Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
File: hZtbaj2CvQDtMcbOs66nrVke5Tc.mft (raw, json)
Hash identifier: LXlHchg6HIsbAlFZXuU+E+EPJKgzEY0vT2jX3BOa1W0=
Subject key identifier: 8E:83:79:54:98:1E:6A:13:AE:37:19:EF:8D:A6:F6:A5:68:F1:A4:3E
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 01951134E343C943AC39E4D28FB81F92A1BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
Manifest number: 04FF
Signing time: Mon 17 Feb 2025 00:00:33 +0000
Manifest this update: Mon 17 Feb 2025 00:00:33 +0000
Manifest next update: Tue 18 Feb 2025 00:00:33 +0000
Files and hashes: 1: hZtbaj2CvQDtMcbOs66nrVke5Tc.crl (hash: /M+UuRNDg2+D72WUPtpALa1p/8tGVzociv3vXMlvDMo=)
2: iDoekYbnPiOIxLiqr48QVJjIZ7I.roa (hash: BFGeDsq9cIJPFhHXYs9ml2z2YYV20g/bd7ZbGgfmSrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:e3:43:c9:43:ac:39:e4:d2:8f:b8:1f:92:a1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Feb 17 00:00:33 2025 GMT
Not After : Feb 18 00:00:33 2025 GMT
Subject: CN=8e837954981e6a13ae3719ef8da6f6a568f1a43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:cc:60:ef:dc:3d:b0:6e:df:f3:66:85:83:
e0:eb:da:77:e8:cb:ff:c0:43:53:14:e9:31:53:6c:
bf:2e:1e:04:ac:0b:d5:71:19:e6:28:98:3a:b4:86:
60:72:27:79:de:8a:20:a1:ba:79:1f:53:e0:77:be:
d9:13:6e:59:2c:c7:62:f4:88:15:8a:d4:57:f2:3a:
9e:76:8d:eb:f1:34:f7:54:61:cf:de:06:00:50:b5:
8b:9e:d1:33:66:53:b1:13:6c:eb:ac:19:a4:69:a6:
00:bf:e3:fc:ac:73:a8:dd:f2:4c:a0:56:8c:d3:4b:
99:b3:20:95:30:fd:54:32:62:f8:b8:e8:ae:5b:77:
04:c1:46:f3:a9:b0:1b:22:25:18:b2:5a:50:a0:be:
a0:5d:a8:41:cb:57:87:d9:55:b4:77:dc:d9:1b:aa:
bc:3c:20:e3:2c:83:fe:04:35:07:0e:ea:7f:e2:ab:
7f:82:cc:16:f6:72:83:45:d0:88:0f:d8:a7:9a:3f:
ba:fb:42:9e:f4:09:0d:5b:94:aa:67:f7:51:b0:37:
7c:11:45:99:a8:a5:1a:d4:aa:10:32:f7:da:d6:c5:
5a:21:40:79:a5:0a:6c:4e:4e:09:6c:97:b8:e1:77:
79:c3:a5:97:ad:42:62:d6:e9:56:c5:bf:e9:06:2c:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:83:79:54:98:1E:6A:13:AE:37:19:EF:8D:A6:F6:A5:68:F1:A4:3E
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:03:95:31:03:1c:16:82:ca:fa:40:8c:1f:99:a8:9d:4d:
59:b0:96:13:93:e3:43:9f:ac:a2:72:88:71:ce:e4:8b:bf:3e:
02:9c:87:c7:81:d9:54:9a:1c:3b:ca:79:0b:2f:d3:de:96:bb:
ad:5a:93:bd:8d:a4:94:bd:45:07:2a:04:b6:af:7e:68:ec:03:
2c:93:f8:e1:56:e4:ea:46:a7:fc:c7:9d:7c:74:4f:c9:ab:95:
36:17:03:dc:09:d8:b8:aa:3e:3c:29:2c:de:6d:5f:2d:98:90:
72:58:3a:ee:bc:b8:0b:25:bf:58:fd:f5:3e:78:85:c8:7f:3b:
19:f9:dc:7e:42:22:17:50:91:5e:85:09:57:bf:ec:06:88:6b:
49:7a:10:93:50:4c:26:ff:14:91:96:14:c2:f9:6c:45:aa:e6:
f9:34:d3:c6:50:4b:4e:d0:09:85:5e:4a:0d:47:9e:91:ed:ac:
4e:ee:6b:58:28:27:6b:53:ce:00:44:48:0c:af:0b:e2:56:10:
bc:68:5a:75:0b:86:a3:cc:c7:cb:80:28:3e:2b:e1:6f:da:66:
c6:e1:99:05:c0:8e:94:f3:e9:c2:c3:c3:03:04:52:bb:20:26:
97:bb:c9:c4:ea:5a:81:58:ec:51:e2:fd:0f:11:78:4c:ab:f3:
49:87:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:06:09 2025 by rpki-client