Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
File: h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft (raw, json)
Hash identifier: VySk/rne6bl+Af9Ljel5bUYWjSTAgjIF5fGCFYcbOtE=
Subject key identifier: 88:16:27:29:04:14:EC:38:40:ED:05:BA:85:8E:B1:35:F4:7C:84:C1
Authority key identifier: 87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
Certificate issuer: /CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Certificate serial: 01965613B9AAE101D507FEABAF7354111E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
Manifest number: 0C75
Signing time: Mon 21 Apr 2025 02:00:55 +0000
Manifest this update: Mon 21 Apr 2025 02:00:55 +0000
Manifest next update: Tue 22 Apr 2025 02:00:55 +0000
Files and hashes: 1: RHGOdSgcoaK-6eU2dKjKlpRjaMo.roa (hash: NRVJAc4Gjyt0Wmb+WBhbiFKpJbnBkqjBbBZ7MMuCSS0=)
2: h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl (hash: RKJvassELNbsEdhMX1jLEFmmpYdWmLx9M6pJ/4PvZXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:b9:aa:e1:01:d5:07:fe:ab:af:73:54:11:1e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87a98ae10d85478cec5c25563c73ebb56c9b1a46
Validity
Not Before: Apr 21 02:00:55 2025 GMT
Not After : Apr 22 02:00:55 2025 GMT
Subject: CN=881627290414ec3840ed05ba858eb135f47c84c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:61:4a:6f:10:fd:d9:51:18:ee:59:34:f5:
b6:21:04:6a:05:7e:b8:a5:03:24:7f:cf:1c:15:31:
2a:f4:da:d0:fa:95:99:18:7d:7f:e8:14:c7:ed:25:
52:da:c5:5a:81:5b:18:3f:2e:ec:74:cf:ae:77:72:
da:d0:80:c9:1a:22:c6:20:f5:d4:9d:09:8e:81:42:
11:0a:74:6c:83:a5:db:c8:fc:e1:e6:dd:48:00:5b:
e8:dc:8b:e7:ea:48:f0:a5:44:fb:4f:b3:a9:5a:bc:
33:81:02:5d:41:9c:05:c8:ae:85:19:a3:bd:f3:af:
41:95:91:bd:75:50:d6:67:3d:e3:6c:67:cc:97:83:
0b:09:00:3b:53:84:d3:e0:d6:f4:ab:7c:54:36:83:
f2:84:cf:e4:55:0b:e4:0e:52:aa:39:5f:f9:5d:6b:
67:60:aa:2e:a1:8d:e8:ad:c9:f0:88:e6:e4:8c:4d:
d5:46:b4:12:50:09:cf:d2:c6:97:8d:73:ed:6d:0e:
fa:e9:22:19:39:e1:b9:39:3d:ef:62:ed:20:db:73:
56:97:4e:69:8f:33:a8:6f:7e:01:db:6e:fd:d0:6d:
14:57:59:75:23:14:4d:6b:50:ee:b5:83:09:52:74:
4d:fe:97:9b:84:cf:17:17:2c:a8:93:8f:93:cc:26:
d9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:16:27:29:04:14:EC:38:40:ED:05:BA:85:8E:B1:35:F4:7C:84:C1
X509v3 Authority Key Identifier:
keyid:87:A9:8A:E1:0D:85:47:8C:EC:5C:25:56:3C:73:EB:B5:6C:9B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6mK4Q2FR4zsXCVWPHPrtWybGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/720843-adef-4338-8995-1c556b03b22c/1/h6mK4Q2FR4zsXCVWPHPrtWybGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a8:b7:2b:bc:52:f7:b6:9e:1a:5d:2a:98:bd:85:fd:87:68:
48:fc:69:a2:9f:9d:28:21:b5:aa:0c:d7:90:65:51:49:ed:33:
c1:e9:80:e3:52:85:4c:88:11:ec:26:2f:c3:9c:65:fb:75:7e:
80:ad:fa:43:0e:ea:2c:8f:ea:18:80:07:db:23:70:54:01:26:
1a:73:d0:d1:43:98:74:b7:68:b1:a4:59:c2:24:49:31:8c:1b:
7e:e6:e8:c2:67:82:98:64:7b:86:bb:62:34:99:d5:7a:45:b9:
d2:8a:eb:ef:35:05:57:c3:95:33:50:7d:15:ed:22:a3:89:b8:
e9:e2:2b:29:49:d2:1c:85:dc:1b:b5:43:11:3d:38:85:ab:f7:
3f:2a:22:90:d5:f2:b0:35:86:1a:9c:4a:83:1c:dc:00:93:bf:
32:b1:69:41:1f:f1:c8:52:61:a0:01:09:4e:48:40:07:49:46:
d1:1b:2b:05:14:75:bf:63:34:a8:53:52:21:87:2b:c7:b7:a6:
9d:57:b3:5b:55:87:f4:7f:54:82:0c:7c:f0:30:dd:c6:55:35:
da:15:2d:91:7f:9d:30:41:73:d1:5a:6b:3d:54:71:ff:66:07:
27:0a:5a:d2:43:a6:17:e7:f5:3b:8c:8d:c4:60:26:eb:07:2b:
4a:e9:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:19 2025 by rpki-client