Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
File: hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft (raw, json)
Hash identifier: FXl/Ek1hzJyH50r111NqpEOYRrC79+B3nPl5Vp3g0nQ=
Subject key identifier: FF:C3:7D:88:B3:E9:E6:FC:E1:66:9F:A2:9C:4A:31:D6:83:8E:B7:52
Authority key identifier: 84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
Certificate issuer: /CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Certificate serial: 0196556E99DCECF59D3F8506CB8B3DAD4F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
Manifest number: 10D9
Signing time: Sun 20 Apr 2025 23:00:33 +0000
Manifest this update: Sun 20 Apr 2025 23:00:33 +0000
Manifest next update: Mon 21 Apr 2025 23:00:33 +0000
Files and hashes: 1: hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl (hash: EnIt/IK/49epZz3fHoTT8OyPbJDDL8hwJ9iI9fWUjeE=)
2: pNHLiZosFPLwAP2_39dVXVedoA8.roa (hash: 21Dk8gbrcOnUWwtpjgoXFZDgkCZkwg2MK05wmg5NEPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:99:dc:ec:f5:9d:3f:85:06:cb:8b:3d:ad:4f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847dc765d1a039e6fbd6b8fbb64d07d58bf584f5
Validity
Not Before: Apr 20 23:00:33 2025 GMT
Not After : Apr 21 23:00:33 2025 GMT
Subject: CN=ffc37d88b3e9e6fce1669fa29c4a31d6838eb752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:77:3d:97:23:76:9f:80:42:00:e5:e8:fe:ad:
55:8d:d7:34:a7:7c:8e:7f:45:9e:e5:5e:32:fd:15:
76:c1:84:88:c0:6a:1e:6f:2d:d0:4d:8a:18:b0:bd:
15:a2:cd:30:fe:a6:58:e3:cc:fe:d1:8e:ff:98:2e:
8d:1b:9d:45:5f:ec:7e:19:af:21:2f:f0:da:07:ce:
6c:6a:4a:85:f4:ef:1a:17:5e:25:8f:57:90:d7:e8:
87:6b:e3:be:bf:fb:62:15:c8:73:b9:c9:1d:07:c3:
6a:ba:80:7b:53:f9:59:26:f5:82:03:bd:8d:84:81:
9d:3c:d2:e4:50:ca:25:f1:bd:76:b2:86:93:3d:4c:
85:a9:64:b1:5b:de:38:7e:b4:3c:df:2b:7e:14:8d:
86:03:ae:44:b3:28:ec:73:9b:e5:c7:60:18:ef:02:
14:b2:ce:17:da:c1:1b:29:8d:52:05:33:6e:d8:48:
1a:49:c8:b0:4d:63:57:1a:be:e7:f0:9c:cb:62:7e:
ec:13:52:53:a4:2d:b8:a0:49:f4:78:7d:08:fa:d5:
d8:5c:fa:7d:4f:e4:ee:83:df:94:74:73:10:3d:43:
24:51:8d:2f:f4:4a:47:d5:67:32:30:13:62:21:09:
eb:5b:91:14:f3:b6:2a:d9:a1:ab:06:7d:b1:c2:39:
a3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:7D:88:B3:E9:E6:FC:E1:66:9F:A2:9C:4A:31:D6:83:8E:B7:52
X509v3 Authority Key Identifier:
keyid:84:7D:C7:65:D1:A0:39:E6:FB:D6:B8:FB:B6:4D:07:D5:8B:F5:84:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH3HZdGgOeb71rj7tk0H1Yv1hPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7e5030-da24-4bbb-9b95-09cf7e72a033/1/hH3HZdGgOeb71rj7tk0H1Yv1hPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:3d:7a:89:27:df:a0:d0:fb:b4:d8:82:ba:6a:ed:76:b0:da:
6b:c4:8e:dd:3e:96:8c:27:d8:0d:a6:70:08:34:e1:39:3b:e1:
c8:84:bd:28:7e:ce:91:96:3a:63:43:97:ad:b7:ff:58:2f:b8:
dd:d3:9b:e6:7c:62:7e:bb:1c:a2:fc:29:01:ae:cb:cb:a7:0e:
87:47:38:c9:8d:d8:f9:c5:d8:a0:67:0f:da:8e:62:fc:a8:e5:
d4:4c:18:76:d5:1d:37:e5:f9:f1:14:a2:73:b9:c2:ee:cd:e7:
ec:d3:34:84:9e:77:2a:b5:74:42:1c:36:f2:a9:80:54:a4:ab:
0a:5e:fb:27:01:0e:77:35:0b:70:3c:f0:6a:e0:83:d8:ce:40:
4c:14:89:50:f2:e5:53:99:ea:49:db:56:d6:00:83:0f:7b:ae:
56:26:0c:a5:5b:f7:2b:d5:69:c0:27:88:67:7d:02:6a:72:76:
0f:40:17:c7:97:1e:f3:cf:3d:24:24:9f:59:b0:15:55:6c:73:
0a:e7:ab:dc:f9:cd:3b:70:72:4b:9d:55:c4:c0:15:7f:74:36:
b9:a1:06:64:4e:b1:7c:46:4c:b5:bb:10:86:bd:35:79:aa:e5:
9e:30:fa:92:e1:7a:42:50:84:96:93:00:a4:1a:39:ba:51:4d:
5a:0e:33:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:35 2025 by rpki-client