Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json)
Hash identifier: Li9QDV2RTJ4Cu9ZpzLtpakLCf+V16oBcKQWmczV3+9Q=
Subject key identifier: 0D:A0:34:6C:8C:B1:2E:22:A3:0B:61:00:65:25:F0:13:93:3B:9C:F2
Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Certificate serial: 01964CA2A6F7D3549C0066E80F615CEB32B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
Manifest number: 011C
Signing time: Sat 19 Apr 2025 06:00:50 +0000
Manifest this update: Sat 19 Apr 2025 06:00:50 +0000
Manifest next update: Sun 20 Apr 2025 06:00:50 +0000
Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: Uqav7nWJ/lLkmW5CK1TJW2Ns8+306SPEWrepStl2n5w=)
2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:a6:f7:d3:54:9c:00:66:e8:0f:61:5c:eb:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138
Validity
Not Before: Apr 19 06:00:50 2025 GMT
Not After : Apr 20 06:00:50 2025 GMT
Subject: CN=0da0346c8cb12e22a30b61006525f013933b9cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:67:87:44:07:6d:33:4d:4f:50:08:c5:37:08:
b9:07:67:4c:9d:93:6c:1a:b4:24:ec:74:55:2e:f0:
27:18:7c:0d:36:92:5a:d1:a2:ef:f6:95:bd:86:5f:
12:cf:ee:88:65:b4:18:ec:b0:c2:df:07:db:a2:8b:
2f:9f:8d:7e:5b:8d:07:af:7a:aa:e9:e7:4a:03:ac:
f8:44:56:7c:be:7b:02:6c:49:39:94:76:ce:86:37:
09:17:4d:af:0b:c2:7a:38:eb:9e:0c:46:9c:a3:2c:
7f:24:07:20:9a:29:3f:f4:0f:8e:a4:b2:df:95:9a:
e8:65:30:22:e8:0f:ef:58:e5:4d:72:7c:9f:4c:ae:
18:a9:21:87:77:ba:23:8a:87:2c:0e:17:c4:a4:3d:
85:a9:0b:eb:c8:0e:59:51:32:29:d5:1b:e7:d8:67:
d8:ca:6d:3a:fd:c4:2d:af:18:8a:7e:8a:22:78:38:
9a:ed:58:de:9e:d2:3f:82:ec:05:bd:62:1e:53:38:
7b:cc:1d:67:b0:a1:25:7e:6d:56:24:be:7a:b1:44:
30:f2:a2:9c:79:25:ea:ef:02:00:03:6b:6a:13:3b:
a2:86:aa:02:b8:70:e8:c2:26:d3:89:d9:ac:7e:47:
a0:49:2f:68:32:e4:7a:93:4a:74:fb:b7:32:87:ab:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:34:6C:8C:B1:2E:22:A3:0B:61:00:65:25:F0:13:93:3B:9C:F2
X509v3 Authority Key Identifier:
keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:9d:db:37:0c:e2:39:b4:a3:18:57:39:91:49:f4:d2:4a:1d:
ad:ad:b4:03:12:31:7b:14:c8:f3:82:7f:33:06:b4:40:38:33:
b9:5f:7e:b4:23:3d:a3:1a:34:57:9a:9b:1d:41:05:7f:69:40:
95:60:31:21:47:19:0f:00:71:cd:83:f7:94:c3:71:a2:26:5b:
f9:34:49:2e:f8:a6:ac:d9:2c:97:0d:39:76:ba:5b:a3:48:f4:
14:bc:15:4e:45:1b:a7:b7:56:23:66:e7:68:08:a8:d8:3e:61:
cc:6f:73:9f:71:49:36:91:02:dd:27:27:ec:2d:d0:56:95:46:
22:65:d2:9f:82:7d:16:68:b3:39:76:3f:be:4e:e1:1d:90:81:
f7:db:91:c3:1e:6a:fe:da:d0:ea:57:02:8e:d9:1f:87:bd:d2:
7a:0e:48:5b:98:e6:02:14:39:c5:69:3c:4d:81:4b:98:7a:7e:
6b:d9:42:7b:62:8f:06:af:f6:da:0d:67:1b:bf:96:9e:f4:35:
ab:cf:23:2f:52:ec:54:a3:05:5d:0b:79:d3:cf:c8:da:6c:ec:
3d:4b:6f:ed:29:45:79:e6:ff:cc:63:09:36:19:80:4e:6d:62:
a1:dd:6d:ff:e0:48:47:1a:d6:3a:38:80:c0:d1:4c:a8:55:0d:
39:12:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:11:56 2025 by rpki-client