Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
File: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft (raw, json)
Hash identifier: sbYkD3B0Tia84hW2sxt9LAg4anzZp8xprvvM29HfUPM=
Subject key identifier: 6F:85:D0:21:15:C7:A9:6F:37:F0:9E:EA:96:02:3D:DE:52:23:31:43
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 019654934CCCAD2E5A1F656F31575BC68FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
Manifest number: 149B
Signing time: Sun 20 Apr 2025 19:01:01 +0000
Manifest this update: Sun 20 Apr 2025 19:01:01 +0000
Manifest next update: Mon 21 Apr 2025 19:01:01 +0000
Files and hashes: 1: 9lF4Wddkx_RwPlb5HR8sz7VHAqw.roa (hash: Hn4j3J9eHkRE5z1tLuZOLQRVHX7ZllrYe5IpQOpZT5Q=)
2: KX-LT3dz707Vp7hkt51mW7kN47w.roa (hash: B+a9FfO6NerOzeUWDsk9OJMmWDCrppwYJ3/nJz/k+A8=)
3: VcGuKeLRRHKHiUo1p3J8wR7hlS4.roa (hash: +w/UxWBt5Z4UXYZ4yW2TIYsp5hWJ/kYYtNU8YXQGHVc=)
4: bMsxLLS-6mN3d3TVBhNMqgnz5AQ.roa (hash: FBjUOC9XwfJYZbTFVZbjXTw1auYANpnx/KFKsqWsZiU=)
5: hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl (hash: yIxRDDi9laF93eTi8vcNbZov8WT0D9OCS+0p+QDX+fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:4c:cc:ad:2e:5a:1f:65:6f:31:57:5b:c6:8f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Apr 20 19:01:01 2025 GMT
Not After : Apr 21 19:01:01 2025 GMT
Subject: CN=6f85d02115c7a96f37f09eea96023dde52233143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:27:66:e4:40:83:49:9c:73:57:81:f9:19:
31:aa:c8:22:8f:c3:ca:cd:bd:8d:31:0a:69:ae:47:
95:9f:ba:bb:be:14:68:d1:93:61:4e:36:77:be:99:
8f:0a:49:d2:02:3f:5a:e9:c7:13:ef:fd:f4:28:32:
91:50:cb:5e:c9:86:a7:b1:7b:92:22:0b:b1:85:de:
ab:fb:a3:4e:db:c4:8d:a3:6c:ae:17:be:70:fb:01:
be:23:d1:46:6b:d1:95:40:b7:73:03:68:2a:0c:af:
21:33:f9:bb:47:7e:1a:d3:04:b2:d9:ee:b4:37:b3:
d6:dd:15:10:a9:bf:1b:df:c0:c0:07:85:7a:a3:9a:
d3:2a:b5:53:6a:e8:83:b2:57:e5:9d:06:49:a3:37:
18:72:72:bc:6b:3f:40:cd:63:c4:36:56:c8:e5:d3:
15:5f:c8:6a:dd:00:a1:2b:d0:17:07:ad:2a:91:e4:
78:a0:a8:06:8b:53:53:01:82:19:50:b7:90:a1:c4:
f2:91:6e:78:66:73:9f:0e:62:01:c9:e0:f3:c0:a6:
cf:51:1c:9d:66:ef:1a:15:71:f7:e4:fe:c7:64:26:
2a:be:36:42:14:14:47:c4:3f:f3:bb:0c:61:99:f4:
f6:86:5a:8a:9d:b2:56:07:4a:3f:4d:0e:24:ad:eb:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:D0:21:15:C7:A9:6F:37:F0:9E:EA:96:02:3D:DE:52:23:31:43
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:00:e8:05:a5:bc:0c:dc:95:d6:c5:1f:73:50:59:a7:43:55:
76:53:81:61:52:aa:50:c6:c1:43:7c:de:bd:12:5d:f2:98:3c:
b7:4e:aa:ca:c4:1f:a1:a5:18:56:03:72:df:9b:e7:37:a6:37:
23:db:6d:3b:ce:bc:fe:0d:58:66:13:98:30:6b:f9:48:50:9a:
bb:f8:78:ea:ef:37:1d:d0:3e:de:d1:ef:c3:10:24:68:18:98:
92:cb:64:18:8c:43:44:42:02:ce:a5:cc:86:c0:77:ce:f9:5e:
4d:54:7e:90:da:e0:16:3c:1b:37:e4:87:a1:97:78:e5:c6:f2:
40:89:69:37:73:c7:5c:87:25:77:a0:54:ac:80:d4:bd:fd:6b:
c4:ea:71:10:ff:e9:07:7f:57:08:f4:70:57:50:de:db:9a:df:
46:4a:bf:83:27:87:62:cb:de:a9:b1:74:bc:52:e4:a8:72:10:
b0:b1:e4:2d:72:a7:61:e6:4c:58:c4:1c:92:c9:38:b8:08:16:
a9:79:c3:d8:f9:e4:89:c2:2d:93:ef:bb:9a:5c:d0:fa:7c:90:
f7:7c:10:0d:fb:c4:7e:fe:6c:0c:17:6e:8b:74:76:39:05:89:
e3:c0:f3:aa:22:cf:41:a5:97:f4:33:60:45:f7:86:d9:68:68:
c6:d8:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:22:51 2025 by rpki-client