Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: zWyOhZcumaQgLliC4zMqIGAkwcoDRc/fsrw9Ps40DVw=
Subject key identifier: 12:9F:5A:B9:29:95:2E:90:65:35:DB:21:5C:B6:1C:3C:62:4D:63:89
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 01962904BDDE4BEF691D52BA111E97CF2731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0DF2
Signing time: Sat 12 Apr 2025 08:01:38 +0000
Manifest this update: Sat 12 Apr 2025 08:01:38 +0000
Manifest next update: Sun 13 Apr 2025 08:01:38 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: LbhZMBeDnr1qMQnMxvTged4AkBg.roa (hash: emzGjVkdxSZb/ajPZYnZYJApon4Jb9kZGLpvd1zwrzU=)
3: P4l18X0E6wGAiypR58C2CsBAfew.roa (hash: V35a2kBLapjAgjmC/NuotWMp7OBF1Qv4aZCQYf/dZTg=)
4: YfG3Zer9S1-dTwVZ058bt2jGz7A.roa (hash: 2aerzGz5WDeQmLCPvnO2oE90pi2KsboywKSSiTQQgEI=)
5: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: U/cGuZ6VhK4qdabltx+Xm49J4XkJuzN3FsSCNTvUhzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:04:bd:de:4b:ef:69:1d:52:ba:11:1e:97:cf:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: Apr 12 08:01:38 2025 GMT
Not After : Apr 13 08:01:38 2025 GMT
Subject: CN=129f5ab929952e906535db215cb61c3c624d6389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:99:02:82:e4:15:53:c6:cb:02:de:15:34:b4:
15:73:4f:bc:8d:51:26:3a:d3:88:45:97:a6:76:ef:
f1:c0:f8:73:69:3c:bb:7f:36:8d:a7:9e:d1:65:90:
2b:c0:06:8f:28:3f:19:cc:ce:65:63:83:c5:91:cd:
35:5d:63:bf:0b:94:12:91:5f:8d:ef:4d:cf:43:d6:
63:0b:5f:d2:26:9e:0e:2b:82:43:fd:f0:f7:76:95:
61:57:36:b2:a5:01:4f:95:6e:01:8d:b8:f8:99:f0:
bc:94:db:6b:5f:b4:45:17:4a:2c:1c:8d:d7:8b:2a:
cb:51:de:d6:39:9b:08:c2:19:6d:48:92:0a:63:5c:
75:b6:9b:80:9b:d4:65:b8:2f:e2:91:2c:6a:2e:20:
4f:8d:a4:ec:94:1b:6c:c6:92:1d:bf:17:91:ac:7b:
c6:9e:93:d0:1e:5f:d6:5f:91:69:aa:3a:65:c3:61:
9e:3c:f2:4d:f2:bb:66:db:dc:bf:75:a3:cd:c1:d3:
90:2a:b1:a4:fa:84:45:c2:b1:f3:f9:b6:5a:67:d4:
a9:d5:60:38:94:21:aa:ce:42:fa:0e:f6:2a:62:b3:
f8:f2:cb:18:94:07:06:e0:d8:fd:40:2f:e3:fc:9c:
3f:48:69:59:2e:54:fc:9e:71:4e:4c:f9:ac:65:17:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:5A:B9:29:95:2E:90:65:35:DB:21:5C:B6:1C:3C:62:4D:63:89
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:28:73:3b:ab:33:ba:bd:6c:6f:10:02:9e:42:2f:a7:9e:8f:
51:bd:31:4f:44:fd:1e:1b:e6:02:24:f5:14:5e:86:e4:79:82:
ea:c6:29:93:23:6f:cb:57:2c:21:7f:e8:23:0d:a9:36:cd:76:
8e:43:62:3a:ef:5d:6b:81:46:2f:a0:17:ae:b4:0b:e5:84:a2:
34:94:ef:f6:39:48:88:c9:32:d7:59:79:57:f7:e1:1a:12:9a:
84:ca:da:01:94:2d:95:d6:f4:57:db:b5:31:f4:00:be:b6:79:
04:7c:ff:9b:a2:5d:ce:fe:a4:4c:05:f6:c2:db:da:17:a1:9a:
b5:0f:f9:68:2d:b3:3d:02:da:37:b5:84:e6:0a:a5:38:e7:fa:
f6:69:d9:b5:ff:ac:4d:bc:02:0f:e1:9c:cc:c9:f6:fe:c1:d7:
3c:8a:e4:2e:b0:99:50:41:69:58:0f:d4:cc:a6:20:d7:a0:06:
fd:d2:cd:fa:15:f3:45:28:27:06:7c:21:f6:a0:67:5f:3d:81:
1d:ff:af:09:db:72:8d:12:ca:cc:87:be:81:7f:8e:f3:c2:13:
cf:08:77:a5:ec:7f:2e:64:08:d3:c9:0a:51:7e:54:c6:04:85:
48:b6:1e:0f:f5:02:b4:a0:fb:ce:8d:ff:03:2e:b2:85:a0:38:
b4:12:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 18:20:56 2025 by rpki-client