Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier: gY4YRST3ScaUwUhfvF73AJgqKkX8vR/6n6bPnoxpBfk=
Subject key identifier: C6:56:8A:47:33:70:25:F1:4D:B6:97:C1:CA:79:78:C6:DA:54:D3:E6
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 01958F982F51294003452A631CD729D0DD6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number: 1435
Signing time: Thu 13 Mar 2025 13:01:10 +0000
Manifest this update: Thu 13 Mar 2025 13:01:10 +0000
Manifest next update: Fri 14 Mar 2025 13:01:10 +0000
Files and hashes: 1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: jTbMbVywKpYsymGnF7qa8/Q0fFhwecgMiErrPoOZWhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:2f:51:29:40:03:45:2a:63:1c:d7:29:d0:dd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Mar 13 13:01:10 2025 GMT
Not After : Mar 14 13:01:10 2025 GMT
Subject: CN=c6568a47337025f14db697c1ca7978c6da54d3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:21:7e:9c:c6:0e:f6:fb:b6:46:68:38:cf:
e8:30:6a:d2:a2:21:d4:21:93:fb:85:4f:8e:de:59:
28:99:2e:1c:63:b8:6c:16:99:32:27:02:36:2d:08:
c9:4a:98:0f:b7:05:35:03:ad:ab:39:b9:f6:a0:33:
f9:1f:a1:18:f1:6e:ec:57:b3:b9:35:9f:f3:40:3f:
50:5a:dc:12:fc:cd:ad:44:ff:f2:a7:11:10:36:a0:
ab:5b:83:4f:0b:e7:27:39:8e:0e:8c:92:cc:80:4e:
d7:a8:c6:0e:24:03:48:ef:ec:69:d5:a5:69:98:97:
7f:9a:f6:00:c3:7a:68:d3:89:21:c5:e8:53:df:1c:
d1:2d:be:8c:e4:60:c3:ea:16:65:89:8f:09:9b:62:
c0:1e:62:93:ed:2c:d4:d0:68:dc:64:a2:90:38:8f:
82:7d:c3:98:7f:b3:73:7d:12:d1:ef:22:3c:9f:14:
29:76:52:dd:c9:66:a8:2e:30:ce:3b:f0:37:8b:4f:
44:27:33:8f:27:ce:fa:7d:8e:2d:93:23:ad:57:09:
b6:56:81:17:ea:a4:ac:65:74:94:e2:ce:5d:11:a5:
60:4f:90:42:16:e2:03:0c:36:76:05:15:67:f5:58:
27:d5:ae:8f:88:07:48:1e:96:c3:90:3f:ae:5f:f7:
82:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:8A:47:33:70:25:F1:4D:B6:97:C1:CA:79:78:C6:DA:54:D3:E6
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:67:06:f0:5a:83:96:23:1c:e6:47:2e:fe:8a:c5:8c:1e:8a:
86:10:9a:93:c5:fe:a0:93:08:28:6f:01:4d:e9:77:da:47:b8:
e5:50:9b:6a:e4:da:91:35:c3:f5:de:99:92:64:33:ec:b3:8a:
ae:a3:0e:a7:43:f6:5b:ff:af:02:d5:83:37:da:cf:de:95:99:
06:72:da:0f:a6:07:5b:5b:74:6c:86:1e:ba:cb:85:e5:a0:64:
07:71:09:ee:a0:9c:b7:12:ec:6e:16:f7:e4:e8:44:ed:69:ab:
3d:ad:46:18:d5:97:38:01:56:6b:7f:db:bc:84:59:3a:2a:af:
b6:e0:40:b1:9f:9c:c0:ef:9b:d8:89:89:fd:8a:0a:5e:0c:74:
da:94:d1:bc:1c:43:11:8e:2c:c3:ca:c3:08:83:38:dd:88:65:
74:98:6a:0b:24:90:d6:60:63:da:0d:4f:02:e1:95:a8:a6:df:
c6:27:c2:46:9a:ef:c3:cc:dc:98:cb:64:17:d0:67:0b:ba:cd:
95:9f:0c:8d:ac:9a:dc:a2:93:61:66:82:b0:1b:7f:96:aa:8e:
94:e2:56:75:bc:79:ba:bd:dd:80:f0:29:2e:16:a7:82:1c:d2:
2c:5f:d1:31:6a:c4:47:7c:69:34:eb:c4:20:85:f6:09:6f:86:
2a:a7:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:41:44 2025 by rpki-client