Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
File: hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft (raw, json)
Hash identifier: j/xzWCiqDBEZL66OnDgkFXxKKliF93HQa5lqxHSvD6E=
Subject key identifier: 66:B3:A1:26:07:C3:22:9E:1A:27:72:5F:E2:83:1F:FC:90:A8:4C:00
Authority key identifier: 86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
Certificate issuer: /CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Certificate serial: 0196504860129919D579F9C9FFC782438553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
Manifest number: 10DE
Signing time: Sat 19 Apr 2025 23:00:42 +0000
Manifest this update: Sat 19 Apr 2025 23:00:42 +0000
Manifest next update: Sun 20 Apr 2025 23:00:42 +0000
Files and hashes: 1: F1oKspcJIA5CxkgGbXIBC4yC3wU.roa (hash: AKm+230ZJqvJyVXgtMkmTb/sN72RWRXH+8ONP+ImAwA=)
2: hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl (hash: Ny+OVFljoPT31shzxt9CiB6gFQpotPVWiSuS7l+4tnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:60:12:99:19:d5:79:f9:c9:ff:c7:82:43:85:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864f301e590b83eaa38fc121b6609ff6fe52b868
Validity
Not Before: Apr 19 23:00:42 2025 GMT
Not After : Apr 20 23:00:42 2025 GMT
Subject: CN=66b3a12607c3229e1a27725fe2831ffc90a84c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:79:e6:e0:f3:d5:08:c8:ba:62:28:d1:2d:
d8:9c:55:04:2b:21:98:34:1b:50:08:bf:69:68:dc:
41:b4:26:f4:01:4c:eb:64:d2:ae:47:58:95:57:4c:
14:d9:a7:f3:f2:2d:be:22:6c:f4:10:57:e8:05:b3:
23:14:dc:bf:38:89:f4:fd:35:fb:f4:c0:1f:08:e5:
6c:13:c5:36:a7:6d:ce:2d:0f:32:bc:6e:1b:88:d2:
30:51:b3:22:c3:08:36:d1:e8:44:8a:6b:2f:bf:26:
71:e9:38:fe:9d:c9:47:25:b7:0e:0e:f9:49:0b:e5:
02:c0:c7:46:66:cd:3b:c1:3d:e1:9d:ac:f6:2e:98:
d4:84:8b:26:97:66:3d:9a:6b:23:c9:fd:5d:f7:72:
79:79:8e:ef:a0:7f:32:e0:de:d7:d6:87:2c:d2:17:
f8:75:c4:59:02:d7:bc:4b:48:dc:76:fb:00:76:e1:
9a:13:9a:7d:83:ab:25:82:cf:11:98:3a:9f:73:1b:
b6:01:17:6f:37:89:ba:7a:68:5c:f2:0c:5d:0b:40:
fd:5d:80:ef:ec:53:87:aa:2a:41:b9:f4:28:9a:9e:
32:aa:09:76:92:49:54:bf:3d:b2:69:5a:21:5e:b1:
9e:76:73:2d:8a:fe:5b:69:6e:6b:3c:50:83:eb:54:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B3:A1:26:07:C3:22:9E:1A:27:72:5F:E2:83:1F:FC:90:A8:4C:00
X509v3 Authority Key Identifier:
keyid:86:4F:30:1E:59:0B:83:EA:A3:8F:C1:21:B6:60:9F:F6:FE:52:B8:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hk8wHlkLg-qjj8EhtmCf9v5SuGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/624f64-0a4a-4d25-afce-0f39c4b3431d/1/hk8wHlkLg-qjj8EhtmCf9v5SuGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:af:bd:f8:33:33:5a:19:f9:8e:37:31:26:6d:db:78:67:1b:
a5:61:de:3f:ce:34:2a:3a:50:6e:8c:8a:0c:f3:02:c3:a7:67:
35:1c:16:48:f5:69:c4:df:e4:ce:e1:53:a4:8d:10:f1:2b:8b:
24:3a:ac:e5:2b:af:da:93:2b:68:66:2f:fb:ad:ea:7c:93:19:
29:fb:8b:e4:e3:11:07:0d:68:28:d5:10:59:54:d3:c8:c5:eb:
de:d8:7a:cd:2f:45:62:c0:fc:43:6f:cb:00:45:c9:d2:6c:bc:
48:62:b4:af:c6:71:9d:2f:48:c6:87:27:88:17:c7:6a:24:67:
0b:46:ed:6f:6e:82:d7:3b:c8:6e:0c:fd:71:6a:10:26:69:02:
6f:4d:75:7e:95:21:37:6d:ac:77:36:97:3d:0f:0c:b6:a0:d5:
13:b4:ab:0e:b6:ed:25:26:01:fc:67:77:b9:14:a2:f4:e7:0f:
26:19:3d:11:8c:9e:08:2b:7f:8e:f0:a0:9e:99:60:e8:f0:c9:
f2:67:f3:b4:83:fd:ad:5a:f4:42:b0:ea:f0:92:26:ed:b4:bf:
bb:e8:9a:7f:4b:23:fb:d0:82:a2:52:5a:32:2e:0d:77:b8:45:
35:64:d4:97:66:0e:df:f3:9f:a6:32:f4:f9:21:b0:73:66:b2:
ed:79:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:02 2025 by rpki-client