Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: o3SlS7qRboPARIml6C15lqKZ6eALCyNQFiaXYagR2AY=
Subject key identifier: 03:BA:86:95:FC:7B:A8:62:86:EB:9C:26:B9:36:9C:0C:D3:3A:14:AC
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 01964331E42D6B392F8E77B9A1D7E30CFC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 1388
Signing time: Thu 17 Apr 2025 10:01:05 +0000
Manifest this update: Thu 17 Apr 2025 10:01:05 +0000
Manifest next update: Fri 18 Apr 2025 10:01:05 +0000
Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: 8xZJxrTHNnibeRuH0Gi2AuAbDfG4csJG12xQluF9i38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:31:e4:2d:6b:39:2f:8e:77:b9:a1:d7:e3:0c:fc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: Apr 17 10:01:05 2025 GMT
Not After : Apr 18 10:01:05 2025 GMT
Subject: CN=03ba8695fc7ba86286eb9c26b9369c0cd33a14ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:23:70:02:c6:30:f4:81:96:41:a3:af:49:f5:
90:cd:9a:e0:78:77:97:79:be:02:d7:7b:8e:93:80:
ac:a1:01:e4:1b:45:24:36:58:b2:b7:84:0f:e8:b3:
ad:49:53:c9:8f:81:b8:4a:fb:51:82:19:c8:2e:b9:
70:0f:4b:67:58:df:d0:4f:9c:3e:d3:38:43:91:d4:
54:9e:cf:00:74:92:42:3b:ec:84:67:2f:14:34:40:
34:3a:1c:3e:ba:53:3b:3c:0b:ce:c0:7b:c1:5d:d2:
5b:63:c6:b7:5b:62:be:5a:de:e8:2a:6e:ea:53:ea:
11:a3:3d:3e:7d:13:9a:d9:77:b8:50:7b:c2:c1:98:
7b:96:00:65:c4:85:3e:ad:40:45:b5:38:98:e1:a8:
65:54:ee:1a:43:14:26:ed:66:11:c1:79:e5:9d:ef:
e1:5f:58:cb:09:b8:91:35:37:eb:02:c1:be:1b:2a:
cb:1f:3b:0b:69:2c:82:77:2d:d1:dc:00:83:b5:2d:
55:c1:4f:34:d6:97:a4:73:bc:bd:2a:ff:3b:0a:f7:
a7:b7:45:1a:88:f2:d8:87:07:68:68:29:f4:3b:b5:
f8:b6:5c:fa:5f:7a:c4:71:8f:0d:69:a1:cb:42:85:
81:8a:47:8e:c1:d3:a6:aa:b6:30:80:1c:c4:13:28:
cd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:86:95:FC:7B:A8:62:86:EB:9C:26:B9:36:9C:0C:D3:3A:14:AC
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fd:17:3c:54:bc:e6:2c:57:07:51:95:95:6f:37:08:8c:d2:
f3:97:d6:e6:22:38:59:c7:89:c4:10:f1:04:73:3e:7b:10:5f:
01:ab:93:01:04:69:af:8c:2d:1e:aa:49:ec:9d:91:7a:6f:10:
31:55:21:ce:de:f5:42:d7:8b:06:17:bc:21:7f:3f:0b:d0:1e:
42:71:ab:fd:83:8b:b9:ca:0c:d8:2d:43:3c:9a:1a:fa:5c:90:
db:58:2a:d0:97:c0:f2:df:04:6f:2c:12:24:d7:3d:a0:72:b8:
d8:e4:e8:1b:b0:0d:d1:43:4e:e7:5f:0e:6b:15:bf:38:ae:fe:
c3:04:e1:f4:4c:30:a4:08:74:e3:f8:8d:dc:d2:80:8a:c4:86:
ca:05:4a:9d:32:f9:36:37:66:89:9f:12:08:46:de:94:1b:74:
1d:5d:32:5d:42:c9:86:01:57:01:0a:cc:d8:3a:87:8c:7f:e7:
59:df:b7:51:f4:2e:40:80:20:ca:8f:fc:e2:f7:03:a1:c9:3e:
bf:2a:28:16:92:58:65:45:02:cc:5a:07:aa:1d:d0:e0:8d:8b:
f2:59:83:6b:92:f0:18:f4:9e:df:54:38:3f:01:83:a8:42:c3:
83:30:9f:60:f3:f5:8c:2b:54:91:c6:2a:68:3f:ef:ad:cc:d8:
08:84:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:38:56 2025 by rpki-client