Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: o1HXq2N9oQIQCYKADkqzn4ii5ddmQqEj0qp4O5AHxUs=
Subject key identifier: 49:B0:9E:44:01:52:0D:1B:0B:61:3A:BE:B2:13:09:BE:0C:B5:6F:5A
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 01962DF44FD440457DF82392937AA67BFAF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 14ED
Signing time: Sun 13 Apr 2025 07:01:47 +0000
Manifest this update: Sun 13 Apr 2025 07:01:47 +0000
Manifest next update: Mon 14 Apr 2025 07:01:47 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: iptu2IePqSvrP7aRjpvaLuMjYX9aWqvhMAhHuXMfxnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:4f:d4:40:45:7d:f8:23:92:93:7a:a6:7b:fa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Apr 13 07:01:47 2025 GMT
Not After : Apr 14 07:01:47 2025 GMT
Subject: CN=49b09e4401520d1b0b613abeb21309be0cb56f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:57:f4:b1:10:24:e2:42:f8:5b:57:45:23:
53:9b:81:c1:06:ba:3a:37:90:c9:f9:c0:01:38:aa:
20:d5:40:e5:c8:7e:cb:41:12:99:83:b2:fb:bd:d6:
fb:68:1c:57:4f:c3:23:1a:1a:e3:a6:52:da:ab:a8:
a2:52:50:bf:3d:61:bf:2c:40:04:26:ae:06:bd:ea:
84:b9:0e:20:cb:78:0d:b6:67:48:f2:82:0c:47:5c:
c9:f9:73:55:76:13:73:40:1b:20:6b:57:d6:b2:62:
5c:ba:68:bf:51:7f:9b:03:07:1d:8a:33:96:5f:f2:
ea:7d:6f:2b:8b:36:ba:f8:ae:8f:82:f7:f3:29:23:
29:40:d5:65:b6:85:2d:22:a4:b1:40:38:8d:c1:41:
b5:18:bb:84:75:f2:60:98:a2:71:ec:53:be:b0:c0:
8a:88:a6:d1:8b:ef:45:d9:2f:00:58:9b:55:04:86:
27:32:77:26:27:6e:2f:f1:b1:ec:eb:64:a8:3a:d1:
b4:a2:10:8a:5e:a5:cd:19:cd:d0:6c:b9:50:fe:73:
fd:70:cb:3e:af:d7:7c:14:cc:bf:d9:8d:b3:6e:bf:
6e:22:95:72:63:9b:ea:39:42:c3:3b:35:70:f4:2e:
c6:a1:2d:48:ad:e4:c3:3f:3c:d5:fc:2f:84:fc:22:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:9E:44:01:52:0D:1B:0B:61:3A:BE:B2:13:09:BE:0C:B5:6F:5A
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:59:65:a4:26:c5:23:2b:1c:ad:82:a7:b8:2c:fc:c9:46:b7:
f7:99:7d:0e:4f:82:5f:f7:d9:d0:88:2e:f5:ef:05:22:78:02:
b8:f5:c4:b2:05:76:83:69:ed:67:91:31:32:6a:b3:b0:88:17:
b9:9d:7b:cd:e3:d3:80:a7:46:7f:ac:e6:50:fd:0a:54:67:c0:
5e:d2:77:0c:39:26:dc:59:79:ab:b2:c2:c7:4b:54:d2:24:0a:
c5:62:16:84:8e:6f:31:0e:65:74:98:8b:f9:ed:f2:97:54:2f:
95:c7:32:a0:81:5a:30:56:ab:e8:e6:4c:3e:3d:e1:98:a4:36:
d0:97:d8:61:b5:02:98:e8:32:9f:14:6c:b1:24:c6:5f:9c:02:
1f:10:4b:77:25:50:69:54:ef:ef:7d:73:7c:e6:f2:00:7e:b7:
bb:97:a6:28:38:c9:18:0a:00:2a:4f:55:f9:20:2d:0b:bc:99:
c6:50:78:9b:0d:68:47:41:ee:a9:cf:4d:b9:de:1c:10:7d:19:
a3:90:dd:7d:91:25:76:fd:fd:e3:06:2f:27:ee:17:1f:1a:38:
a1:67:1b:89:e6:19:e7:1d:7a:2c:02:9c:b3:3d:02:87:3e:78:
25:ef:a0:89:9b:b5:21:78:cf:f7:91:56:d9:7d:b6:20:44:82:
56:4b:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 08:47:02 2025 by rpki-client