Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
File: hh3iAyQAiy0n65dJWszi67zch8c.mft (raw, json)
Hash identifier: Cwp6+YoeD88UsDrtsdmq+zrw7LvYt2KZ+KvBHae3Erg=
Subject key identifier: A1:B5:00:5B:63:DF:E7:72:4D:07:BE:9C:F7:F5:9F:09:7B:C0:06:67
Authority key identifier: 86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
Certificate issuer: /CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Certificate serial: 019651FFB393E380F5DE81D0C41521EDB624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 07:00:33 +0000
Manifest this update: Sun 20 Apr 2025 07:00:33 +0000
Manifest next update: Mon 21 Apr 2025 07:00:33 +0000
Files and hashes: 1: cdpye_KyS4EmcLPLYSZp6vr21yY.roa (hash: Zz0lFiDAwglkcbO2M8ukF/dTePvCgzsApZfE0jU6Bcs=)
2: hh3iAyQAiy0n65dJWszi67zch8c.crl (hash: dybqGPAq/wzhVKVVUmZkUToc0fE4SoIoLT4axsNaV/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:ff:b3:93:e3:80:f5:de:81:d0:c4:15:21:ed:b6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861de20324008b2d27eb97495acce2ebbcdc87c7
Validity
Not Before: Apr 20 07:00:33 2025 GMT
Not After : Apr 21 07:00:33 2025 GMT
Subject: CN=a1b5005b63dfe7724d07be9cf7f59f097bc00667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:76:18:46:b7:b0:ec:db:72:45:6a:87:cd:28:
5a:d9:0e:a3:53:af:e4:03:c7:aa:d5:2a:97:c4:42:
dc:e6:b6:3c:b1:5f:43:1a:19:6d:c5:81:5c:1e:b5:
3d:9b:ef:75:92:28:02:19:16:7f:2e:25:c9:2b:b0:
89:5b:d9:ce:17:34:dc:4d:d2:d0:5e:fc:b0:33:56:
b9:af:d9:42:95:26:e1:eb:04:01:71:c6:5e:f0:5e:
ad:dc:8d:55:f3:7e:7f:63:c8:69:7d:9d:78:da:cf:
ec:29:11:95:b4:00:59:17:c1:ca:86:82:79:a2:7b:
1a:39:48:19:13:5b:f8:a9:d0:68:29:16:4a:fc:80:
cd:c0:f3:d8:5b:9c:6b:2d:20:bf:3b:d2:42:b0:c3:
00:dc:d2:37:cd:21:c1:f3:8a:c2:92:92:bd:2d:76:
34:5b:43:58:d8:9f:97:16:e2:2a:52:39:7c:76:52:
ef:82:34:3d:19:94:0d:dd:c2:07:a6:9d:88:60:e9:
20:c0:37:93:af:fc:3e:69:6e:96:cd:bd:62:ff:0b:
ba:9a:41:59:3a:93:a0:10:30:95:22:ed:84:91:a0:
a5:8b:f0:a6:67:7b:34:52:a8:f6:9d:fb:0a:18:30:
4a:14:01:22:88:71:72:3a:db:c1:2d:be:92:4d:be:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B5:00:5B:63:DF:E7:72:4D:07:BE:9C:F7:F5:9F:09:7B:C0:06:67
X509v3 Authority Key Identifier:
keyid:86:1D:E2:03:24:00:8B:2D:27:EB:97:49:5A:CC:E2:EB:BC:DC:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hh3iAyQAiy0n65dJWszi67zch8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/93acec-b1ee-4f31-af6e-1e46ae8721ef/1/hh3iAyQAiy0n65dJWszi67zch8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c7:da:ac:cf:ee:17:7f:e5:e3:56:fb:58:ab:63:09:c2:cf:
e1:83:ad:45:98:54:7f:8f:46:8b:82:a2:63:a9:70:47:de:33:
61:b6:9b:0f:69:7f:aa:fb:70:ea:d9:12:ee:0f:5f:90:6c:c1:
46:98:1e:ec:6c:47:1d:f1:2c:78:64:96:e5:63:ba:aa:ae:bc:
16:44:03:96:71:f3:bb:46:e5:07:fe:3b:52:5f:10:b8:ea:da:
98:80:6a:9b:e2:03:36:5b:df:be:bd:a7:a1:07:f6:48:b6:21:
fe:fd:15:aa:3a:58:cd:01:c5:70:35:db:a2:3a:01:65:b5:a9:
b4:0f:dc:1c:a6:41:e5:08:5a:40:51:4c:d4:6a:a3:58:a8:9f:
d3:3c:a9:9e:77:49:ae:90:31:49:c0:1b:69:06:e0:85:d9:3a:
83:4c:20:63:6b:6a:0d:31:22:ad:07:92:25:10:91:d0:6a:db:
98:1c:ed:92:e9:d7:e7:02:f1:32:34:c4:2e:13:2a:5a:45:46:
bc:34:4e:38:40:08:b5:6b:29:f1:ca:85:66:d2:05:f3:d3:be:
73:0e:ac:78:61:70:69:1b:8f:d0:1c:38:54:df:b9:20:5b:d5:
4f:d9:8c:52:15:f1:25:8d:63:7f:78:7e:95:49:c3:38:94:78:
7a:ba:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:11:59 2025 by rpki-client