Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
File: hVxdD-JZNayRq1qtpkUmAOWNJaU.mft (raw, json)
Hash identifier: 0Lg8qZwantW7214xVViLN1a3PV4bhdyaNHr/YZDKT44=
Subject key identifier: 0F:9A:56:65:C0:2D:30:75:1B:18:31:08:BF:5E:20:1D:76:9E:A7:06
Authority key identifier: 85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
Certificate issuer: /CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Certificate serial: 019648C5AB6C07EAA7798AF3CF97FFB64D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 12:00:36 +0000
Manifest this update: Fri 18 Apr 2025 12:00:36 +0000
Manifest next update: Sat 19 Apr 2025 12:00:36 +0000
Files and hashes: 1: G0GNUJP7OR8YupD74ZDHt57bEcw.roa (hash: H4bYVhJJbIf3r2c4VUmIGnEkOT0psTbbUXpiYyljGec=)
2: Y2TFuYLjHOh19Nsn9IXR0BXi0GA.roa (hash: EGQLXveu0rNxAJdauUxs2BGnjI8o9tZmq21wSdM7BEk=)
3: hVxdD-JZNayRq1qtpkUmAOWNJaU.crl (hash: cNJfbSE+JdmqlO4o3+fCfYcuJBFdChZQs/L/IeeOgmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:c5:ab:6c:07:ea:a7:79:8a:f3:cf:97:ff:b6:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855c5d0fe25935ac91ab5aada6452600e58d25a5
Validity
Not Before: Apr 18 12:00:36 2025 GMT
Not After : Apr 19 12:00:36 2025 GMT
Subject: CN=0f9a5665c02d30751b183108bf5e201d769ea706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:2d:ab:02:2e:98:11:41:51:d3:21:66:24:
32:59:87:02:f0:c4:9d:50:bf:a5:e5:89:d5:1d:ce:
52:9e:7f:16:83:4f:6f:48:ef:b8:a8:f8:a9:9b:a9:
fd:14:d5:3c:f8:2a:3e:04:8b:7b:1d:6a:bb:d0:0f:
a0:bd:74:ab:6a:da:d6:2a:3a:be:35:f9:3b:15:aa:
f5:94:55:03:d5:25:5f:13:47:19:52:af:7d:4d:c2:
11:d3:ed:47:82:c1:7c:93:71:96:e3:97:5a:fe:e7:
cb:48:8f:6f:8e:e1:55:fa:c3:1d:8c:b7:1b:9f:fd:
79:e7:34:c7:5e:11:2d:5c:4f:15:44:ba:c3:5d:b0:
f7:4d:a0:4c:55:ec:21:0e:17:8e:bf:f0:6b:cb:5e:
c3:f8:bf:45:52:2d:69:40:57:9d:83:a4:99:f2:6f:
77:b4:de:9c:b3:ec:91:a5:62:2a:85:6d:8d:1e:0e:
66:a6:0d:40:13:8d:53:3b:de:27:e3:f5:b2:66:88:
3c:72:a2:30:1e:67:08:3a:42:47:58:47:44:1a:30:
3e:68:85:26:81:1e:19:cd:c9:03:85:88:88:28:61:
3b:4e:4a:b0:fc:fc:e3:6d:3c:55:6a:ee:ff:59:32:
ff:ae:af:58:b7:81:26:9f:c3:e2:bb:c7:57:80:24:
ce:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9A:56:65:C0:2D:30:75:1B:18:31:08:BF:5E:20:1D:76:9E:A7:06
X509v3 Authority Key Identifier:
keyid:85:5C:5D:0F:E2:59:35:AC:91:AB:5A:AD:A6:45:26:00:E5:8D:25:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVxdD-JZNayRq1qtpkUmAOWNJaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a2b051-3a23-4835-b30d-2af4791d96eb/1/hVxdD-JZNayRq1qtpkUmAOWNJaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1d:c4:c7:df:aa:c6:9f:d1:26:f8:0a:70:ff:70:f6:7b:c2:
ef:06:9a:00:ff:52:c4:ce:36:81:8d:7c:ac:b9:a5:b4:2f:de:
79:c9:12:a8:12:54:9b:24:13:6c:3c:63:43:97:27:e1:c5:a1:
da:ae:e5:e2:73:65:31:f5:5b:99:10:df:4b:14:58:52:af:80:
79:11:60:69:12:bb:df:c6:75:9e:0e:f0:9d:c8:de:a9:26:5a:
ef:0a:11:ef:7b:3a:f6:b1:1f:8d:5a:9b:8c:84:61:8d:74:1a:
ed:4c:17:a6:72:b6:84:b3:fd:fd:c8:cc:19:fa:7b:ba:13:ad:
34:a9:48:3f:a0:95:b5:a5:48:0c:05:a5:ab:51:b4:f3:dc:c9:
67:66:5f:4e:b9:8e:25:49:9e:26:aa:a3:8c:ca:4f:51:6a:24:
ac:0d:fd:d2:05:d3:f9:c8:e0:96:a6:1e:e5:0d:04:98:40:69:
ae:e3:76:85:1d:47:cb:63:80:e8:c4:9b:a3:5f:d0:2d:29:a6:
c9:79:61:39:47:1d:0d:01:c7:aa:d7:7a:57:65:0a:d6:72:96:
46:45:0c:35:d8:43:e0:62:c2:97:bb:8c:4d:aa:61:3a:c7:de:
76:04:88:65:de:50:54:d9:c8:ae:f9:52:c3:59:44:58:82:56:
40:f3:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:58:19 2025 by rpki-client