42:68:f6:b0:d4:62:8c:d4:4c:35:5f:36:4f:
dc:e9:ac:39:95:0f:80:2c:f9:31:f1:b9:31:fe:c2:
79:f2:49:80:54:1a:2c:81:d2:f1:0e:fd:a3:2c:ed:
8b:f8:29:12:78:8e:83:1d:60:b5:84:f1:95:8b:1b:
0f:dc:2a:6f:66:ac:0e:9c:ee:86:c5:fc:18:10:c0:
d9:ca:5c:3e:32:ea:3c:f9:17:17:eb:18:f9:10:50:
aa:22:8f:40:a7:b6:2e:fe:7d:85:e0:b0:32:0b:5a:
81:ad:59:bc:a7:c2:58:70:23:aa:09:1d:31:c1:a6:
f2:48:74:1a:f5:9a:a0:63:d6:bd:31:72:64:80:c9:
a4:c4:8e:1c:83:66:33:84:3b:ce:b7:24:cb:0a:77:
8d:97:83:d7:1e:d8:b8:8e:ac:e0:24:4b:be:c6:c6:
b2:dd:c9:9e:2c:b8:6c:14:5f:44:fc:81:8b:25:6b:
4b:99:97:47:1e:8c:b2:20:8d:29:2f:87:87:90:66:
df:36:8a:8b:7c:c6:5c:7d:77:88:5d:26:3b:ce:c6:
1b:2d:c9:7e:aa:33:b1:51:5f:e4:ba:d6:64:3c:ab:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:E3:7C:FC:B1:C4:70:5A:B9:E9:34:D8:A9:05:A2:65:16:AA:D5
X509v3 Authority Key Identifier:
keyid:87:EB:97:F9:8C:88:2E:F4:26:B3:66:63:41:1D:40:81:43:0A:C4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-uX-YyILvQms2ZjQR1AgUMKxCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/dea8f4-d688-4524-af29-3f6d7d7ea1b0/1/h-uX-YyILvQms2ZjQR1AgUMKxCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:58:ce:4a:00:fc:a8:5e:7e:40:9d:1d:82:fb:d4:2a:18:50:
0c:95:8e:95:04:9f:47:47:35:01:bb:dd:77:ba:af:7e:13:c5:
16:7c:ce:ef:96:e5:18:78:ac:cb:1c:68:29:02:7f:eb:85:e1:
82:20:20:bf:52:e5:24:35:97:b7:00:2e:38:88:c8:52:43:e9:
ff:2a:7f:ce:e0:61:d4:62:3d:0e:66:bb:d2:4a:3d:a6:e0:30:
3d:1c:cd:71:46:0b:dc:73:e2:fe:ed:9b:d7:fc:d8:d3:7b:40:
73:d0:62:b2:e0:d8:15:ed:bd:f2:91:b0:9b:22:8c:c4:1f:30:
d0:91:22:8e:6b:48:78:98:84:f5:3e:60:ae:80:fd:ac:31:10:
d8:35:56:d1:4b:b9:83:9e:e0:19:7d:1f:87:7a:a0:ac:8a:53:
ef:a1:7e:65:1a:6f:e0:1d:7f:6e:cb:54:6b:37:7b:c6:ad:36:
11:ca:2e:25:c1:a7:df:fd:46:68:82:cd:37:16:e0:18:cb:22:
a0:50:a0:65:41:2d:dd:4a:20:34:2b:0d:8e:b3:99:c8:9c:c5:
f8:50:49:ce:6b:f8:2a:2b:6f:cb:f7:d9:65:70:41:2b:60:dd:
5f:c4:bb:d7:d9:58:da:66:6b:79:27:79:93:08:6e:1e:5d:3b:
93:9e:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:40:09 2025 by rpki-client