Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: qOJ/MPyTKCtqbs4S6y+G3Yx+/YNRdiJyEMYn0t9CaoM=
Subject key identifier: 18:F0:E4:35:6A:F0:7C:BF:3C:87:28:D1:76:B2:96:B7:25:DD:07:46
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 019647451E1618E6B6CBECC07C1C62AC31FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 14F6
Signing time: Fri 18 Apr 2025 05:00:33 +0000
Manifest this update: Fri 18 Apr 2025 05:00:33 +0000
Manifest next update: Sat 19 Apr 2025 05:00:33 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: uWU9LSmcQWgbeMW9SRXhyuHWoDYhT02fZIbsve7aepg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:45:1e:16:18:e6:b6:cb:ec:c0:7c:1c:62:ac:31:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Apr 18 05:00:33 2025 GMT
Not After : Apr 19 05:00:33 2025 GMT
Subject: CN=18f0e4356af07cbf3c8728d176b296b725dd0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:6c:28:d8:3f:1a:5d:84:81:ad:35:8a:b4:
05:f3:a6:02:cb:f6:b4:df:f9:67:23:21:45:a4:b0:
81:2f:21:d6:d3:40:de:02:7c:af:eb:1c:a9:c5:90:
fa:f6:9e:88:91:7d:0d:b4:b7:0a:a2:1b:19:d7:28:
53:03:e4:cd:d5:5e:64:c3:dc:ac:47:9f:1b:0e:d6:
c6:7f:d5:69:7a:e8:c9:75:4b:e3:b7:0a:fc:7a:a1:
4e:1b:eb:70:49:7c:9a:bf:0b:b1:3a:98:65:0e:5f:
76:2c:d6:24:92:51:95:48:a6:09:2b:5c:d6:63:5d:
f2:12:ba:46:36:04:f8:21:02:a2:45:e6:c5:3b:4d:
aa:59:28:c2:1f:f2:89:4e:05:27:c6:09:7d:cd:d3:
28:9c:84:a1:66:a9:68:57:3d:2a:84:36:37:ce:21:
fc:50:a7:b6:f8:b9:15:c5:99:f2:88:4f:89:8d:03:
77:ff:36:0f:5b:07:0c:a2:de:48:d7:4c:75:cb:07:
f8:32:97:41:3a:c6:c5:a0:13:7c:e9:7c:ab:61:64:
c0:c5:56:f5:f9:00:c5:4a:b9:3f:a5:b5:b0:94:a6:
01:5b:05:a4:25:f1:ec:33:6b:8e:dc:fb:91:0f:03:
e0:f2:01:13:88:07:2a:fb:4e:15:68:0e:bc:c6:70:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F0:E4:35:6A:F0:7C:BF:3C:87:28:D1:76:B2:96:B7:25:DD:07:46
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:3a:5c:cb:8d:b9:fa:d1:2e:47:10:1d:2a:58:2f:c1:06:3d:
1a:20:68:db:14:99:a8:7d:6d:df:6b:2f:6b:fb:0e:de:67:1f:
fd:45:86:3c:68:88:7f:75:c8:52:c4:e2:bf:ac:b7:2a:b0:c2:
dc:b2:27:06:14:34:32:ba:96:10:46:b0:86:05:ad:a0:02:00:
d6:3c:b8:17:1f:a4:21:7a:b5:e5:36:48:9c:29:f8:bc:85:12:
e8:ec:e3:d7:fb:9d:91:c3:20:cc:b6:fc:7e:3d:db:49:d9:09:
38:2d:92:19:b3:1b:00:8d:f8:90:a7:98:d8:a1:06:b2:7e:a2:
ae:0d:38:a3:16:63:26:c0:3e:96:8f:26:d5:cb:17:cd:15:31:
32:70:38:75:83:cd:95:04:b0:59:54:eb:ca:31:64:f0:7b:61:
d2:57:25:04:1f:08:03:58:af:b0:34:1c:9e:23:7b:c9:14:17:
21:07:ef:c1:3e:3b:c3:f0:f9:c9:c1:be:ad:bf:14:17:0a:37:
bd:3d:7f:7e:55:85:cc:a4:d3:47:67:37:f8:22:ff:d8:64:91:
d3:a3:1f:74:f8:5c:bc:2f:37:b8:29:37:63:5b:a9:cb:bc:42:
bf:3d:1c:47:b1:59:e7:85:b3:02:67:62:8b:3d:b5:80:4b:2c:
2b:9a:88:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:21:45 2025 by rpki-client