Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
File: hGzXvBkUIFasr5VzyqGvjehxgVY.mft (raw, json)
Hash identifier: zrp5IFYXGlMy7l3l9R9CoqDtEZ1udkuexbZCcLLOvSs=
Subject key identifier: 6F:90:71:01:68:F1:76:C3:AD:3E:55:D5:6A:88:5F:71:87:97:23:8A
Authority key identifier: 84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
Certificate issuer: /CN=846cd7bc19142056acaf9573caa1af8de8718156
Certificate serial: 019629DFF39EC3F257A20E1306AB828B0223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
Manifest number: 32
Signing time: Sat 12 Apr 2025 12:01:04 +0000
Manifest this update: Sat 12 Apr 2025 12:01:04 +0000
Manifest next update: Sun 13 Apr 2025 12:01:04 +0000
Files and hashes: 1: 3f06hh4hNU107JXVzfvArHZPE4U.roa (hash: BPCtwW3aJroKK5cBsU9SlKsGCU1RSfVJmSFO/AqP8Rs=)
2: hGzXvBkUIFasr5VzyqGvjehxgVY.crl (hash: 8qqXBmDsagewuScCaJBDWdpcoUD/5YYKlK7uNJBZ3w8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:df:f3:9e:c3:f2:57:a2:0e:13:06:ab:82:8b:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cd7bc19142056acaf9573caa1af8de8718156
Validity
Not Before: Apr 12 12:01:04 2025 GMT
Not After : Apr 13 12:01:04 2025 GMT
Subject: CN=6f90710168f176c3ad3e55d56a885f718797238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:1e:b0:04:48:1e:7d:59:54:c1:8e:5b:84:
51:32:8c:43:3f:20:24:dd:43:7c:4d:3e:65:fa:66:
09:a9:38:12:82:5d:d4:55:45:e7:86:95:51:e8:84:
cd:53:f2:0a:f9:dc:24:bc:bc:cf:ee:44:9b:51:e1:
1b:c3:5a:5b:73:7a:fb:27:df:65:e4:6f:ab:6a:42:
6e:1a:d5:de:0c:68:ab:d2:9b:cc:31:0f:bc:e9:a8:
3a:ef:d2:b7:b4:d2:8d:8e:17:1f:6f:c9:67:1b:36:
48:b2:d9:69:1c:b4:c8:ad:ee:d1:66:dc:2f:23:60:
dd:1d:7a:db:87:be:61:8f:28:db:33:4c:e7:aa:cc:
aa:39:73:c6:35:93:31:74:2c:da:0b:82:f0:a4:bb:
8a:47:9f:8e:4e:ba:29:59:81:8a:66:04:ec:89:fd:
46:c4:f7:8d:c0:b6:03:ec:48:da:b7:f6:21:ee:e6:
f9:73:49:39:9c:b8:6e:0b:6b:a7:40:2a:ad:5a:2f:
c8:81:2b:a6:96:e7:30:ba:e4:f4:90:2b:4e:15:2f:
e9:7f:1f:fb:10:9a:4f:12:02:a2:fd:77:82:56:c2:
e3:2e:5b:64:ae:b5:ef:7d:9c:b6:e8:77:17:77:02:
26:65:b1:d3:0e:e1:e0:b5:07:d3:e9:6c:be:9c:36:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:90:71:01:68:F1:76:C3:AD:3E:55:D5:6A:88:5F:71:87:97:23:8A
X509v3 Authority Key Identifier:
keyid:84:6C:D7:BC:19:14:20:56:AC:AF:95:73:CA:A1:AF:8D:E8:71:81:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGzXvBkUIFasr5VzyqGvjehxgVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/990590-4a63-4b2f-a933-d1959f3e2f76/1/hGzXvBkUIFasr5VzyqGvjehxgVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:eb:24:dd:0a:fa:ad:a1:c9:5e:80:b7:2d:3b:1e:15:13:1b:
8b:df:3b:ab:71:bd:98:7c:4b:cc:80:37:56:8f:7f:1f:20:79:
08:d4:26:ae:66:d8:f0:3c:61:10:05:12:64:3c:19:d8:70:f7:
ce:34:cf:c6:23:9d:07:08:74:dd:e7:ab:dc:00:e4:a0:56:c1:
3f:3d:41:77:2a:cc:fc:d7:00:6d:65:ba:b2:f3:b5:6f:8e:b1:
be:e9:bf:19:92:8c:1e:31:81:8d:8b:52:d3:da:58:93:fb:87:
9e:4e:5f:5c:cc:6c:82:d8:83:81:6b:d1:59:af:e7:8b:ee:e4:
65:24:a8:4e:cc:bb:9f:ff:fc:07:df:b6:54:81:8a:93:08:8d:
3d:f4:57:bb:19:4f:77:60:38:ea:ac:ab:6d:e1:d8:ce:bf:1b:
61:f3:b3:8c:f3:b1:06:0c:62:cc:98:92:ef:77:89:f9:97:ba:
b1:d1:c3:33:15:8d:e4:2c:2f:4b:98:64:82:80:85:f0:ea:6f:
fe:89:02:da:8f:1a:2c:a4:71:6c:c0:75:c4:eb:d9:09:72:93:
62:01:19:0f:55:20:a1:38:a6:10:ec:57:c1:ed:5f:5a:88:e9:
82:ab:15:c4:ee:7b:93:a9:6f:f1:0e:03:e7:1b:09:ce:a6:a3:
96:7c:b0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:44:24 2025 by rpki-client