Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
File: hrIjA95LCocPz-e2VWwCT3XHajQ.mft (raw, json)
Hash identifier: 6e4HyRpm9RPT1VvNpo820opGPdpEP3j87AHcfBFqTf4=
Subject key identifier: D7:41:54:62:F5:97:D7:72:6B:76:34:81:F9:D9:AC:C1:D5:6D:6E:0E
Authority key identifier: 86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
Certificate issuer: /CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Certificate serial: 019612B34610457B673DD8247F54642D5FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
Manifest number: 0FDC
Signing time: Tue 08 Apr 2025 00:01:00 +0000
Manifest this update: Tue 08 Apr 2025 00:01:00 +0000
Manifest next update: Wed 09 Apr 2025 00:01:00 +0000
Files and hashes: 1: ZjB1G19DDx_6Q5oScLG5jMaC8XA.roa (hash: 7/c0oLP47xBtzbpIYR3dJCRfL58YizRnGJk+IU5Vsgc=)
2: bckQXnbwfKXBuJ2fgXGJ6V-6Qfk.roa (hash: v7e6EIu7w13jemXrMUjQBx6+ZKi093MMCQO7o8uB3rY=)
3: hrIjA95LCocPz-e2VWwCT3XHajQ.crl (hash: F98k8e1Z6Wv/PVKdakex9zIuQC0BpSuDWPJOzzUC+tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:46:10:45:7b:67:3d:d8:24:7f:54:64:2d:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86b22303de4b0a870fcfe7b6556c024f75c76a34
Validity
Not Before: Apr 8 00:01:00 2025 GMT
Not After : Apr 9 00:01:00 2025 GMT
Subject: CN=d7415462f597d7726b763481f9d9acc1d56d6e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:64:e5:61:cc:f5:79:07:00:dc:9c:c1:9d:96:
d5:97:64:6e:4b:49:79:be:2c:3c:33:a1:f0:71:dd:
be:66:24:b8:19:e5:2c:6e:e9:cd:0a:7a:a7:a3:0b:
31:af:c6:67:f0:12:0a:eb:d7:22:af:02:ac:7d:35:
2b:80:00:01:18:03:ed:dc:f6:80:af:70:d7:17:df:
29:b4:83:81:bf:c2:64:5d:89:31:41:63:a9:02:45:
f4:89:c2:00:1f:93:d1:e4:b0:67:cc:fa:a0:a2:e8:
d4:da:d4:79:24:6b:8b:e8:d8:5f:dc:70:34:5a:80:
a2:c6:4a:36:c4:5d:5f:e7:e6:02:33:8f:16:b5:47:
3b:be:38:bf:90:51:a8:e6:e2:df:e9:59:31:80:44:
f1:36:8b:99:c5:38:7e:c3:2b:ac:5d:0e:fc:88:b7:
cf:50:72:8e:31:f0:34:e8:30:84:a4:2a:60:2e:ca:
de:fe:7d:22:bf:81:17:42:11:df:c2:19:14:1b:9a:
ae:77:01:2d:8c:b2:c9:78:68:b2:42:68:be:f7:d9:
8d:b8:a9:be:c0:c7:aa:d5:cb:07:dd:77:23:49:5d:
9e:61:fa:89:43:ea:a3:2d:cc:ea:cd:01:7d:b5:b7:
94:6b:78:c2:33:27:01:4f:3a:fd:df:dc:3b:56:89:
63:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:41:54:62:F5:97:D7:72:6B:76:34:81:F9:D9:AC:C1:D5:6D:6E:0E
X509v3 Authority Key Identifier:
keyid:86:B2:23:03:DE:4B:0A:87:0F:CF:E7:B6:55:6C:02:4F:75:C7:6A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hrIjA95LCocPz-e2VWwCT3XHajQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/afd70f-c300-49cb-b729-72ab5987f609/1/hrIjA95LCocPz-e2VWwCT3XHajQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:20:aa:ee:fd:5c:a7:f4:de:7d:1b:1f:34:8a:79:e4:b3:38:
8d:ea:bb:a4:93:56:dc:e4:9f:b4:61:12:b5:eb:51:7a:04:b9:
af:35:5c:5c:f2:24:6a:78:a2:95:06:0a:eb:25:73:f5:9d:19:
95:58:0b:89:f8:74:e5:6f:7d:62:0c:19:04:ae:0d:0b:36:92:
f6:d9:17:c6:93:2f:10:e9:b5:c4:20:31:3c:c3:71:de:ad:1c:
2a:e5:93:aa:fe:5c:73:77:64:ab:0d:e3:22:37:eb:4d:52:f6:
1a:bf:3d:10:84:a1:12:f1:bf:3f:e3:90:75:35:e5:5c:42:f6:
40:14:e5:67:a8:37:ca:4d:47:93:c9:20:75:bf:0f:cc:33:1a:
a8:05:4c:e2:e4:96:16:2c:4d:6b:ca:50:1a:3e:a3:07:68:3b:
8f:cc:dc:f5:55:7c:60:ec:20:a0:2c:5e:e7:ba:2d:1c:98:b8:
ae:4d:e6:17:6f:d4:0a:97:85:c6:a3:74:f1:09:70:82:80:1a:
b8:a5:f7:be:93:0f:4e:cc:15:7e:e8:3c:c5:2a:2f:23:10:3a:
1b:1e:ae:80:de:e2:4d:0d:f7:8c:f9:7e:57:81:6d:2e:a0:35:
0c:6b:74:3f:d5:d6:8b:29:70:8a:7f:d6:fb:5e:11:67:d5:61:
7c:2f:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:58:09 2025 by rpki-client