Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
File: hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft (raw, json)
Hash identifier: ajtQ4TfIlrmNteMCics3Cx7YRKrTlEDPeft0Lz1D7O4=
Subject key identifier: 37:66:86:CB:87:FE:8A:BA:0F:19:50:76:73:0F:07:6C:54:E3:36:55
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 01963CF8D16AFC7DB771B971D24A1930D5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
Manifest number: 0DF1
Signing time: Wed 16 Apr 2025 05:01:01 +0000
Manifest this update: Wed 16 Apr 2025 05:01:01 +0000
Manifest next update: Thu 17 Apr 2025 05:01:01 +0000
Files and hashes: 1: QHLCgk4OIA3HKocxUS-EXSCE4FI.roa (hash: yV8UUld/VXt38g/Ky73F72aPYFgkCIthD8ciRWDbTtg=)
2: hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl (hash: MYSFSDnOZW8eI3g2XR3h61JcwV7lQROD5xW2VqEqZh8=)
3: wackxg843szAJDW3YTcC-GuxdM0.roa (hash: +v9nhCSaoE2Niqmv8s/yOSkoRvQZ5BpadKRFSImJdxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:d1:6a:fc:7d:b7:71:b9:71:d2:4a:19:30:d5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Apr 16 05:01:01 2025 GMT
Not After : Apr 17 05:01:01 2025 GMT
Subject: CN=376686cb87fe8aba0f195076730f076c54e33655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:5a:91:d7:ee:e1:96:07:b5:0c:6c:8b:80:
98:69:a8:e1:ae:ba:50:35:e8:34:ef:2b:ee:66:65:
64:49:2a:89:b2:fe:09:f0:70:b1:50:3c:5f:89:60:
21:0d:ec:11:30:7f:e2:bf:97:22:21:ab:f5:de:c9:
e0:41:83:5f:e2:1e:8a:f4:ec:5e:82:a5:b0:cd:48:
f9:b2:ae:e5:38:b5:c8:40:58:67:2a:db:b2:49:7e:
f4:25:d6:b9:7b:97:64:44:35:93:dd:53:44:08:71:
a2:f1:bf:29:a0:d5:cb:8c:89:03:c1:81:94:ff:c0:
77:ab:00:c4:f7:58:9b:8d:4b:f5:45:51:4f:05:f1:
03:bb:27:18:9e:ab:85:b3:43:7b:4b:b8:24:3a:a9:
89:0a:3a:c0:af:e9:10:62:dc:9a:22:b3:a7:b0:8b:
89:96:d7:7b:92:42:01:2d:90:2f:f1:57:81:a1:b1:
f1:49:b0:ab:5d:d2:49:87:8d:09:00:ef:5b:f8:95:
20:0a:e5:0a:f8:bd:f4:54:41:a0:64:44:0e:57:4f:
88:03:e5:c2:4b:dd:44:45:da:9b:73:9c:f1:03:ae:
a4:99:65:f4:7c:2b:60:48:b0:61:74:c3:e1:92:ce:
0b:47:13:59:84:36:81:83:26:17:cf:7c:83:bb:7c:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:86:CB:87:FE:8A:BA:0F:19:50:76:73:0F:07:6C:54:E3:36:55
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:99:87:71:91:af:35:aa:71:1d:fd:3c:d1:2f:33:e0:d6:b2:
03:90:4f:4a:cb:44:94:91:f0:72:38:d4:3b:c5:86:c9:cc:d5:
87:05:d8:92:f4:b8:1a:56:ae:5f:09:41:e0:a1:f8:d2:d5:b0:
0e:d0:fc:a8:bd:17:a0:42:67:7c:8d:9a:f3:9b:06:cc:29:e1:
6c:c1:87:5b:2e:2a:49:6f:e7:91:76:38:85:bc:9b:77:bc:18:
21:4b:85:e6:6f:bc:43:51:c4:37:43:d6:b6:9a:5c:3d:94:c0:
5e:3a:cc:1b:b9:f4:89:12:ba:16:8f:c2:a8:7f:8a:05:83:89:
d5:a6:4a:a3:b8:20:33:60:50:e5:fa:c8:f5:c4:f2:f9:31:49:
4f:a1:1b:07:73:35:70:21:13:9e:2c:ff:e1:4e:c1:e4:95:6e:
10:31:71:79:19:01:3f:db:34:fc:e3:c8:ca:68:50:e1:54:f0:
09:4b:68:4f:97:38:77:89:1f:fb:42:23:39:64:5b:fc:74:be:
25:95:cb:f5:f1:ab:f7:20:82:14:f1:83:9e:6e:0c:45:26:d3:
c7:1f:64:5d:cb:0f:7b:c9:d7:1b:c4:0c:13:62:55:40:03:b7:
0e:30:29:06:db:13:d4:9f:3f:4b:ca:ee:c1:4a:9c:a0:01:8b:
ea:80:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:01:54 2025 by rpki-client