Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json)
Hash identifier: Su4uPrw1bLimuIl9Y4OKJoxb0ZJXHwsBXLWHeYs/SPA=
Subject key identifier: 94:B2:3B:42:37:C2:7F:8A:4E:21:4C:36:00:78:7E:01:D9:F7:59:01
Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Certificate serial: 01964DEC106314CB607283DCF31FDA992090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
Manifest number: 0748
Signing time: Sat 19 Apr 2025 12:00:38 +0000
Manifest this update: Sat 19 Apr 2025 12:00:38 +0000
Manifest next update: Sun 20 Apr 2025 12:00:38 +0000
Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: ZilptKk443a3osrmVgm4PKM3n9QiYlL8e3bK30wWUxU=)
2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:10:63:14:cb:60:72:83:dc:f3:1f:da:99:20:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77
Validity
Not Before: Apr 19 12:00:38 2025 GMT
Not After : Apr 20 12:00:38 2025 GMT
Subject: CN=94b23b4237c27f8a4e214c3600787e01d9f75901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:87:3c:86:02:cb:15:9f:e6:d4:00:17:57:
53:75:3f:ab:7a:b2:46:0a:d5:2a:a2:b2:fe:a2:5a:
2d:a1:25:f6:7d:5c:21:50:48:1e:ca:21:05:bc:f1:
5f:b2:79:8b:ed:6e:93:8e:fe:76:07:15:c7:05:d9:
64:e4:50:e7:07:a9:d8:bc:d8:36:40:7b:80:c0:5d:
1c:ee:4a:f3:92:89:0f:6c:32:91:d4:98:8c:32:47:
8b:90:3a:60:41:f7:21:a3:58:93:06:49:87:18:89:
f7:9e:75:00:5e:a0:eb:bd:74:b2:18:1e:e7:12:4b:
50:14:c1:da:39:20:26:9f:b3:36:cb:eb:04:59:7e:
32:ef:2d:e6:cc:c1:3b:09:c7:06:84:e3:15:bd:e3:
65:7f:99:fd:c0:fe:1c:4d:fc:ef:fb:99:d5:6a:00:
31:24:67:60:d8:79:19:57:ad:29:de:79:4a:aa:58:
65:a3:69:7c:b9:63:87:e8:bf:9a:d6:c9:16:5b:bf:
c2:96:fc:dc:ad:43:3b:be:b2:44:35:e3:e9:78:b7:
00:a4:44:cd:22:75:c7:5e:9e:99:1c:bc:b8:24:bd:
7c:9a:7c:0c:16:7b:4e:ec:36:0e:57:14:ad:61:59:
82:2d:16:6d:fb:90:c4:80:11:01:b7:8b:e7:c6:71:
9f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B2:3B:42:37:C2:7F:8A:4E:21:4C:36:00:78:7E:01:D9:F7:59:01
X509v3 Authority Key Identifier:
keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1d:c2:d3:27:05:5a:a1:c8:0f:02:73:c3:b5:da:be:c2:c3:
04:cc:4d:21:9c:3a:29:01:8f:f9:1a:c9:12:ea:40:6b:99:02:
39:38:f6:f7:2d:54:e0:a9:d3:15:04:dc:83:c0:3a:81:b3:3f:
b3:56:76:04:49:8f:c5:b3:29:8d:7d:b5:80:14:80:1f:9e:48:
30:b1:e7:f8:41:b8:a6:dd:5f:6e:cf:a4:03:aa:38:56:c1:6f:
1d:35:2c:15:56:6c:70:4a:eb:90:d6:8d:bc:02:f2:5c:81:7e:
3c:94:de:91:bc:9f:a9:36:44:58:02:8f:06:92:e8:f9:e6:c6:
13:e6:b0:d9:0c:f4:10:44:70:9f:ea:8f:2a:bb:d1:24:c1:f5:
9e:cd:17:f2:b0:8a:93:9a:15:7d:04:84:c1:12:b8:2f:98:70:
7f:9e:ce:2a:68:2d:89:c9:24:9f:bc:56:f9:a8:9f:01:c5:30:
de:80:33:39:b6:6f:5b:f6:9a:3c:27:58:ac:8b:5a:0b:79:fd:
2f:cb:77:5c:e9:f4:39:79:3d:c8:61:55:64:dd:a9:fc:c4:34:
a1:85:17:60:70:a0:24:5f:45:5f:1c:28:dc:05:7b:ef:eb:17:
e0:17:1b:66:c7:04:87:7d:60:b9:c4:03:82:4e:9b:70:56:3d:
7f:22:33:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:15:25 2025 by rpki-client