Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json)
Hash identifier: CZuBWHQMFxhqV4yu+eRr7N6AAmgb+jhVecWyoMOvcTg=
Subject key identifier: B3:B5:BA:7D:C0:B9:A5:93:E2:C5:A7:CA:C8:F2:D4:32:FB:50:51:89
Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f
Certificate serial: 01964EFE8A1BE8DA20CA5F40ED9A3706E8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
Manifest number: 06A8
Signing time: Sat 19 Apr 2025 17:00:26 +0000
Manifest this update: Sat 19 Apr 2025 17:00:26 +0000
Manifest next update: Sun 20 Apr 2025 17:00:26 +0000
Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=)
2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: +/xQVLSrR2EV7GXzzxRQrpAtwTf8nQaSy1uA6qvkqCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:8a:1b:e8:da:20:ca:5f:40:ed:9a:37:06:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f
Validity
Not Before: Apr 19 17:00:26 2025 GMT
Not After : Apr 20 17:00:26 2025 GMT
Subject: CN=b3b5ba7dc0b9a593e2c5a7cac8f2d432fb505189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:a0:8d:ec:57:57:1c:bb:13:a9:5b:19:be:
4f:6b:4e:af:08:69:49:71:22:dc:a6:10:78:ee:bd:
a5:8a:84:e1:f7:78:48:21:2d:19:6f:76:a3:e3:d3:
7a:21:b8:f9:c1:3b:97:42:85:cf:fd:df:8a:79:58:
21:f4:63:1b:64:83:6b:d0:cb:87:87:6a:3a:da:28:
79:22:6f:ff:fc:d2:c0:44:2c:dc:4b:c3:03:05:be:
d7:99:1a:39:c0:0b:7f:1b:ea:fc:1d:fd:bf:3c:0b:
e2:55:d5:27:46:c7:28:14:9e:93:a5:d6:ed:e6:d6:
71:ea:74:cf:da:f3:fb:ad:cf:68:bc:80:26:c0:f0:
43:60:06:88:33:e8:80:f0:1f:23:00:0f:ef:79:ea:
d3:db:9d:0f:2d:e3:bd:ec:99:45:c7:e2:b7:28:8f:
02:5c:cc:63:ab:57:34:0d:b9:9c:2a:85:0a:e7:af:
18:8b:3e:1c:f0:c0:5e:49:5d:ba:2d:9e:b2:7f:7f:
19:74:7d:96:f2:dd:d8:83:ad:f1:fd:48:57:c0:50:
5d:b4:70:47:4a:45:b3:38:8e:a9:43:ff:3a:e1:69:
94:50:71:55:a4:42:09:f5:07:cc:a7:c1:d8:7a:45:
9e:12:70:c4:94:a9:11:67:a9:25:b5:ee:8a:a2:9f:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B5:BA:7D:C0:B9:A5:93:E2:C5:A7:CA:C8:F2:D4:32:FB:50:51:89
X509v3 Authority Key Identifier:
keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:37:f2:fc:8b:b6:35:38:3a:12:9c:b9:b2:40:ac:89:29:b5:
f0:48:33:e6:62:2f:d9:ee:e4:8f:c8:b1:40:02:19:8e:f0:46:
f4:41:c2:1b:b1:83:ad:3f:95:21:87:73:93:43:b9:65:0f:c4:
c6:b3:ff:d4:98:aa:19:79:b7:6a:9d:a8:a0:cb:21:fc:37:77:
d5:58:35:d9:e5:61:06:ac:8f:7a:a3:78:0a:6c:68:78:8a:60:
a7:14:30:c3:94:99:74:53:18:42:cf:e4:36:c2:93:2f:01:c4:
29:9d:ca:f4:20:cd:cf:ef:f2:64:30:6d:66:59:52:ae:17:21:
fc:87:10:af:8c:77:5d:73:7e:91:c7:8a:b2:ca:40:64:8b:39:
3c:4d:9c:a4:30:a2:2b:b2:32:0f:c7:ca:1c:6a:da:93:18:c8:
29:c6:86:af:ca:db:a3:5c:e0:fb:e4:f9:91:bd:65:c6:e4:5b:
58:5f:b3:9d:1a:b7:53:a5:dd:dd:15:41:6c:6a:a0:94:a7:ba:
a6:c1:65:09:10:5a:a7:c6:ad:27:2b:96:b4:62:e9:3d:53:de:
9c:6d:31:2f:10:74:01:82:79:75:c9:40:71:a7:4b:3e:f3:5d:
2e:a8:31:9c:07:8a:c5:d4:93:ab:c4:aa:7d:f2:ce:2e:82:27:
63:48:1a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:09:03 2025 by rpki-client