Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
File: hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft (raw, json)
Hash identifier: Gv7G6xWoXOv/G1TVD6Qr295cdwl2JVZjIUEPDvd5c7I=
Subject key identifier: 90:C5:5A:A3:41:C2:96:4B:58:B4:06:84:93:35:BC:6B:51:DC:57:16
Authority key identifier: 84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
Certificate issuer: /CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Certificate serial: 019645C47986B235201DB3203B13C29139B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
Manifest number: 0ED2
Signing time: Thu 17 Apr 2025 22:00:26 +0000
Manifest this update: Thu 17 Apr 2025 22:00:26 +0000
Manifest next update: Fri 18 Apr 2025 22:00:26 +0000
Files and hashes: 1: hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl (hash: G2Jbgx2xj81Flg2xkP7q+rEBYc6//jy1RUM2PsbiOMY=)
2: sudojg6HDCizETctxsBEtvD9ceA.roa (hash: WBqfbYsjDjIGknBmCSsGnzqS8ek9/ghen0y1LOmx5Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:79:86:b2:35:20:1d:b3:20:3b:13:c2:91:39:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84a3cf114be4fa4c4ff76b218fad50e51739160d
Validity
Not Before: Apr 17 22:00:26 2025 GMT
Not After : Apr 18 22:00:26 2025 GMT
Subject: CN=90c55aa341c2964b58b406849335bc6b51dc5716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5a:b5:8c:bc:fb:e5:e5:e5:6e:66:2b:1a:e3:
8a:eb:d9:42:df:c1:91:bc:f4:0d:2c:fa:d5:ec:1c:
5f:60:27:1a:cf:31:1d:ba:1e:6e:f6:1c:00:be:a9:
07:96:f0:e0:48:5a:01:fc:b7:28:17:2a:49:4b:14:
aa:c8:be:0c:38:46:5e:ba:1a:c3:84:04:cd:54:7f:
f7:82:77:d0:d0:13:be:f2:bb:aa:00:05:a0:ae:c4:
93:8d:93:74:b5:32:45:ed:45:af:a5:e9:21:4f:fd:
92:d8:16:53:ea:61:48:3c:14:ca:34:e7:e9:8d:d1:
65:67:36:83:88:98:7d:02:92:2a:d1:0f:ae:57:2f:
71:0c:fb:ab:05:fc:f4:8e:41:42:f8:c5:2f:a9:7c:
dd:7f:f8:80:85:c3:02:32:63:ea:27:da:fe:d8:b6:
62:5e:5f:b7:88:d6:0a:68:dc:28:ee:87:f1:a7:0d:
f5:4e:72:44:ab:df:85:8e:79:5c:ae:3a:38:f3:84:
c6:be:7d:ee:08:c5:58:0c:f5:f6:88:b4:a6:1a:76:
04:45:3c:02:1f:e0:86:7c:68:57:79:64:74:36:94:
f0:b9:1a:8f:a0:f5:14:eb:bf:50:a2:7c:a5:4f:54:
bf:ec:d5:fe:cb:2d:86:7c:66:ea:cd:5b:39:94:5a:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:5A:A3:41:C2:96:4B:58:B4:06:84:93:35:BC:6B:51:DC:57:16
X509v3 Authority Key Identifier:
keyid:84:A3:CF:11:4B:E4:FA:4C:4F:F7:6B:21:8F:AD:50:E5:17:39:16:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKPPEUvk-kxP92shj61Q5Rc5Fg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/605f46-7d4c-46b8-baa5-539329bed46e/1/hKPPEUvk-kxP92shj61Q5Rc5Fg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:db:d2:05:d7:64:b3:f4:dd:a0:69:2a:43:8b:59:0b:b0:8f:
61:67:d8:81:e3:b7:55:ff:df:4f:ec:d7:07:57:af:19:ca:11:
36:73:21:4f:54:dc:b9:1a:dc:3d:09:6c:21:32:a6:a2:90:1e:
f6:55:51:90:45:dc:16:1b:fd:6b:28:57:41:71:ee:af:b5:ec:
bc:48:a0:05:76:d0:38:1a:8f:93:ae:4b:95:79:17:ad:0c:65:
2f:fa:5c:76:e9:4b:4f:a0:b8:71:8f:f6:44:88:ea:9f:92:47:
91:81:5f:39:99:15:9a:ea:79:6a:d5:5e:42:86:17:91:3e:6e:
b5:47:61:17:f5:97:f8:4f:08:d0:7a:94:f9:5e:59:81:10:97:
5e:55:55:7f:00:29:46:53:96:a2:f5:54:3f:9a:e8:4d:30:18:
8b:91:e6:79:77:43:33:f9:b4:3f:54:16:9b:4d:83:ec:60:1f:
6b:8c:10:80:2a:23:73:bb:51:14:5e:d2:f9:3d:77:d6:43:39:
f4:0d:3b:10:b4:a0:35:4a:dd:2f:f6:75:7a:0b:29:5b:e7:3d:
55:e4:74:cf:b8:ff:0f:43:68:18:9f:3e:90:28:57:3b:83:ad:
03:0b:c8:4d:82:ec:ee:ea:dc:c7:cf:df:f8:04:31:68:c9:7a:
a8:e4:44:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:00:06 2025 by rpki-client