Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
File: hGOGJiDUZ8inn49E7zW7YK-CP50.mft (raw, json)
Hash identifier: QYLR81uYE/DX7HCNzo7WYBmf54TId/Gq1/UOJ9TxMb4=
Subject key identifier: 88:19:5A:3F:8C:18:C5:32:E0:3A:D7:FD:55:50:CF:DB:6F:1A:EF:88
Authority key identifier: 84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
Certificate issuer: /CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Certificate serial: 01958B84B15B2B21F2FC6637BEA994E273E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
Manifest number: 0A2E
Signing time: Wed 12 Mar 2025 18:01:23 +0000
Manifest this update: Wed 12 Mar 2025 18:01:23 +0000
Manifest next update: Thu 13 Mar 2025 18:01:23 +0000
Files and hashes: 1: W_w_aPZvJbU42Kz9V0NRmPtHDis.roa (hash: ewpJRuxuw72pVqijrdCqZs1SsB9C/J+Oxbfa2mr8J8I=)
2: hGOGJiDUZ8inn49E7zW7YK-CP50.crl (hash: RcQBhetgXDtmUAP8u9+s5ZJQoHfg/T7mLZu/eaNuLX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:b1:5b:2b:21:f2:fc:66:37:be:a9:94:e2:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8463862620d467c8a79f8f44ef35bb60af823f9d
Validity
Not Before: Mar 12 18:01:23 2025 GMT
Not After : Mar 13 18:01:23 2025 GMT
Subject: CN=88195a3f8c18c532e03ad7fd5550cfdb6f1aef88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:85:26:78:cc:67:d0:06:b7:57:4d:61:06:75:
97:88:37:f6:87:ba:e2:ef:04:b4:c7:99:3d:7a:a6:
0b:3b:e9:9b:4c:16:03:1b:2a:ab:6b:f8:ff:d2:c7:
d2:26:be:76:06:4f:84:58:15:e1:19:de:7d:90:f1:
0c:bc:df:be:a2:ba:aa:a9:f2:23:46:67:08:4a:68:
56:cd:23:51:61:24:8c:be:3a:9b:37:40:fc:d5:6b:
9c:20:e0:95:f5:e6:b8:3f:b4:8e:ad:73:83:00:a7:
43:38:f9:33:e0:96:00:8c:9c:4d:05:6f:1a:25:b6:
1e:73:e9:86:cf:57:8d:9e:be:87:54:10:70:9c:28:
70:e9:97:65:07:15:03:6b:85:9b:06:8e:a8:5a:39:
c8:58:55:66:85:46:03:c1:e8:86:7d:4c:63:bc:53:
7c:49:e0:1d:cd:55:31:64:04:29:8f:6d:f1:19:12:
16:9f:53:94:a1:5a:83:a0:df:ab:98:44:af:14:f4:
5b:b7:85:b9:9a:f2:20:29:82:90:e2:59:4b:d5:83:
3b:62:7b:84:93:66:e7:0d:1e:45:fd:42:26:bc:9f:
90:9c:54:e4:56:1b:e8:d3:4d:a1:77:7b:64:e0:a9:
5c:5e:04:4a:16:17:9b:10:e0:7b:95:75:06:1e:b8:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:19:5A:3F:8C:18:C5:32:E0:3A:D7:FD:55:50:CF:DB:6F:1A:EF:88
X509v3 Authority Key Identifier:
keyid:84:63:86:26:20:D4:67:C8:A7:9F:8F:44:EF:35:BB:60:AF:82:3F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGOGJiDUZ8inn49E7zW7YK-CP50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b3411b-4862-4871-b9a8-fe7ad7fc4789/1/hGOGJiDUZ8inn49E7zW7YK-CP50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:46:23:57:62:72:a7:d7:20:ea:83:71:31:35:ca:01:8c:
a2:05:1b:a2:f6:e3:db:8c:4b:fe:26:f5:f2:4e:5b:74:ac:9c:
82:09:95:ee:fc:24:06:41:8e:3e:21:a0:49:e3:6f:f1:ec:ea:
86:52:e5:f5:44:d7:53:ec:6f:68:5e:28:6d:33:91:70:31:de:
25:fc:a3:07:22:c3:50:28:58:1d:cb:ab:2d:16:ff:ec:a5:03:
d4:46:22:bf:f4:ed:54:16:6e:e5:b7:d1:ac:27:a7:a9:a1:01:
3a:c8:c1:38:3d:71:bc:10:ba:69:a1:d3:ee:b9:29:fe:79:ec:
a8:7f:a9:ed:5a:fb:b2:22:70:cd:93:78:94:21:d5:e5:75:d1:
66:12:50:e0:61:86:43:80:24:68:87:da:c6:cb:90:41:32:a9:
67:9c:73:e1:e2:7a:85:88:8c:51:c3:8f:d2:a2:f1:d6:32:85:
5a:ce:90:40:5a:82:77:45:62:02:f7:fd:d3:a8:2e:c9:fa:6b:
86:41:18:c9:8e:41:34:e7:34:dc:c6:8e:7e:86:81:e1:8e:74:
4e:38:4e:a3:b0:5f:39:05:68:a2:df:64:a3:71:be:06:23:96:
fd:21:e6:15:6d:9d:ca:d6:fe:de:fc:b0:35:9b:d0:7c:c5:3c:
93:27:2b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:57:40 2025 by rpki-client