Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
File: hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft (raw, json)
Hash identifier: 3RiJHNZ383nImaP/FNmVcX5qHPPACOoHvHP+PeVKR0U=
Subject key identifier: A0:0D:0C:3F:73:26:A9:7D:A0:4F:01:F8:D4:CC:73:0F:25:0D:B9:25
Authority key identifier: 85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
Certificate issuer: /CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Certificate serial: 01962972B1D739FFA124B8F95D329F90BD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
Manifest number: 0777
Signing time: Sat 12 Apr 2025 10:01:44 +0000
Manifest this update: Sat 12 Apr 2025 10:01:44 +0000
Manifest next update: Sun 13 Apr 2025 10:01:44 +0000
Files and hashes: 1: 5iC1C_l2xnIVtV_ynL6awoKgYMQ.roa (hash: c0Zm1e9RjgR5PBfasK6Q1TzGKpfYhKyszQz9aW+gUGA=)
2: K2099PO4iAtvBzGlnwl1axWP2hE.roa (hash: 6aTZlr/sfRYyJqs+vE8kRpR5W2QDPbSiPNBoLmmWJlA=)
3: hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl (hash: VQxFIcrtZn+9Up1XV7H5AWwXqMdrGR92Uj1m51coFzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:29:72:b1:d7:39:ff:a1:24:b8:f9:5d:32:9f:90:bd:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85fb85add09f4876ea6aaa88d4d88c81ccb6b10a
Validity
Not Before: Apr 12 10:01:44 2025 GMT
Not After : Apr 13 10:01:44 2025 GMT
Subject: CN=a00d0c3f7326a97da04f01f8d4cc730f250db925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c2:6e:26:4f:c7:86:79:94:b3:39:70:5c:39:
f1:cb:62:48:c6:1e:27:57:1c:e2:3c:01:84:99:e2:
49:9c:af:56:0b:33:04:26:67:08:d9:11:d2:a9:94:
90:b0:7f:d8:3c:97:29:aa:76:97:10:1e:49:cd:45:
de:ae:3e:72:6e:a0:0b:eb:45:77:5d:1f:16:9e:ee:
8e:cc:e9:df:29:ae:1d:09:a4:00:b9:eb:67:0a:20:
37:79:64:27:f7:cc:3c:eb:e9:fc:ef:e9:bf:40:66:
59:98:5c:de:7f:03:f7:51:3a:13:b8:20:fe:e4:10:
f9:f7:25:10:95:32:70:df:d3:2d:d0:48:42:38:37:
bb:b0:b6:af:70:18:4a:50:24:f5:e3:0a:9d:f0:17:
5d:e8:2a:80:37:da:4c:2c:16:6f:0f:c7:45:66:ab:
9b:d7:40:dd:f6:d9:96:9f:03:f5:86:6b:4b:56:ce:
d4:40:5f:03:ee:2a:54:d8:95:53:4d:1f:a9:96:b2:
bd:1c:b7:07:13:49:72:66:f4:93:e4:1a:8c:4e:59:
97:9b:1b:45:f4:43:2a:d4:d9:09:75:91:a2:04:34:
4c:55:8c:48:9e:ba:29:ae:cc:b3:b2:59:77:58:8a:
9e:39:d4:a2:2f:75:22:60:3e:dd:52:ba:b7:c3:17:
f2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:0C:3F:73:26:A9:7D:A0:4F:01:F8:D4:CC:73:0F:25:0D:B9:25
X509v3 Authority Key Identifier:
keyid:85:FB:85:AD:D0:9F:48:76:EA:6A:AA:88:D4:D8:8C:81:CC:B6:B1:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfuFrdCfSHbqaqqI1NiMgcy2sQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ceea91-0a2a-4a4e-917b-c6161ce395af/1/hfuFrdCfSHbqaqqI1NiMgcy2sQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:49:9a:d9:3b:83:ee:68:58:cc:54:6a:37:81:6c:3e:07:23:
07:20:bb:c5:02:fb:6b:fa:af:0e:f1:85:94:7f:8e:a5:ad:fc:
a7:a3:79:7c:77:26:d3:76:f4:40:4c:0a:80:8c:a9:35:47:29:
d0:0e:49:19:7a:89:6c:7a:7a:8e:be:ba:36:1a:78:e7:59:30:
2d:b8:9b:aa:70:11:64:11:e0:ef:95:65:d0:96:ea:27:57:47:
33:7f:41:3a:b5:6b:e9:42:2b:9e:98:98:fd:01:37:72:0c:7f:
39:fd:0c:b1:5b:e1:ce:a2:f8:a9:a8:78:a8:cf:a2:34:52:a9:
49:cc:8a:75:a2:e7:f4:f2:43:36:2d:c3:b1:73:12:0c:89:7d:
7d:e1:80:a9:59:84:79:84:30:d6:ef:8b:44:c7:f8:cb:c5:12:
16:b0:ce:0a:a9:d1:97:ce:18:5b:28:8c:99:30:36:b1:5a:cb:
88:dd:5c:85:eb:8c:55:f3:5b:82:a8:4e:67:f1:e4:06:ee:c9:
d6:b1:63:df:3f:17:e0:e9:72:74:31:ff:ac:30:d8:30:ee:72:
38:10:97:6e:13:00:fa:cd:cd:97:51:89:97:71:17:79:7f:c5:
3a:7f:f2:cb:8f:47:0e:07:b4:84:72:4e:24:7e:42:99:d6:c6:
e3:74:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:10:41 2025 by rpki-client