Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
File: hAfwBj7przHYfP5lubwZPrQsiWk.mft (raw, json)
Hash identifier: iPjgrCIpmrSlVw6WgcvuZeHMclO0cVXmcPu6+9ba6hg=
Subject key identifier: 69:7D:61:6C:4A:D8:4C:4F:1E:40:F6:B2:4C:88:2E:B4:5A:33:C2:02
Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Certificate serial: 01965D5F774127550A7EE65A0BA577650A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
Manifest number: 0566
Signing time: Tue 22 Apr 2025 12:00:59 +0000
Manifest this update: Tue 22 Apr 2025 12:00:59 +0000
Manifest next update: Wed 23 Apr 2025 12:00:59 +0000
Files and hashes: 1: Z7UyGu5eAyy6eE2IZXWBPwAGCsY.roa (hash: 69ViYIsd0St7iG615BWi/I8unIJ08lLoNoGfAWMd13A=)
2: hAfwBj7przHYfP5lubwZPrQsiWk.crl (hash: AHa8RP0Hdn+rTCZVSt57bsFwxjWjIPjSEjJECnz3Rg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:77:41:27:55:0a:7e:e6:5a:0b:a5:77:65:0a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969
Validity
Not Before: Apr 22 12:00:59 2025 GMT
Not After : Apr 23 12:00:59 2025 GMT
Subject: CN=697d616c4ad84c4f1e40f6b24c882eb45a33c202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:e5:1d:ce:f2:e3:39:5c:73:f4:6d:53:57:
85:6f:0d:c2:62:d0:ac:76:55:e3:d6:e4:0c:19:bc:
c2:43:57:7a:66:55:bc:16:f1:4d:36:c5:f2:22:9e:
3e:f1:c6:c9:ef:fb:94:42:55:8d:93:12:83:8b:b6:
08:d6:ad:5c:7d:5f:2e:33:9e:2f:aa:5a:e3:36:20:
eb:52:f2:a4:1a:3a:c6:02:51:ea:a5:95:b3:3e:7a:
0c:8e:2e:80:4d:49:6e:91:ec:96:1c:cb:7b:1a:c0:
48:59:ef:b8:32:bb:73:40:d4:ea:7c:4a:4c:55:17:
49:25:99:1f:7e:4c:29:da:7d:b4:a5:a8:01:52:9e:
2d:2c:aa:b8:be:90:de:00:a7:67:c9:33:3d:f8:2d:
f2:b2:1a:3d:96:d2:b8:d8:2a:29:f8:56:af:a9:fd:
45:03:0f:3a:5d:3f:2a:9b:59:eb:2b:1e:c1:9a:95:
8c:97:9b:19:8c:af:71:6d:4e:d2:87:bb:f8:b3:ca:
df:d1:ae:00:d1:26:d7:bb:e4:cd:5a:1d:c7:c0:99:
e3:84:94:b4:9f:1c:7b:ad:02:54:4d:91:7b:f2:bd:
5d:4a:9d:55:7f:7c:1c:09:11:80:ac:09:89:59:bc:
d7:35:26:86:b4:6a:0a:22:b1:bc:bf:41:c3:bd:95:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7D:61:6C:4A:D8:4C:4F:1E:40:F6:B2:4C:88:2E:B4:5A:33:C2:02
X509v3 Authority Key Identifier:
keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:04:da:01:64:97:19:31:2b:29:69:f4:bb:d4:a5:17:40:7a:
05:ef:29:70:9f:01:1b:ed:f9:fd:1e:45:89:14:6f:66:36:b1:
76:e5:77:59:e5:01:05:d5:1b:05:0f:6c:5d:4f:76:96:7a:ba:
63:27:e1:ae:f3:2c:c2:65:85:19:4f:10:de:d8:50:03:87:fa:
4b:a1:6a:41:a4:19:52:13:b4:8d:81:8c:9d:48:1d:c1:3c:25:
73:84:66:6a:56:dc:d9:e0:f1:00:c5:ab:61:44:21:e6:e9:d2:
09:03:80:02:dd:4d:fc:1c:57:b9:a9:7a:6e:66:24:f4:2b:5b:
39:35:67:fc:4a:fd:3b:5e:a4:5a:4c:74:33:8f:14:14:30:c2:
10:fe:9d:70:2d:d2:7a:40:60:97:c0:44:e5:06:cd:8e:05:1a:
16:9a:9d:df:16:50:06:c8:2b:74:78:23:cf:22:7b:0f:de:66:
98:15:bc:06:58:76:f1:a1:08:6f:cb:3d:ff:ea:29:fe:41:6c:
ff:8d:80:70:fc:61:a1:73:f1:6a:d3:e2:91:2a:c7:ae:a9:80:
7d:1b:ff:0f:f0:e1:90:8e:b5:9a:0c:d6:fc:51:df:ee:3c:d8:
10:29:2e:b1:ab:e0:06:6b:ad:5b:62:96:0b:ce:cf:33:ef:0f:
f7:f6:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:16 2025 by rpki-client