Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
File: hAVuIt0SPINMCkqnRRbV-zzHfdE.mft (raw, json)
Hash identifier: AHReoQ7rxYm6Y74/BeKnnq8ecFQsLKu3zg2EBWNaFu0=
Subject key identifier: FB:A6:5D:B8:8B:99:A6:F4:57:55:7F:C4:DC:A1:0F:FF:00:D7:EC:9F
Authority key identifier: 84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
Certificate issuer: /CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Certificate serial: 01964C6BEAF2DA298573B0CA00DA0B5BFDD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
Manifest number: 0375
Signing time: Sat 19 Apr 2025 05:01:02 +0000
Manifest this update: Sat 19 Apr 2025 05:01:02 +0000
Manifest next update: Sun 20 Apr 2025 05:01:02 +0000
Files and hashes: 1: egLJr-eSZpk4sDdrCGxUJjm8wVU.roa (hash: NBKYZF7j3MH2zl3XNbkXJFKVIPixuj4t75EEGhwneCE=)
2: hAVuIt0SPINMCkqnRRbV-zzHfdE.crl (hash: x6xZBj6P9Ddm9KXjpCQV8jLRVTJt9CcioEEBh19C9Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:ea:f2:da:29:85:73:b0:ca:00:da:0b:5b:fd:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84056e22dd123c834c0a4aa74516d5fb3cc77dd1
Validity
Not Before: Apr 19 05:01:02 2025 GMT
Not After : Apr 20 05:01:02 2025 GMT
Subject: CN=fba65db88b99a6f457557fc4dca10fff00d7ec9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b7:3e:80:31:50:af:3d:66:b3:31:04:66:d5:
dd:57:90:00:4d:89:f4:f9:b5:11:5e:12:8e:56:90:
65:8c:3b:3b:d5:34:fb:04:02:f2:6c:93:b0:d1:3a:
30:65:60:1e:e0:76:cf:4a:0a:3b:57:aa:15:7f:e4:
ba:b3:b7:aa:15:a3:38:c4:31:fa:e8:54:b5:f3:42:
d4:a0:0d:3d:71:dd:10:9a:34:f3:89:40:2d:d2:11:
97:40:c3:6a:76:59:7a:81:bd:ff:92:f8:c7:32:f5:
5a:c6:d0:2f:7e:44:a9:2c:2c:c6:51:92:0f:5a:9f:
aa:8e:b7:49:b4:55:57:00:0b:87:03:c0:b1:19:93:
18:bd:98:3f:d6:d2:49:24:65:d1:21:53:08:e3:40:
32:27:39:34:fc:cb:b5:bd:ed:a0:7c:7a:a9:7f:90:
3c:d6:c4:e0:3e:24:65:55:0d:93:af:31:a4:dd:ea:
f1:45:1b:f0:c4:f2:18:7c:93:d2:b5:76:97:15:12:
13:c8:33:67:a3:87:59:bd:64:8c:d7:b4:9b:25:d8:
3e:c7:62:aa:6c:88:ac:4e:98:de:76:c0:51:10:70:
4a:9e:0b:83:96:0b:60:5f:08:7b:8d:b1:d8:16:39:
71:fa:09:ed:6a:2d:a6:50:9a:64:49:b4:d7:91:0f:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A6:5D:B8:8B:99:A6:F4:57:55:7F:C4:DC:A1:0F:FF:00:D7:EC:9F
X509v3 Authority Key Identifier:
keyid:84:05:6E:22:DD:12:3C:83:4C:0A:4A:A7:45:16:D5:FB:3C:C7:7D:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAVuIt0SPINMCkqnRRbV-zzHfdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/53a721-1f91-488a-b5a3-59c9c3fb9947/1/hAVuIt0SPINMCkqnRRbV-zzHfdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:16:10:8f:aa:db:68:ef:a4:1c:42:b2:bb:e3:6d:e4:04:33:
b9:68:e5:01:d5:32:8c:e7:b4:e2:6c:1a:0f:91:b2:df:a0:86:
47:8b:e9:5a:1a:eb:cf:36:74:68:dd:a7:e1:fc:da:f6:79:38:
2f:6e:a8:53:8a:94:c0:9b:4e:20:6a:cc:ae:7e:04:52:0b:9f:
dd:f1:da:b4:fd:6f:83:8b:9c:53:a5:bc:ef:94:77:e9:c4:dc:
55:ee:59:29:96:9f:2e:24:b1:82:35:10:74:a1:78:6a:de:26:
fd:a8:29:0c:e8:50:90:4a:f3:70:10:94:0c:8c:f1:61:d3:ff:
60:6f:04:70:26:ac:12:2b:d0:40:2c:8d:50:55:26:27:0e:04:
3a:44:7a:53:da:01:68:d2:04:ed:23:7c:b7:43:8c:9a:12:46:
51:f2:8a:e0:53:89:94:41:58:40:b5:8f:d6:e0:14:53:d1:6f:
2b:f6:9e:ba:b8:a9:50:71:31:3d:99:c6:0d:7f:ed:17:61:72:
15:68:e4:fa:15:a7:c2:a3:f9:e2:71:a6:a7:ff:16:6e:33:d7:
94:13:0c:0c:98:0a:33:29:10:2a:fa:d0:7b:a1:ed:34:1b:1b:
7d:8c:65:1d:69:03:98:bf:13:82:31:a5:77:f5:70:83:42:dd:
8f:73:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:18:01 2025 by rpki-client