Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
File: hNYNLcatgqJXDgAA_dmTlIvEVNg.mft (raw, json)
Hash identifier: 706CyLc1FVIyxB7X1RPZOFqJPmt260JlAXlj8ZOzPk4=
Subject key identifier: 98:95:0E:BC:B3:67:C0:52:72:C9:6F:54:AB:30:C2:3D:17:A8:1B:A0
Authority key identifier: 84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
Certificate issuer: /CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Certificate serial: 019659F085D2132484B9DC698F19CB38297A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 20:00:57 +0000
Manifest this update: Mon 21 Apr 2025 20:00:57 +0000
Manifest next update: Tue 22 Apr 2025 20:00:57 +0000
Files and hashes: 1: 01CHf_9w14ZNhv9S3Xhmvi90F8Q.roa (hash: ArkBvOvd5Ct0Kx1EUTZrG268WQ9wBIinLxbgoX9Nw3c=)
2: hNYNLcatgqJXDgAA_dmTlIvEVNg.crl (hash: /rzBEHwgwBVmYWMz3U7HgqJISEyli8puCkz4Wl8TmJ0=)
3: tDdZfF9_zffjxvEpEwDvjqS4I9k.roa (hash: U2TiVT1eXbO5ylElonLSsn5yN8P2ofyhgwF0HWpyq58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:85:d2:13:24:84:b9:dc:69:8f:19:cb:38:29:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84d60d2dc6ad82a2570e0000fdd993948bc454d8
Validity
Not Before: Apr 21 20:00:57 2025 GMT
Not After : Apr 22 20:00:57 2025 GMT
Subject: CN=98950ebcb367c05272c96f54ab30c23d17a81ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c8:43:65:57:b3:73:38:40:c3:4d:fb:b8:64:
fb:a1:1c:dd:0f:1d:e9:24:f6:2f:8d:05:61:6c:c8:
9e:fd:2b:bb:08:cb:e8:42:0f:db:11:ca:b3:02:c9:
93:91:79:32:d3:f9:05:04:83:5f:1a:b7:55:9d:8a:
ad:31:32:9f:cf:b1:de:2a:ca:52:97:38:4c:6e:53:
8a:41:de:40:d4:34:ba:dc:dd:bb:86:21:0e:aa:b2:
c7:06:09:f3:20:0c:db:8d:59:6f:45:89:d6:86:51:
30:95:59:a3:25:4e:ee:c2:7f:13:d2:83:11:f8:e9:
02:31:d2:c9:aa:16:14:f2:98:f5:01:8a:26:c1:af:
b1:c1:c1:08:b0:0d:49:35:5c:8c:c1:a7:49:ca:81:
e3:1c:bd:9d:f7:81:40:4e:1b:bd:ef:e1:49:4e:6e:
16:2b:d6:dd:65:29:10:1b:1c:e4:e8:2f:d8:96:17:
c0:2d:8d:fc:b8:82:15:9b:aa:6d:5d:70:e6:06:93:
0d:a3:5c:07:86:0e:dc:46:0f:9d:50:d5:9e:e6:49:
e1:7f:2b:c4:81:60:a7:c9:c7:74:16:14:37:28:4a:
9b:8b:85:1c:b4:ca:b5:c7:6b:15:d8:3e:f6:0a:fd:
c2:1b:76:60:d1:c9:da:d9:bc:d6:f0:9d:1c:b7:b0:
b5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:95:0E:BC:B3:67:C0:52:72:C9:6F:54:AB:30:C2:3D:17:A8:1B:A0
X509v3 Authority Key Identifier:
keyid:84:D6:0D:2D:C6:AD:82:A2:57:0E:00:00:FD:D9:93:94:8B:C4:54:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNYNLcatgqJXDgAA_dmTlIvEVNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/50d9c6-f24a-44af-8ae0-54f6bc85aac0/1/hNYNLcatgqJXDgAA_dmTlIvEVNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5c:0a:56:03:f0:b4:d0:4a:73:66:20:69:54:f6:f9:b6:69:
e1:16:64:1a:84:72:31:9b:f3:d4:60:74:b6:e5:4e:02:51:bd:
bb:46:ee:59:8d:d3:10:b1:8a:03:d3:9a:be:a4:ef:d0:06:e4:
ad:0e:c5:1e:fd:a6:bc:00:f8:38:e7:6d:df:43:9b:b7:3d:51:
b8:ba:fb:4a:96:b7:51:32:ed:0e:15:96:cb:26:87:8b:18:1e:
62:77:31:6f:31:ef:dc:d8:a3:1e:8b:6f:86:0d:e3:0b:d5:d8:
91:f4:86:72:71:bc:52:02:25:9e:ac:04:48:78:b7:45:20:7d:
63:71:7e:ba:fa:95:34:e5:4d:e2:a7:9b:0b:be:2d:31:f4:18:
bc:f0:00:c0:48:c4:a8:25:8c:71:8d:41:e3:d4:83:7f:af:b8:
08:58:96:62:80:a6:7f:b8:85:98:c1:39:19:ba:e2:2c:9d:b7:
7e:99:c3:47:c7:58:75:f8:10:18:95:14:10:fd:78:a2:f8:61:
42:e3:55:6b:92:ad:fa:b0:83:56:4f:9e:05:db:67:e3:39:10:
fb:79:de:a4:11:b7:35:ac:6f:e6:42:75:fa:ee:6b:17:c3:86:
c1:92:32:e2:87:fa:61:50:ec:d4:8b:02:a4:5e:f4:38:bb:52:
0b:37:6d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:36:33 2025 by rpki-client