Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: X5Trl2bmxWiAhWtYQK54XF1XRCMgTUcbj/E/9ujxPJc=
Subject key identifier: 8A:FD:59:BE:CD:83:5B:D3:CA:A0:26:23:07:55:79:84:99:F8:EE:1A
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 019645C4EE5A141C7B1D818C5BD869D4F4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0E3E
Signing time: Thu 17 Apr 2025 22:00:55 +0000
Manifest this update: Thu 17 Apr 2025 22:00:55 +0000
Manifest next update: Fri 18 Apr 2025 22:00:55 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: vMX7MQ03HKjt0LSYDVGhuUOQ257wesar1CdnUjdspAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:c4:ee:5a:14:1c:7b:1d:81:8c:5b:d8:69:d4:f4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: Apr 17 22:00:55 2025 GMT
Not After : Apr 18 22:00:55 2025 GMT
Subject: CN=8afd59becd835bd3caa026230755798499f8ee1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:b6:e7:97:94:a7:0e:14:3a:88:db:83:c4:
60:13:cd:77:59:b4:c2:1d:12:2b:1e:12:26:cf:08:
df:28:20:3b:2e:b0:f9:91:53:8d:33:ae:32:7e:c2:
8d:f8:0e:5c:61:6e:e8:f8:d0:62:73:27:6f:17:a2:
9f:4c:89:1b:36:e2:fc:0b:4a:af:1f:02:c9:42:a0:
48:d9:ef:43:92:52:c6:fb:c9:0b:a7:85:99:79:a7:
65:92:b4:1b:57:63:09:d1:bb:23:19:99:5a:cb:ab:
07:60:cf:df:ad:7c:0c:83:21:d5:f0:a3:8f:e2:58:
5e:d8:86:25:18:06:39:5b:9f:9b:f8:fc:eb:d8:f2:
fe:f8:3a:d3:6e:87:8e:e3:6e:8a:e4:1a:3a:f1:93:
f9:57:73:c8:16:93:1d:2c:72:73:57:d8:ad:af:9c:
58:a4:79:6f:76:83:e4:58:14:eb:1a:42:8e:ef:9d:
64:35:f3:16:c0:c4:21:08:44:92:1b:f5:27:0b:14:
13:54:70:3c:57:80:d7:f7:fd:a8:29:28:ca:a0:39:
9e:42:7b:96:2c:fb:28:d2:e0:59:33:97:ad:73:8d:
27:29:d5:4e:b0:5e:a4:72:6d:fa:45:a9:2a:d8:52:
e4:e4:1c:8c:cd:d8:73:ab:53:f2:8d:8f:3e:8e:b2:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FD:59:BE:CD:83:5B:D3:CA:A0:26:23:07:55:79:84:99:F8:EE:1A
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:01:83:19:c5:15:19:c7:ed:f4:30:27:8c:82:6a:07:ac:eb:
ee:ca:a9:70:cc:c6:ae:71:aa:79:be:1f:69:02:49:bf:6b:70:
0e:9c:47:3c:dd:4a:fc:0b:80:7c:01:cf:61:06:09:28:38:91:
32:91:50:dd:97:a6:43:6f:ee:2f:6e:6e:27:8a:c2:fc:f9:86:
41:1a:66:27:7e:a9:90:0e:23:b2:c2:d7:e0:74:d2:6f:23:de:
5b:00:b9:ef:56:4d:d3:9a:fa:7d:d3:80:11:79:06:0a:12:c8:
c2:41:55:ab:0f:27:6a:e9:f1:52:69:a0:f8:2f:d9:ff:c3:5d:
6b:7a:a4:28:0a:2a:37:5b:09:a3:95:c0:4a:9a:7d:06:ca:7d:
b8:6c:a0:e0:f1:f0:c2:f2:1b:ef:da:e2:25:81:0c:29:56:6c:
12:5d:a5:b6:e3:cd:19:28:ef:a1:4e:fe:94:1c:26:8a:30:92:
0d:5f:39:75:34:6e:50:99:87:73:5b:fd:d2:19:fb:0d:3f:3e:
d2:8d:85:19:ea:0f:db:88:72:be:07:6e:63:4f:2c:84:5d:df:
a9:24:dc:07:1e:b5:2b:1d:fb:e9:2a:c8:33:a6:bb:a7:fe:8c:
5f:98:6e:1b:a6:d8:90:fa:28:d5:f3:f5:bd:99:ce:89:64:cf:
76:8c:5d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:52:41 2025 by rpki-client