Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
File: hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft (raw, json)
Hash identifier: MhMOJbCGkUG9ni+3vCOAB4swsAREKGg4TfRhyLMDv24=
Subject key identifier: 47:1B:95:0C:40:5E:7A:B5:D4:D8:FC:8C:D1:7F:06:EB:12:E6:BD:80
Authority key identifier: 84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
Certificate issuer: /CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Certificate serial: 01965F848250747CB3F0F641578AAB6BD14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 22:00:41 +0000
Manifest this update: Tue 22 Apr 2025 22:00:41 +0000
Manifest next update: Wed 23 Apr 2025 22:00:41 +0000
Files and hashes: 1: hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl (hash: /rjTadsIBueS9Pv6RhoKxDmo3y6wYVs0bg9XUVv5saI=)
2: qzdc_fwaLRJwIIHpIg8vA5h4lo0.roa (hash: V/FGmYc5ZjOuTnWlxFYXLE8AFUo6wdD1TCze3ez9KOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:84:82:50:74:7c:b3:f0:f6:41:57:8a:ab:6b:d1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84df54bdc104106cdb299e01ef08a60985ec35fb
Validity
Not Before: Apr 22 22:00:41 2025 GMT
Not After : Apr 23 22:00:41 2025 GMT
Subject: CN=471b950c405e7ab5d4d8fc8cd17f06eb12e6bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:c8:67:08:7d:60:42:52:69:8f:ec:e4:4f:
d0:68:ef:3f:0c:57:1e:08:6c:8f:c1:a4:e8:82:70:
e7:50:15:42:23:1e:e6:4e:19:14:0d:d7:48:83:12:
a4:fd:b3:a7:2e:d9:a8:d5:ca:27:e5:0e:4b:22:ab:
b6:de:ef:c8:e1:95:86:3e:6e:d4:da:9f:b8:ed:18:
e1:3e:d1:c3:cd:6c:6c:20:f6:e1:95:6c:c3:2b:ad:
33:4a:91:8e:b5:bd:00:9f:d6:0f:ec:ac:85:9d:a4:
98:bb:1e:e2:f6:ad:c3:5c:f0:47:85:2b:8b:da:42:
ae:e7:17:ef:2c:4b:bb:ab:08:66:71:11:a6:cc:5b:
fe:1f:92:74:3c:72:e9:e0:65:f1:13:a3:93:9a:93:
b3:94:be:be:e2:5c:cf:10:41:07:78:cd:98:ba:76:
d4:00:70:3a:a4:ce:bc:2c:ed:d7:a5:3c:8c:b0:68:
30:48:9a:ea:07:8d:52:08:6c:d0:1e:ee:54:e9:8e:
ae:87:07:ac:f8:44:72:8c:49:51:10:1d:d5:17:43:
30:f9:21:f0:25:85:54:b8:25:5d:9a:82:e1:a0:39:
9f:cd:46:3d:7e:dd:d5:b3:ac:ec:3b:6c:24:63:49:
5b:37:9f:5c:50:43:30:a3:1e:fa:da:ff:8d:38:81:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:95:0C:40:5E:7A:B5:D4:D8:FC:8C:D1:7F:06:EB:12:E6:BD:80
X509v3 Authority Key Identifier:
keyid:84:DF:54:BD:C1:04:10:6C:DB:29:9E:01:EF:08:A6:09:85:EC:35:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hN9UvcEEEGzbKZ4B7wimCYXsNfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/f93da2-1457-4cd9-9073-806a315dd1fd/1/hN9UvcEEEGzbKZ4B7wimCYXsNfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:84:91:88:90:2a:26:f3:74:e7:d7:11:d6:7d:8d:34:d9:f8:
97:55:6c:37:94:c2:0c:b1:97:aa:86:36:62:c3:bf:cc:32:1c:
2f:fa:4f:43:28:f2:a7:c7:43:cc:91:09:ad:d3:80:18:bb:5a:
69:5b:08:1e:8e:c9:60:75:0a:28:c8:90:4b:3a:a0:30:66:e0:
13:d7:0b:33:a0:61:bb:c5:88:c1:82:ba:88:56:d5:c6:ec:06:
24:da:d3:f8:6c:5a:48:68:f9:79:47:a7:16:1d:b8:8e:b1:34:
35:df:73:66:5d:b9:32:75:0e:00:99:99:c6:5b:f2:6d:d1:82:
9c:4b:91:98:e6:fc:86:8b:82:01:d2:a6:0d:a5:c9:b8:2b:c9:
f7:87:f2:76:ea:b0:e9:ca:87:d6:19:bf:41:f7:90:8a:e7:87:
1a:f8:88:5e:0b:88:f9:15:8c:d4:d5:be:e4:8e:10:c2:b4:5a:
62:e5:ee:42:d4:11:78:1a:97:9b:98:e9:f5:97:24:d1:e4:fa:
80:4f:bd:02:26:e1:82:87:97:c2:c1:e6:df:46:0e:ab:18:53:
81:c6:9d:5a:14:8c:57:5f:e5:81:54:ac:df:43:6c:b9:ea:0a:
5d:96:0f:bf:7b:a2:f4:49:98:34:60:a9:d6:be:5d:53:0b:4b:
12:82:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:11:22 2025 by rpki-client