Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier: DuJHL2qRFhyZnY2tebQAMB2Wag4bPqGLlvO6Xw+1clU=
Subject key identifier: D7:7C:8E:DC:A8:7A:10:2A:5B:0E:0D:4C:6C:EB:F4:B4:DD:D4:04:C9
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer: /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial: 019655DCC5C4B0231B6015A9125EA5257953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 01:00:53 +0000
Manifest this update: Mon 21 Apr 2025 01:00:53 +0000
Manifest next update: Tue 22 Apr 2025 01:00:53 +0000
Files and hashes: 1: A4RzpDr3gOL8P149IxhrXzrosA4.roa (hash: yOCvJbe7MwqK0UFIIbITRG8d1PF4w5162JM6G8QiNYc=)
2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: yyuAGsm0Mce1nTplpZ252SF9NSQCHn794XFPfY5gaT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:c5:c4:b0:23:1b:60:15:a9:12:5e:a5:25:79:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Validity
Not Before: Apr 21 01:00:53 2025 GMT
Not After : Apr 22 01:00:53 2025 GMT
Subject: CN=d77c8edca87a102a5b0e0d4c6cebf4b4ddd404c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:6d:c1:ef:29:c8:f2:c2:3f:5d:42:3f:7d:
2f:35:e9:71:07:ce:34:31:d0:b0:e9:d7:1a:ec:16:
88:58:71:29:61:d2:51:db:ba:cb:2f:eb:58:49:2b:
6f:71:c1:8a:cf:07:f5:81:6e:ed:f1:f2:3c:b2:60:
f3:c6:4d:01:35:8c:21:fb:58:2f:a4:61:82:40:4f:
64:ee:7c:47:2b:2a:a1:dd:e0:f9:58:d1:18:44:bc:
c9:36:49:ea:4c:57:95:70:a9:ba:d8:f1:10:1f:79:
c0:4c:dc:5a:fe:c7:23:dc:c9:d5:75:e4:15:fd:27:
c1:97:e0:15:b3:66:2b:69:43:f5:a7:59:90:ae:f8:
c0:80:6e:9c:a0:f1:32:5e:e7:2c:0c:1d:73:9b:23:
0f:f8:da:80:9a:01:64:99:a9:f1:63:a8:77:82:db:
e5:27:79:6c:82:8c:3e:22:60:2a:e8:77:51:a8:7b:
fb:30:11:71:21:29:0e:31:cb:06:f5:84:0b:02:8b:
19:a0:c7:fd:d7:b8:be:bd:b8:23:ad:7d:48:38:6f:
61:73:c5:fe:b2:6a:44:52:17:72:ea:fb:32:79:1e:
b2:a9:ce:a8:82:75:af:59:74:d9:e0:c6:24:2d:89:
14:a8:71:a8:38:30:c1:ad:25:ce:25:8a:5b:00:6b:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7C:8E:DC:A8:7A:10:2A:5B:0E:0D:4C:6C:EB:F4:B4:DD:D4:04:C9
X509v3 Authority Key Identifier:
keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:4c:a2:87:a2:8d:b2:8b:a4:b0:4c:1d:22:ff:2a:d3:a9:
ae:0f:8a:81:3b:ea:17:7d:1e:48:f9:5e:ce:99:97:2f:60:b4:
65:26:6b:5d:23:6f:fc:33:a6:64:e9:fd:cc:ff:7b:ea:bd:29:
3f:46:ee:15:0e:89:92:56:3f:01:5e:f8:a0:d3:29:27:42:9f:
98:f9:eb:68:71:82:1b:15:44:82:cf:b5:55:c5:9a:bc:bb:f1:
b7:0a:2c:51:9d:bd:6e:d6:7b:50:5e:75:72:59:43:74:f5:c8:
ca:8e:8f:8e:68:4e:1a:36:4b:b1:eb:6e:da:69:8b:dc:93:af:
8d:aa:d6:dc:a3:8d:d0:0a:07:6e:38:b6:f1:c5:95:bc:f5:be:
01:54:92:f5:7e:40:e1:6b:d0:6a:ed:85:f8:5e:4e:46:2e:54:
87:de:00:48:25:d8:a2:d7:cc:0f:e9:72:ff:c5:2f:0a:25:80:
9e:5d:38:cb:e3:e6:4b:75:50:21:87:25:96:8e:91:75:2c:d0:
ef:2f:7e:17:08:52:42:f3:46:e8:c2:b0:6f:2c:03:f8:13:2d:
39:03:50:96:b9:a0:74:e3:7b:ad:cb:38:6a:c2:4a:b0:1c:ce:
1f:2e:42:b7:8c:74:32:02:6d:42:58:62:df:87:f7:31:a7:7d:
88:f7:cf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:05 2025 by rpki-client