Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File: hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier: cJdlaLmVgren7AFguwl1JHa+pj/k3eusY6777TbqIbI=
Subject key identifier: D2:E9:A8:F1:B9:BB:D9:8F:3C:A4:3F:C8:63:8F:87:1D:FF:15:7E:D7
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer: /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial: 01965F4D8120B71E83E401128356E5D2F9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number: 1243
Signing time: Tue 22 Apr 2025 21:00:36 +0000
Manifest this update: Tue 22 Apr 2025 21:00:36 +0000
Manifest next update: Wed 23 Apr 2025 21:00:36 +0000
Files and hashes: 1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
2: EqTLLrStWQ1_lYgYRBgmgDPtF_4.roa (hash: VTc+tW3JK91nfNjIEDHdLe+grDG6p0570ue39trIFTw=)
3: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
4: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
5: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: UyvyCq5hyFF2eg8gn25/qwlX+g5N4ngH6VSC3I+et58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:4d:81:20:b7:1e:83:e4:01:12:83:56:e5:d2:f9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Validity
Not Before: Apr 22 21:00:36 2025 GMT
Not After : Apr 23 21:00:36 2025 GMT
Subject: CN=d2e9a8f1b9bbd98f3ca43fc8638f871dff157ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:2d:4b:fb:ac:7e:58:58:34:e8:1c:2d:d3:
05:52:ee:65:e3:f7:92:64:c3:b0:5d:bf:9c:7c:cf:
c1:a5:8e:7b:13:8e:c9:56:74:3d:0e:75:de:00:4a:
65:15:51:42:01:3e:fc:94:f7:2e:92:4a:7d:12:5a:
7b:da:a2:56:14:ad:d4:5f:39:d4:59:49:6d:ea:d1:
47:94:17:af:a1:f2:20:d4:ba:21:81:e4:7c:ac:05:
8a:4d:ad:0b:1e:3f:d6:6b:e8:5a:14:e4:bd:35:3b:
e7:aa:79:cf:cf:3b:e1:85:09:87:d6:39:a0:bf:46:
22:89:d6:28:ee:13:b3:da:0f:3b:49:7d:96:a8:a6:
04:51:eb:d1:1b:52:35:13:8e:7d:e3:9d:f1:70:6b:
63:a5:5a:b1:83:07:1c:b9:24:12:81:cf:c1:3a:cc:
01:cc:90:24:93:66:bb:e7:51:3e:c1:40:07:1d:52:
dc:ec:4e:04:74:66:06:12:20:47:c6:2a:51:ef:4e:
31:36:39:5c:aa:7c:c6:7e:97:6c:1e:16:ea:fb:22:
bb:d5:a3:05:98:1f:9e:fe:ac:66:a3:db:1c:38:2b:
8e:13:b0:f5:a2:2b:f6:8a:3b:f9:55:13:26:a5:fb:
07:0c:01:7a:e1:5d:be:db:25:bc:e4:f3:fc:2e:1a:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E9:A8:F1:B9:BB:D9:8F:3C:A4:3F:C8:63:8F:87:1D:FF:15:7E:D7
X509v3 Authority Key Identifier:
keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a6:e7:61:c5:5d:2e:a6:1c:b9:28:bb:a5:b8:3d:96:c7:b4:
26:a7:72:17:c9:cc:b2:2c:00:ac:3d:2c:72:5c:e9:26:32:a8:
d6:ad:8a:38:e2:47:26:97:c8:c1:d1:0c:01:13:da:e1:ff:51:
e4:34:06:54:7c:86:d0:67:28:c7:26:e8:fa:8d:27:71:02:53:
46:3e:06:5c:e9:19:d9:83:da:9a:a3:03:79:79:57:4d:db:5a:
2b:a3:3e:a1:ab:8f:d7:26:c7:0f:20:6c:c1:a0:9f:a9:6b:a6:
96:fe:9f:da:e7:2d:0f:af:e1:be:17:1a:2f:3e:aa:c8:2d:cb:
d9:4b:be:87:bb:ba:ce:86:72:9d:45:e3:9b:97:e9:d9:cc:c0:
a9:a6:76:02:22:75:f8:9d:4b:c8:c4:08:dc:d7:64:a6:0b:66:
c9:9b:ba:87:98:06:69:5f:11:d3:b7:96:b7:c7:5c:07:f5:01:
f3:46:2e:f5:8a:8c:8c:b7:3b:4a:40:47:8c:40:7b:52:7e:e8:
af:95:ba:a8:55:62:dc:30:4f:2d:97:c5:24:ed:20:98:a0:f0:
68:9f:e8:75:3b:40:2e:2c:ff:0e:cf:59:71:c4:ce:2e:3c:7c:
a1:a5:f7:d7:83:70:69:f7:51:e9:5c:1b:89:82:43:ec:fc:4e:
72:e4:47:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:37:55 2025 by rpki-client