Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
File: hP-lQvPYybB7926uioaYWj17Tcc.mft (raw, json)
Hash identifier: 1OhIRbPtP6DlLtm+q8sxBpbltG0nmM0aauLPUSYUsyk=
Subject key identifier: 34:6A:7E:A1:2E:43:95:02:D5:70:30:0C:2A:33:E9:F5:7C:DA:6C:D7
Authority key identifier: 84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
Certificate issuer: /CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Certificate serial: 019649A212E0BC3218F66228AABB7D859DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
Manifest number: 0EC1
Signing time: Fri 18 Apr 2025 16:01:20 +0000
Manifest this update: Fri 18 Apr 2025 16:01:20 +0000
Manifest next update: Sat 19 Apr 2025 16:01:20 +0000
Files and hashes: 1: hP-lQvPYybB7926uioaYWj17Tcc.crl (hash: k+j4G2rSRjou4D4voSQEtE8vsqjNXMIUTtseoxG5ndY=)
2: uVc-YEHIfoCC97dYSAB-pvf1GkY.roa (hash: xpxJQ9Mtn3be8wfSELsmv9qWpA192efhc4xx/FDBoxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a2:12:e0:bc:32:18:f6:62:28:aa:bb:7d:85:9d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ffa542f3d8c9b07bf76eae8a86985a3d7b4dc7
Validity
Not Before: Apr 18 16:01:20 2025 GMT
Not After : Apr 19 16:01:20 2025 GMT
Subject: CN=346a7ea12e439502d570300c2a33e9f57cda6cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:07:6b:53:c7:00:b5:cd:7c:7b:fe:41:5b:28:
c5:cb:6f:96:dd:d3:7d:77:e3:7d:49:b7:b0:40:cb:
98:9d:4b:03:83:04:07:3c:a6:b7:38:69:da:e9:80:
41:3d:e7:ef:68:37:28:6c:34:9d:b5:9c:da:f8:fd:
56:60:b9:be:0c:39:3e:4a:c2:e6:d4:33:59:5f:6c:
78:0d:e0:b1:79:9d:ea:a7:55:6b:d9:98:f7:ee:86:
1e:b6:9f:f0:6c:83:f2:c4:d6:0f:65:18:4d:11:e3:
ef:1e:af:22:37:b3:e4:ed:a0:54:39:b7:89:f9:44:
94:e7:f9:45:7c:a9:7b:7f:c0:b3:8b:81:0c:8b:ad:
e7:09:ed:32:34:76:db:c3:6d:79:2b:cd:9b:63:f4:
e6:5a:bc:f8:6c:72:fe:cd:ed:09:84:e2:76:d5:76:
65:c9:8e:17:37:fe:0e:a2:43:6b:dd:a6:27:0b:a5:
60:db:20:3b:7e:0e:ee:14:a4:6b:99:ff:e8:99:b0:
51:aa:d8:79:2a:1a:76:50:ff:50:23:3e:7f:a9:78:
91:d1:b4:2d:30:ba:71:e2:37:ba:35:8a:ee:72:27:
b9:da:98:46:6c:2a:b4:08:46:ff:5c:c3:a3:6f:5a:
88:ea:c1:b6:a5:01:05:79:79:b1:34:10:f3:7d:2f:
1f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6A:7E:A1:2E:43:95:02:D5:70:30:0C:2A:33:E9:F5:7C:DA:6C:D7
X509v3 Authority Key Identifier:
keyid:84:FF:A5:42:F3:D8:C9:B0:7B:F7:6E:AE:8A:86:98:5A:3D:7B:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hP-lQvPYybB7926uioaYWj17Tcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/71fff9-343d-4f07-a491-7c0fd29cf3e9/1/hP-lQvPYybB7926uioaYWj17Tcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b9:9d:ed:48:53:79:9f:c2:fd:2f:b9:4f:68:0c:4c:cc:5c:
bc:d1:e6:a4:68:1b:46:14:fb:8c:19:1c:8d:1c:96:86:c1:bc:
4c:e8:f0:7a:b7:33:8d:76:40:82:c1:f6:90:74:00:44:03:ac:
9b:22:54:f9:45:9f:6a:5b:0c:21:88:7a:e0:03:10:ae:bf:60:
75:50:c0:9d:8c:6b:6c:18:62:c9:1c:c4:37:e8:eb:c0:df:3b:
48:07:08:d3:c9:b6:f4:c6:7d:fb:db:fe:b1:7a:e7:ad:e7:a5:
e0:e5:14:ab:98:d4:a5:6e:62:48:90:71:c1:74:96:b7:70:c9:
a9:ef:13:fa:78:8e:bd:cd:bf:1f:98:38:9c:58:7d:e4:ed:86:
39:88:1b:05:94:99:aa:c6:fd:ea:dd:0e:a6:f1:f4:7f:66:b8:
b6:a3:cf:a8:ad:78:48:71:a3:c1:d3:a8:f5:48:34:2d:e8:f3:
dc:48:44:be:9a:60:30:78:1f:86:67:a3:e3:bd:b6:4c:97:0c:
1c:71:7b:13:7b:90:07:bd:cc:3c:6a:ca:64:bf:a8:59:48:2c:
8b:9d:bd:c0:97:74:e3:35:9b:bd:d5:17:82:4b:7d:55:7d:30:
d4:ea:f6:67:d2:59:46:74:b9:f4:3a:a7:f3:5b:82:2d:53:47:
37:48:a3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:26 2025 by rpki-client