Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json)
Hash identifier: zggMUkk4Xg78sItFUYSf9oNdoNjNSMsY0v9jfFEqOt8=
Subject key identifier: BA:19:CF:31:4E:D8:0D:64:15:02:B9:66:23:A3:2B:96:CF:25:B7:C3
Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Certificate serial: 01964D4728C369EF0F062C3914B582A74A8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
Manifest number: 0D17
Signing time: Sat 19 Apr 2025 09:00:31 +0000
Manifest this update: Sat 19 Apr 2025 09:00:31 +0000
Manifest next update: Sun 20 Apr 2025 09:00:31 +0000
Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: VN2EyZEPxvtutAkkrhU57dax5WkG4RJBIjFopYsnwKo=)
2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:28:c3:69:ef:0f:06:2c:39:14:b5:82:a7:4a:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4
Validity
Not Before: Apr 19 09:00:31 2025 GMT
Not After : Apr 20 09:00:31 2025 GMT
Subject: CN=ba19cf314ed80d641502b96623a32b96cf25b7c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:17:a6:d2:5d:79:6b:89:15:93:c7:49:4b:95:
0f:7e:f9:23:32:c6:e4:8a:ba:de:59:d6:4e:46:02:
61:7c:0f:68:d4:b1:39:64:2a:87:24:8c:dd:a7:4b:
f4:a7:99:be:20:37:8a:30:cc:44:0d:e1:ba:1a:d5:
d0:c2:b9:85:89:6f:75:fc:ec:93:54:07:ec:ec:aa:
da:50:4b:55:ae:70:e9:03:09:f8:27:5a:b7:d6:dd:
8a:3b:05:90:a6:d2:14:2b:65:74:c9:29:d2:7f:43:
27:60:be:49:aa:eb:e7:37:2f:89:76:1d:ab:6a:82:
9a:c9:4e:16:1b:75:0f:27:5f:9a:6f:f7:31:09:57:
92:66:01:6b:74:9c:f5:6c:9a:c3:28:0b:a6:3a:50:
23:37:01:1b:68:b4:51:0b:b5:df:8e:14:72:ae:a0:
e1:08:98:f3:33:f7:89:64:28:63:8a:d4:2a:76:6c:
73:a0:0d:81:f7:c7:ae:ed:fc:5b:c3:9f:c2:5e:97:
fa:8d:6f:c9:32:73:51:b3:44:79:15:ba:03:97:81:
c2:94:d2:42:60:ca:3e:ff:21:46:f6:b7:b1:23:39:
f7:44:0c:b0:7b:ec:a4:3f:6f:cf:7a:80:5f:47:b7:
11:6e:b6:f7:d8:90:29:ca:bc:08:fe:19:58:86:33:
7b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:19:CF:31:4E:D8:0D:64:15:02:B9:66:23:A3:2B:96:CF:25:B7:C3
X509v3 Authority Key Identifier:
keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f1:46:39:c4:8d:cd:17:c0:88:ef:5c:90:f4:9a:e6:f6:ff:
92:35:17:2d:79:b1:01:64:ae:ee:55:14:d8:c2:86:53:ed:e0:
69:b0:c8:50:04:ea:0d:cc:d6:83:c6:65:0b:04:24:e3:67:d3:
8d:2c:0d:20:de:ee:0e:fa:27:1e:2e:da:00:e3:4b:08:4b:66:
de:73:fb:ee:c1:8e:56:35:3e:ca:67:d9:74:ec:50:b5:00:6f:
e0:67:81:d7:c9:02:80:27:99:e1:e7:c0:cc:6a:6f:32:91:91:
9d:33:4a:fd:e1:c3:b8:98:99:69:a8:7c:94:32:12:e1:2b:b8:
db:56:47:5f:52:bb:03:79:59:9c:3d:7c:b3:36:83:a7:47:4f:
8e:0d:19:24:51:bf:7e:68:6c:71:f7:48:ff:1e:82:29:3e:28:
45:a1:0f:3b:4c:72:00:1d:b1:ff:ca:ab:25:0e:05:0b:3b:99:
7e:86:b1:ce:50:f2:42:b4:db:a7:ce:43:b7:21:b4:8f:79:e1:
f2:7a:5d:e3:9a:c4:70:4f:f3:c0:cb:14:42:66:1b:6b:fd:d3:
bf:e6:28:f6:21:04:ec:0a:d3:f2:db:87:bf:ea:ef:d9:32:e8:
bd:14:21:5d:01:a7:b8:96:d0:80:5f:5e:d6:4e:36:83:97:0f:
67:2f:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:02 2025 by rpki-client