Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
File: hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft (raw, json)
Hash identifier: azXkfadYPdleavcVTMJ51nJxYcFxLVZd6qs99uO5B/E=
Subject key identifier: D1:BC:92:77:6A:DA:53:2F:11:1B:AB:D3:2A:99:27:AC:D5:C0:AC:C1
Authority key identifier: 84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
Certificate issuer: /CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Certificate serial: 01963E78CFAF76C6284A2D12031C0CCD22D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
Manifest number: 0FA6
Signing time: Wed 16 Apr 2025 12:00:26 +0000
Manifest this update: Wed 16 Apr 2025 12:00:26 +0000
Manifest next update: Thu 17 Apr 2025 12:00:26 +0000
Files and hashes: 1: 9IYJ3JT9uAsxxt2lyjGjJVqXG38.roa (hash: Fm2Q+Megk5GLVl9u0EHQZ20RgFMN11FSbY9n50k8CTU=)
2: hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl (hash: VWdLU5KDQyNFoILFO4l5fM0KcRcmDUTqH8Y7oklpsBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:cf:af:76:c6:28:4a:2d:12:03:1c:0c:cd:22:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f430d9ad9cb9c42c4bd6690e9f5812a457a02f
Validity
Not Before: Apr 16 12:00:26 2025 GMT
Not After : Apr 17 12:00:26 2025 GMT
Subject: CN=d1bc92776ada532f111babd32a9927acd5c0acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:fc:69:d6:b3:d7:77:72:7d:63:6c:02:68:
4d:8f:f0:8c:55:52:7e:14:bb:55:bc:17:8a:95:0a:
37:1b:a9:c5:0d:66:e9:be:0e:83:83:b6:7a:bd:ba:
5d:a5:8e:57:35:72:a9:7c:9a:82:6e:ae:a7:be:4a:
d1:2d:60:1d:d3:ba:27:51:ad:b4:66:25:53:81:2a:
87:22:d8:c2:4a:c1:35:91:41:0a:c6:21:2c:3d:5e:
63:8d:c1:8c:9d:88:45:70:17:45:d4:d8:dc:eb:09:
83:59:23:b9:b3:e8:6c:40:10:1d:df:51:ba:56:e3:
77:8a:03:9b:a2:3a:f9:12:08:33:ac:ec:78:f8:11:
f3:d9:58:56:92:a9:ac:0a:d3:8a:a1:cc:f4:e8:cc:
c0:ce:38:86:9b:20:b8:0b:e9:a7:28:dd:71:24:d7:
28:61:f2:f9:38:15:b4:6f:c6:75:6e:c3:4f:49:bb:
23:aa:b7:a7:0a:8b:37:6a:7f:29:d7:c4:10:ea:2c:
cd:3c:c8:52:5d:1b:f4:cb:be:ae:40:b4:12:9a:01:
25:7b:dd:30:5d:b8:49:54:fa:bd:6a:bd:0d:bf:55:
77:4a:39:54:14:a0:10:9f:84:d9:46:8e:da:61:bc:
fa:33:71:1d:f7:3d:79:a4:4f:29:84:9f:8d:2c:02:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BC:92:77:6A:DA:53:2F:11:1B:AB:D3:2A:99:27:AC:D5:C0:AC:C1
X509v3 Authority Key Identifier:
keyid:84:F4:30:D9:AD:9C:B9:C4:2C:4B:D6:69:0E:9F:58:12:A4:57:A0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPQw2a2cucQsS9ZpDp9YEqRXoC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/abd004-c68f-49b1-a2c4-b9056ebbc576/1/hPQw2a2cucQsS9ZpDp9YEqRXoC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:b8:a2:7b:cd:45:2d:e8:61:d8:96:59:c6:b8:ab:df:dc:
cb:d5:9b:7f:ff:95:3a:6e:1e:ab:ce:2d:d7:1a:15:84:d8:e8:
e2:58:24:d9:d4:81:2b:b3:6e:2f:1a:88:a0:be:a2:3f:04:3e:
4c:aa:44:99:5f:7e:e2:46:0b:84:b9:1d:f0:b9:9c:42:32:a4:
ce:47:9f:9c:a2:eb:1f:bc:4e:e5:40:cd:0e:aa:fe:e6:b7:fe:
ee:b7:cf:6b:d7:33:6b:98:37:17:2b:0b:dc:42:d4:d5:9c:fc:
9f:f7:84:84:96:ab:12:8a:b4:25:29:33:9c:3a:00:d2:bd:cf:
22:2c:06:fe:5e:3f:fb:2b:97:38:fe:00:c6:7c:f5:a1:8f:b7:
6a:89:a9:3d:d2:fc:d6:d3:11:c1:eb:4c:3d:9f:61:36:fd:18:
c3:e7:f5:f7:71:00:43:d0:82:1e:05:5a:fe:9a:7f:84:1a:34:
16:1e:26:9e:46:27:21:6a:c1:0d:58:cf:c9:7f:40:77:7e:aa:
d8:01:2b:11:fc:5b:b8:12:71:0b:1e:c0:11:2a:92:00:c9:a4:
96:29:f7:f0:91:dd:86:38:cd:59:c9:64:fd:19:56:6f:2b:6e:
98:ed:70:ad:b4:6c:b0:0d:ec:75:da:85:bc:87:12:6c:fd:28:
08:d2:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:18:11 2025 by rpki-client