Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
File: HQrO6hf1PecI-ac6vAyHFk0gfQg.mft (raw, json)
Hash identifier: f0xsWBcM252LnqS+wntZKWQOKvPUuniBvt1Vtx3iGbo=
Subject key identifier: AB:02:0E:25:1B:7A:89:F9:FC:3B:94:8D:9B:37:62:F1:F2:81:AC:1E
Authority key identifier: 1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
Certificate issuer: /CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Certificate serial: 0196515BA0E1B36CD3FF09D821F94F47CAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
Manifest number: 121F
Signing time: Sun 20 Apr 2025 04:01:21 +0000
Manifest this update: Sun 20 Apr 2025 04:01:21 +0000
Manifest next update: Mon 21 Apr 2025 04:01:21 +0000
Files and hashes: 1: 9zhTOpiuNqKnk778yI8rOgQQ8-A.roa (hash: ABWXF/FnYjdj8H9UnlqrtLWEbBYpls+daSI459eMuZM=)
2: HQrO6hf1PecI-ac6vAyHFk0gfQg.crl (hash: qCngYvIt+mtTakljMoksi+2C8dQRl5M/oTSplzzbT1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:a0:e1:b3:6c:d3:ff:09:d8:21:f9:4f:47:ca:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0aceea17f53de708f9a73abc0c87164d207d08
Validity
Not Before: Apr 20 04:01:21 2025 GMT
Not After : Apr 21 04:01:21 2025 GMT
Subject: CN=ab020e251b7a89f9fc3b948d9b3762f1f281ac1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:3e:f4:15:03:24:9a:b0:74:dd:b9:e5:33:31:
42:ac:f2:c6:13:d7:da:63:ed:52:31:3c:2c:ff:84:
b2:08:11:01:38:00:ec:46:aa:0f:d3:9f:82:fe:d2:
51:d1:88:0a:72:02:7a:ee:ed:1d:e9:81:4f:96:f0:
34:21:aa:c3:07:7f:dd:01:d6:c8:07:5d:d1:2c:1e:
83:a5:38:31:5b:f0:29:b1:42:7c:0d:de:b9:3a:02:
c6:ff:d4:94:d8:0d:3c:a2:38:79:43:ae:55:98:90:
a3:30:c2:08:07:ec:eb:a9:c0:06:57:e7:91:9b:c7:
17:d4:71:66:90:88:1c:b4:1a:79:39:4f:38:fc:f1:
ec:d9:5e:98:02:29:76:56:c7:eb:a1:d7:fc:97:a0:
f3:68:bc:f7:69:57:1d:57:df:d1:3c:98:80:a3:71:
d1:a4:2f:39:24:d6:c4:47:51:b7:f5:08:cf:8b:53:
af:b9:28:5a:9a:b0:af:61:43:fb:fe:c0:b9:5a:80:
ff:b5:1b:41:b6:11:fe:56:09:5e:bb:39:93:bb:34:
5b:40:f7:d7:ba:f0:90:bc:f2:e4:8e:b2:4b:52:95:
ad:0a:dc:50:3c:c9:93:80:e0:43:8a:b4:28:1a:0b:
92:43:9d:04:d5:e6:98:9e:78:5d:59:f8:38:ed:f8:
40:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:02:0E:25:1B:7A:89:F9:FC:3B:94:8D:9B:37:62:F1:F2:81:AC:1E
X509v3 Authority Key Identifier:
keyid:1D:0A:CE:EA:17:F5:3D:E7:08:F9:A7:3A:BC:0C:87:16:4D:20:7D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQrO6hf1PecI-ac6vAyHFk0gfQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da56f6-1cf2-4388-96fa-c6bcca721471/1/HQrO6hf1PecI-ac6vAyHFk0gfQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:79:81:d8:1f:c5:ce:6b:59:40:a9:d1:a3:35:75:f2:bc:74:
c8:b0:7d:c2:dd:2d:93:80:3b:20:c6:5c:1e:ab:4a:fd:cc:9c:
c2:d3:61:e5:ed:d0:27:8c:12:af:58:ff:4a:03:10:25:af:5b:
03:28:fa:ed:3d:9e:4a:0f:c1:8b:bd:61:f5:92:f4:3e:3c:ad:
13:72:12:d2:47:85:28:8a:7a:cf:81:43:02:ca:28:9c:90:28:
93:a6:6e:c3:16:44:bc:3b:fa:4e:d1:1f:cc:84:94:55:68:12:
05:20:7a:1a:47:bc:0f:b6:7b:84:22:81:ea:3e:11:f4:6d:c9:
be:e1:d2:ab:fa:e2:15:b9:b6:e1:50:46:0d:ca:c3:4d:ce:e2:
c6:38:6a:6e:68:3d:a5:9e:39:d6:83:8c:ba:d6:5a:e0:43:3a:
f0:fa:b2:05:e1:2f:36:00:42:9b:08:85:b7:d0:24:8d:cb:a5:
74:93:65:f2:a7:4a:73:7c:c0:3b:28:ed:6f:d5:54:e0:61:90:
89:7e:74:68:a3:ee:bf:40:53:19:18:eb:b6:92:fd:13:33:e8:
24:0a:28:9e:8b:67:c2:a9:50:e7:ac:a7:7a:0c:a8:4c:e7:47:
ec:10:81:1b:40:a1:ab:ab:3d:7e:ce:93:30:5d:25:49:2f:e0:
73:e3:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:55:34 2025 by rpki-client