Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
File: hUavGPcHiqwAwvzSymf5MoAhfhU.mft (raw, json)
Hash identifier: hkkFmbket0s97vqlKN9JVmCtwfU3IVFWZW/dlU0/Qw8=
Subject key identifier: B8:C9:99:C5:FE:51:4B:8F:89:2E:47:C9:99:82:F6:03:D4:33:F4:86
Authority key identifier: 85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
Certificate issuer: /CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Certificate serial: 019656B8277B2CEA506113307BCF6DC044DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
Manifest number: 1490
Signing time: Mon 21 Apr 2025 05:00:31 +0000
Manifest this update: Mon 21 Apr 2025 05:00:31 +0000
Manifest next update: Tue 22 Apr 2025 05:00:31 +0000
Files and hashes: 1: hUavGPcHiqwAwvzSymf5MoAhfhU.crl (hash: hPXsK86ZtZpToFvyTiSwp00pIshDuPw+U8xrniaQbdw=)
2: jg1_qGOypFs-Omg84eci-XkXn6M.roa (hash: Hutcm4lZFs78dltAQDGy1uUI7H+2kpc6tWhDJ8JMDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:27:7b:2c:ea:50:61:13:30:7b:cf:6d:c0:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8546af18f7078aac00c2fcd2ca67f93280217e15
Validity
Not Before: Apr 21 05:00:31 2025 GMT
Not After : Apr 22 05:00:31 2025 GMT
Subject: CN=b8c999c5fe514b8f892e47c99982f603d433f486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:52:dd:cc:49:97:0f:bc:43:97:28:98:4a:
e0:cd:36:a3:af:2e:85:52:4f:1d:27:10:c2:58:73:
ca:a8:71:3c:85:a7:42:d5:8e:e8:c1:60:ef:77:83:
2f:f5:c7:6e:5e:f6:56:34:82:30:dc:b0:eb:45:55:
12:3c:aa:2c:2c:4f:99:d0:e0:91:1b:19:1b:78:55:
e2:ac:fd:ea:09:07:2e:9d:c2:2c:f6:52:53:2f:76:
5d:c9:75:91:43:76:06:75:f3:d8:c0:d5:f2:f0:5e:
90:eb:aa:af:9f:37:d0:d7:1a:1f:03:19:90:87:a9:
78:d9:71:70:91:ef:3b:f2:5c:99:69:a3:33:07:d4:
83:fc:f2:9e:fc:8c:da:f0:0c:ca:3c:89:5a:c8:9f:
13:58:f9:74:ec:43:ca:f0:57:6c:26:4a:d4:6b:66:
c5:df:18:f8:6e:db:fd:73:17:48:d8:0b:07:f8:1c:
89:ef:4f:65:9e:90:10:77:e1:a8:b3:69:3b:a5:a8:
e6:ff:1a:d5:59:c2:66:15:50:99:c0:f2:66:aa:c4:
9f:50:ac:8f:a9:83:e0:c7:54:30:be:ce:91:5a:41:
0d:c7:fe:42:b6:44:b6:6a:29:49:ad:92:00:f7:a8:
31:64:6b:74:0a:0e:2e:1b:de:0f:bb:47:32:12:b7:
f5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C9:99:C5:FE:51:4B:8F:89:2E:47:C9:99:82:F6:03:D4:33:F4:86
X509v3 Authority Key Identifier:
keyid:85:46:AF:18:F7:07:8A:AC:00:C2:FC:D2:CA:67:F9:32:80:21:7E:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUavGPcHiqwAwvzSymf5MoAhfhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1a6888-b9ad-4b81-b935-6beaee5b58a3/1/hUavGPcHiqwAwvzSymf5MoAhfhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1b:64:7e:27:19:0a:88:f0:e2:d5:71:93:8f:f1:f3:5c:37:
3c:ae:2b:1e:de:f2:a9:a9:73:b2:07:24:aa:6a:b7:99:ff:ac:
ce:de:b1:b8:4b:66:b3:b6:d7:e8:a8:ac:a2:64:30:69:40:51:
3c:19:c8:d6:fa:32:d8:a1:08:87:b4:d2:8d:34:8a:39:c9:c4:
c2:3c:6e:d4:98:50:4b:40:a7:8c:fd:d0:20:f8:7c:55:81:2b:
c5:8a:78:e0:31:44:9e:64:d1:e0:50:a8:3b:ac:d8:9b:a4:6e:
1c:80:e3:3f:4e:85:b4:92:04:b5:65:6f:c1:b1:9b:da:7a:8b:
9e:50:a6:af:a9:6a:27:b6:8c:7f:92:cc:ac:89:76:7d:7f:8c:
f5:18:bb:a7:55:68:8a:38:cd:ec:7b:72:8a:55:1a:29:78:e9:
41:8a:a3:f7:04:d2:57:c8:84:a4:84:e4:99:23:f9:58:6e:95:
36:61:72:01:6c:73:bb:89:85:01:58:b3:4e:e8:b6:69:9a:85:
f9:15:af:15:97:5d:e5:f9:e2:9a:d2:4a:6c:33:25:8a:65:de:
ac:8d:b1:e8:d3:75:ff:34:79:34:92:c8:ac:16:df:93:37:80:
56:14:0f:02:08:45:89:8a:56:54:c5:b7:46:05:7e:f6:6e:3a:
98:be:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:05 2025 by rpki-client