Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
File: hJG76s9bDFiembk_hOHF5H2a9gQ.mft (raw, json)
Hash identifier: 4Be6fnFZiQeyAFnGdjkqTCChUSkPIV2YA+j2irhM0QQ=
Subject key identifier: 81:FB:9D:74:2F:79:38:AB:0B:EE:66:EC:69:E4:D0:90:E6:2E:5D:C5
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial: 01965A274D4E9CFB7EF1BBB41261E8185C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
Manifest number: 0AFF
Signing time: Mon 21 Apr 2025 21:00:47 +0000
Manifest this update: Mon 21 Apr 2025 21:00:47 +0000
Manifest next update: Tue 22 Apr 2025 21:00:47 +0000
Files and hashes: 1: QpSqb6NaQUo2aw3LPuosxHd4Wqs.roa (hash: euL9pnyKB7Cxdfldh990cg3q0bj2BEOIXY3BCjW3Vt4=)
2: hJG76s9bDFiembk_hOHF5H2a9gQ.crl (hash: An2e/hClNoufFSlpdE4fUVLuDtE8h0VdKTMUq3hqK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:4d:4e:9c:fb:7e:f1:bb:b4:12:61:e8:18:5c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Validity
Not Before: Apr 21 21:00:47 2025 GMT
Not After : Apr 22 21:00:47 2025 GMT
Subject: CN=81fb9d742f7938ab0bee66ec69e4d090e62e5dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1f:61:5d:26:93:21:16:96:c0:13:7e:83:d7:
5f:1d:f0:dc:01:ce:7d:67:89:7b:07:03:ad:d3:15:
8f:7e:85:6c:7b:0c:bb:31:01:1c:be:55:f0:20:ab:
e3:5c:33:db:fd:22:ba:0d:6a:90:ae:b9:1f:f6:9b:
d8:7d:d7:3b:55:0d:a9:7d:17:b0:f9:6c:56:cb:65:
60:0a:50:ca:f5:3a:0e:d1:b0:5a:1a:eb:f9:12:d5:
0b:3e:03:3f:d3:0d:7b:03:43:db:44:0e:5d:d2:42:
6e:61:f9:19:96:ae:ae:a1:90:eb:60:4e:35:e1:60:
35:d9:f9:41:65:f4:77:6b:9e:16:ba:cd:6e:cc:ed:
22:95:38:b8:72:ba:33:9b:6f:a8:ca:45:21:54:26:
b5:e4:dc:42:94:8f:1f:b5:19:6d:e6:40:f1:6f:2d:
f2:7c:14:63:82:0d:7b:7d:2c:1e:ae:0d:9e:93:4b:
91:2c:1c:69:9d:cf:3d:89:7a:43:89:25:f5:18:1f:
41:c1:1a:3e:43:20:06:7c:a9:0e:c3:4f:ed:bf:19:
ac:55:30:ec:82:5c:cf:ef:0c:ed:22:b5:a7:14:87:
d4:9e:75:37:dd:45:59:93:9d:ea:da:e7:0e:f7:0c:
50:9e:23:17:37:69:3d:77:b2:bb:16:8b:f0:e0:9a:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FB:9D:74:2F:79:38:AB:0B:EE:66:EC:69:E4:D0:90:E6:2E:5D:C5
X509v3 Authority Key Identifier:
keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dd:2c:b0:7f:d9:50:52:af:73:42:bb:1c:c1:b7:37:7b:06:
96:68:c2:29:32:bd:d6:66:6f:64:d1:9e:1f:9e:71:13:d2:5c:
b1:d2:18:7d:7a:5f:1e:7f:89:30:40:61:66:34:75:c2:18:0e:
a2:f6:8f:8a:b6:87:8a:0a:17:a0:9f:ce:eb:ed:81:a0:b9:4c:
ef:86:8a:4e:af:43:ec:eb:bd:57:8e:90:be:78:ad:e6:a7:2c:
2a:9c:c9:0f:83:b2:64:bc:a5:ec:3e:e3:b5:ff:00:3f:5c:dc:
aa:3e:85:59:1c:16:e1:1a:24:28:28:05:e3:29:73:1d:0e:aa:
25:79:ce:48:a7:e9:13:14:a8:f3:fd:ea:8a:c5:b1:dc:e6:23:
07:c6:91:0d:9c:d6:4a:32:ca:f5:05:4c:b7:6e:1c:4b:6b:ff:
0c:11:64:69:7b:0f:26:42:1d:e8:c7:62:7e:2a:33:77:80:5d:
9c:95:22:df:4d:67:07:69:02:19:e6:6c:46:ec:b4:31:f8:b2:
27:1c:38:d1:39:10:08:34:23:63:77:80:31:1d:52:6c:05:8c:
03:63:e3:9d:e6:2e:5e:d1:a9:3b:d1:f5:35:57:60:88:1c:3b:
f1:1a:5a:47:c8:c2:0a:50:74:2c:22:2d:1a:45:57:24:75:e0:
bd:d0:93:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:44 2025 by rpki-client