Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
File: hE9-ZplcmUow0IaHEQv9apoFYTQ.mft (raw, json)
Hash identifier: VHtO0K7dCDLEcF4q5+k1XntMozEWZPWmiQGqvSBL9Fk=
Subject key identifier: 8E:12:15:38:85:B4:46:82:08:76:B2:09:9C:D2:0E:62:4D:D2:34:3B
Authority key identifier: 84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
Certificate issuer: /CN=844f7e66995c994a30d08687110bfd6a9a056134
Certificate serial: 019649A13B1C7343A0ECC96B913A841F95F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
Manifest number: 05DC
Signing time: Fri 18 Apr 2025 16:00:25 +0000
Manifest this update: Fri 18 Apr 2025 16:00:25 +0000
Manifest next update: Sat 19 Apr 2025 16:00:25 +0000
Files and hashes: 1: VVQWLUW0daB7T4jiaSXgxXCl4ZE.roa (hash: RAYdTMRTLrvbEHCokIXafnM5optXUCpT7i2/x7+Zbyk=)
2: hE9-ZplcmUow0IaHEQv9apoFYTQ.crl (hash: 4hVddwdbZ3kPOfZTCp1/JurkDMl20dyZQUdDcKUHTnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:3b:1c:73:43:a0:ec:c9:6b:91:3a:84:1f:95:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844f7e66995c994a30d08687110bfd6a9a056134
Validity
Not Before: Apr 18 16:00:25 2025 GMT
Not After : Apr 19 16:00:25 2025 GMT
Subject: CN=8e12153885b446820876b2099cd20e624dd2343b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bb:68:ca:d8:a6:b9:69:e5:4f:3b:0d:f0:aa:
45:5e:af:d1:63:fc:a4:c0:9a:2c:2f:28:41:e9:56:
86:bb:2b:6d:7b:7c:91:07:7c:bb:5f:c3:e2:9a:ed:
71:0e:43:67:e0:c7:a9:cf:35:a6:06:61:7a:41:a2:
7c:9a:e1:52:ae:5a:94:ca:bf:97:4c:b8:3a:ae:ca:
ad:14:11:96:f7:4f:8e:a1:93:50:0c:c4:96:c9:c7:
9a:0d:0d:09:cf:22:67:ed:77:69:3e:f9:30:bc:9c:
31:ee:44:55:90:44:39:82:78:5c:92:97:1f:71:38:
71:62:d2:4c:b1:88:4f:45:8b:5b:22:e4:f3:00:d4:
eb:4c:ab:a1:cf:cb:ad:77:cc:7a:49:bd:f3:98:34:
84:83:7a:f7:19:cb:dd:e4:75:ea:50:32:78:25:ed:
b5:67:b1:b3:ac:82:f9:d4:4e:9c:2b:62:21:2c:09:
e3:65:89:3b:66:3d:04:0a:b7:4f:f3:32:63:c9:54:
10:37:3f:0d:12:44:aa:68:8f:c7:24:54:a9:59:6a:
e3:50:49:82:60:ff:28:f4:00:18:4e:39:9e:98:8e:
cb:17:18:13:bc:d2:e1:fb:88:aa:1b:73:36:19:f8:
4a:6b:35:a6:b5:f9:e4:cc:e5:26:b8:02:ef:da:b1:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:15:38:85:B4:46:82:08:76:B2:09:9C:D2:0E:62:4D:D2:34:3B
X509v3 Authority Key Identifier:
keyid:84:4F:7E:66:99:5C:99:4A:30:D0:86:87:11:0B:FD:6A:9A:05:61:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hE9-ZplcmUow0IaHEQv9apoFYTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/843820-deac-4a0a-bf32-93190d3e1d98/1/hE9-ZplcmUow0IaHEQv9apoFYTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e0:9b:8f:d7:4b:3b:01:fd:70:eb:89:2b:dd:d7:76:7c:38:
5f:7f:6c:cd:6d:36:71:07:75:ff:c1:e6:ed:db:cd:76:74:b6:
eb:1a:34:b1:aa:c5:c9:74:07:95:24:9f:ba:69:a9:e0:a2:0c:
d2:17:c4:45:61:c2:77:30:b3:86:b7:e5:9b:99:61:b2:3d:a1:
8f:6b:b5:d4:fa:e6:c9:9b:50:03:8f:65:56:e1:63:63:b4:dc:
7b:e6:c1:82:72:8a:57:6e:7d:c0:86:37:c9:07:88:83:ca:02:
39:80:99:25:1b:18:9c:d0:1e:8b:90:e0:d9:b7:5b:a9:ad:88:
11:72:e9:e2:25:cf:b6:f5:33:a4:a6:69:ef:aa:f1:25:7e:7a:
3d:23:8d:20:38:94:8e:c1:12:b9:8e:89:4e:f1:9a:60:9f:a9:
54:e8:49:fb:68:07:6e:a3:ea:f3:8e:6e:94:b9:61:04:23:d8:
03:2f:18:73:3d:07:65:76:f3:b9:da:03:86:e5:7c:e6:2d:cc:
24:c3:8a:af:12:39:d0:d1:16:76:11:77:f0:4a:b9:f5:96:e9:
3a:5d:63:51:3a:77:7f:17:05:08:db:80:c7:6d:16:80:39:bc:
dc:9b:38:60:97:bb:49:ca:5c:e4:0d:48:d5:63:48:63:f4:78:
0a:60:3d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:36:42 2025 by rpki-client