Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
File: hUkvKmkQQzxbzYJpxEDowceADWs.mft (raw, json)
Hash identifier: JXkLbsbUjkJfZodZQOJ4eWkh7n5inD5Uzmd7HORhTAM=
Subject key identifier: 95:82:7F:AC:3E:1E:CE:51:03:AE:34:D6:A3:96:25:62:15:26:2E:00
Authority key identifier: 85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
Certificate issuer: /CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Certificate serial: 0196395295FCE4DF00042B1355E0CBD44B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
Manifest number: 0493
Signing time: Tue 15 Apr 2025 12:00:35 +0000
Manifest this update: Tue 15 Apr 2025 12:00:35 +0000
Manifest next update: Wed 16 Apr 2025 12:00:35 +0000
Files and hashes: 1: aSUGfC8WVdHXrkeRZf6pzwHN77M.roa (hash: NZqhUfFIINMzbyR/Huf0dRcUDWz5/YZwIQ3PYJryja4=)
2: hUkvKmkQQzxbzYJpxEDowceADWs.crl (hash: KdHo+g83bmwXkUDwigLi0q1jP3vw7Tz+vxRLJkOYdQQ=)
3: qiRFgTjVRdabsTRRM1YWXUGLw64.roa (hash: lCjSoDx/oZnpAtqpweWxZW6jo+ICoZqCCQhV41u6/VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:39:52:95:fc:e4:df:00:04:2b:13:55:e0:cb:d4:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85492f2a6910433c5bcd8269c440e8c1c7800d6b
Validity
Not Before: Apr 15 12:00:35 2025 GMT
Not After : Apr 16 12:00:35 2025 GMT
Subject: CN=95827fac3e1ece5103ae34d6a396256215262e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:19:ec:04:0c:c3:11:ee:e5:b1:9f:91:9c:
f0:6e:4b:d4:52:3d:53:51:d6:3f:00:8a:91:c2:05:
b1:da:d6:49:6b:87:b2:59:e2:99:13:10:33:26:44:
01:2a:43:67:60:29:1b:e4:aa:58:0c:35:c9:5f:90:
6b:f9:c3:7e:de:a0:75:2f:51:d3:2b:7a:f9:ca:8f:
40:47:c5:cf:c6:28:86:14:02:fe:cc:db:2e:08:12:
ec:57:22:c9:80:9d:96:00:a6:8b:b4:57:be:d0:a4:
d2:8d:2f:10:c8:37:91:8d:13:09:4d:a0:86:c0:62:
15:d6:15:1b:7a:02:ea:e6:41:45:82:6f:0a:55:77:
46:da:71:73:5b:88:95:b8:6f:52:81:14:b8:d1:94:
a6:a1:da:36:3b:be:0c:f8:b6:24:35:ac:06:65:68:
2b:e2:9d:a5:16:3c:70:5d:65:c1:dc:be:64:d4:69:
39:34:f7:44:08:4c:c1:bb:c1:5f:6b:64:11:f8:04:
96:1d:7b:c7:6d:e8:0f:0f:3e:f5:2a:15:68:fb:e2:
6f:cf:3a:64:a9:97:0b:2c:1d:53:51:29:f9:e3:24:
c1:35:09:38:b4:b0:a4:ae:dc:2f:01:6f:5e:d1:27:
0a:26:55:01:df:79:fb:00:97:b7:20:71:26:c9:de:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:82:7F:AC:3E:1E:CE:51:03:AE:34:D6:A3:96:25:62:15:26:2E:00
X509v3 Authority Key Identifier:
keyid:85:49:2F:2A:69:10:43:3C:5B:CD:82:69:C4:40:E8:C1:C7:80:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUkvKmkQQzxbzYJpxEDowceADWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b38228-0875-491c-9d4f-d6a9a28284cf/1/hUkvKmkQQzxbzYJpxEDowceADWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:13:58:38:27:d3:e0:c6:c5:08:d4:b6:da:34:30:36:23:8f:
75:0e:59:ec:81:1a:fa:1b:01:c0:43:bc:9d:6d:93:35:d0:91:
3c:e3:cc:be:19:af:c2:96:df:4e:e9:bc:71:6c:df:ca:73:7a:
5b:e5:b9:ae:33:48:38:ce:db:97:50:16:6c:d8:ff:51:d9:9d:
ed:a7:44:4d:16:57:83:8a:82:89:6d:66:2a:1e:48:39:6c:99:
bf:4c:01:71:b9:01:78:25:6e:cd:d5:5a:75:9d:e1:34:37:7f:
3f:a8:23:ee:6d:85:7f:46:0c:07:01:a4:bb:b2:94:d3:66:c3:
fd:3b:61:86:b5:05:1a:d4:5a:3f:f3:e8:fc:9e:1b:bc:06:65:
19:d9:04:86:b3:47:0a:7a:ea:37:de:d0:c0:42:43:8e:23:c2:
f5:e5:d2:37:a0:84:60:8a:83:f2:31:34:57:20:ca:28:ed:09:
57:64:b9:84:94:1d:ed:38:33:92:9c:e4:a9:ae:e1:64:37:fc:
11:50:48:dd:e8:c5:8f:fd:4b:5e:59:61:43:68:7b:2a:4e:4c:
37:28:06:31:81:73:26:0e:3a:2b:20:81:97:7a:ff:43:92:88:
c4:55:a4:8b:0e:51:f2:24:d6:40:c4:ec:99:6c:26:5d:49:25:
61:ed:72:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:50:15 2025 by rpki-client