Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: S0mObm/W7lb81s2q+tNnwArAJe8baaD17XMN8t6kvPc=
Subject key identifier: 97:83:0A:91:0D:F9:7A:5D:7C:A8:06:0D:56:3E:0D:BA:65:AB:21:8C
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 0196507F1040745B47BA68F6F2A0AC24666D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 05C3
Signing time: Sun 20 Apr 2025 00:00:26 +0000
Manifest this update: Sun 20 Apr 2025 00:00:26 +0000
Manifest next update: Mon 21 Apr 2025 00:00:26 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: tpkGxYw0w8Y5wy79ffb4VHPxIrvNOh3pFXUlhjFiE9U=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:10:40:74:5b:47:ba:68:f6:f2:a0:ac:24:66:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Apr 20 00:00:26 2025 GMT
Not After : Apr 21 00:00:26 2025 GMT
Subject: CN=97830a910df97a5d7ca8060d563e0dba65ab218c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:0c:e4:17:a8:b3:a7:0d:49:73:3c:3e:f0:
23:81:a0:4b:11:a6:dd:9b:cd:6b:42:89:46:8f:9a:
2f:08:ca:29:42:6e:f5:6c:6a:6a:a2:3c:da:31:d2:
5c:e2:b6:41:2a:1b:c9:73:74:57:f9:7b:43:e0:1b:
6e:64:a3:54:29:4a:66:9f:01:18:65:62:80:a5:10:
5e:9c:ab:ba:fb:cc:6c:50:4a:ca:4f:58:ee:ec:1f:
d3:7a:e9:cb:1c:58:60:bf:4e:42:5c:89:21:25:34:
ac:b0:bd:00:fc:0a:44:a4:ac:a1:f0:fd:53:38:7b:
d2:d5:66:d9:be:84:3e:d7:9a:95:79:7e:86:03:34:
6b:93:45:c3:68:36:95:ba:a6:04:2d:23:da:6e:c7:
a8:58:d1:d6:d3:f2:12:5e:e7:58:f1:e6:bb:08:52:
6f:1c:96:9c:34:d7:e9:89:82:40:27:9e:6c:d7:de:
fe:92:5c:f9:60:40:c0:9b:15:ac:2a:6a:dc:d9:a7:
07:ca:b7:70:41:04:7f:51:c7:ce:f1:82:9f:d4:42:
15:5d:d7:3d:14:2e:38:eb:61:29:d1:95:9c:ba:46:
44:9b:78:2b:a0:91:b7:3b:ba:16:32:aa:32:32:8c:
70:05:ac:f8:0e:d2:d2:31:7d:c9:7c:4b:82:bb:0d:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:83:0A:91:0D:F9:7A:5D:7C:A8:06:0D:56:3E:0D:BA:65:AB:21:8C
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8a:6f:cc:22:5b:b1:12:34:a3:a1:a5:d9:77:2a:2c:f6:c3:
7a:02:e0:d0:87:6d:6a:eb:1f:b4:94:73:1f:96:3a:8f:28:9a:
5d:b7:97:05:3b:8f:e0:3d:2a:14:cd:7f:f0:b2:cb:80:5e:b8:
f3:cc:bf:5e:71:4f:cc:71:f8:26:22:98:f6:fd:d8:00:f0:2e:
80:db:a6:eb:c5:46:8d:6d:a0:cb:b0:53:c5:45:ed:67:31:e4:
d7:dc:f9:73:62:a4:58:a1:58:8f:a9:47:22:b6:1a:af:cf:e5:
b0:db:22:15:c0:65:5d:ac:3a:74:60:2e:8e:95:de:39:a2:55:
ca:85:95:b6:6c:26:7e:22:f2:8b:1b:23:15:6e:0b:66:45:f0:
b5:f8:69:21:ad:2b:0e:66:7d:7d:5c:8c:a2:4a:62:5c:1b:a5:
24:e5:f7:a8:e1:bf:6d:20:f5:39:f6:19:16:c5:4e:d4:c5:20:
99:0a:57:96:fc:07:86:61:a0:bb:0a:9e:68:65:2f:36:74:8c:
02:00:05:2e:56:32:11:93:2d:1d:f6:b5:ed:8d:3e:7b:ad:30:
f7:70:e8:a3:13:0d:d2:54:25:79:c4:4f:5e:92:f4:50:44:0f:
aa:ad:ab:1f:52:db:b8:65:83:70:53:b0:32:ec:80:7c:e6:51:
11:48:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:45 2025 by rpki-client