Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
File: fHIvhbMedl2Pd7aStdKoTBEdgF0.mft (raw, json)
Hash identifier: 4D4P9dpUaKEAHUYUFfRM7FzFmt9cESDy8Wmcu7AVEvU=
Subject key identifier: 64:57:E9:D8:46:D5:43:C1:E5:25:37:DF:F1:28:FC:CB:DC:C5:4B:3D
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 01962ABCE0D59ABBB2956B4F69374C3F3ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
Manifest number: 0EC6
Signing time: Sat 12 Apr 2025 16:02:23 +0000
Manifest this update: Sat 12 Apr 2025 16:02:23 +0000
Manifest next update: Sun 13 Apr 2025 16:02:23 +0000
Files and hashes: 1: aPGkJWWfqnHSYtcmHdQOMi1mheA.roa (hash: 6hq3FWs22+JzOpc7JMDFeHh8CJMVuPtspAIB0Mwo68c=)
2: fHIvhbMedl2Pd7aStdKoTBEdgF0.crl (hash: uC6M42P1divy/qoj4W0ybVL2AIjVDas2CN/UaqwOp7s=)
3: kOhrGOFiHCQXDK7SqjPEybS0hcw.roa (hash: ybpwH1QupQRJQ6+PK49HntOhSn/3Y1wfK/QgMWHmniQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:e0:d5:9a:bb:b2:95:6b:4f:69:37:4c:3f:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Apr 12 16:02:23 2025 GMT
Not After : Apr 13 16:02:23 2025 GMT
Subject: CN=6457e9d846d543c1e52537dff128fccbdcc54b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:ea:18:da:33:0a:f1:61:b3:62:18:9d:7b:
df:c0:84:4f:43:35:ec:a9:34:c4:d2:95:0c:02:19:
e1:1a:28:df:c2:7a:72:00:9e:07:da:ac:40:14:73:
60:dc:c9:3a:c8:bd:61:d7:c4:ac:dc:50:8a:d1:c8:
2b:c6:f8:73:5a:7c:9e:a4:a2:9c:55:65:f7:c9:aa:
a3:5d:78:af:df:88:e4:e7:00:b2:e0:d5:05:0d:fc:
89:d9:e7:5d:5e:60:67:26:a2:c8:2c:f6:7a:92:47:
84:26:10:0b:66:72:f8:48:da:77:ab:49:f7:16:d9:
a1:79:e8:bf:21:e9:98:46:1e:22:12:1b:69:3d:d9:
a7:bb:74:67:1d:49:95:30:67:b5:96:c7:a8:47:c4:
60:e9:cc:54:d8:f9:ca:8f:53:a6:07:f6:67:17:12:
19:59:00:c6:93:b5:1e:36:c3:98:25:f8:dc:d7:3c:
81:89:78:48:a6:8e:ff:6a:96:4c:b5:7b:bb:88:af:
d3:00:c7:29:db:18:75:e7:b1:00:7e:d7:d4:86:c4:
c9:34:3b:ce:b5:3a:09:58:3a:10:10:93:3c:cc:d0:
65:45:3e:05:67:b4:d7:dd:1b:ae:ea:82:ce:4a:2e:
50:77:6b:34:73:8a:cd:1a:78:b0:2e:3b:83:c9:c0:
4c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:E9:D8:46:D5:43:C1:E5:25:37:DF:F1:28:FC:CB:DC:C5:4B:3D
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:dd:bf:43:bc:58:68:de:9d:39:47:34:39:cb:08:26:5a:b5:
0f:dc:74:14:c5:88:b2:5b:a6:45:c4:e6:f6:c4:84:21:66:8a:
f0:8c:f7:28:0b:f3:d4:fe:93:c8:c5:80:df:dc:86:26:9c:2f:
1b:3c:0d:34:43:8e:16:f1:c5:3a:f3:24:63:27:2a:80:e0:0d:
43:d9:b4:66:d9:41:fe:69:ac:d9:38:66:82:77:d2:52:c0:d2:
a8:6d:81:9d:7a:7a:25:58:7c:a8:1f:de:38:25:12:c6:14:5a:
04:79:bd:3f:5e:a9:fb:02:e5:76:38:2b:3f:e1:d3:ec:37:72:
c0:37:1a:fb:57:ad:41:21:5b:1e:c4:ef:51:8c:e2:dd:77:32:
87:70:ee:18:1e:ab:8f:9d:29:28:d9:ee:7c:9c:c8:93:2e:f7:
0d:a7:3c:77:77:0c:4c:e5:52:c4:88:34:5a:72:09:d4:77:c5:
c8:0f:2e:d1:40:6b:df:6f:aa:19:96:4a:68:14:05:60:24:c0:
f3:ae:40:4e:c0:ce:25:b1:bb:13:52:e6:cb:9c:89:07:26:02:
ab:de:68:6e:3a:6a:da:1e:10:7a:f0:08:8b:bd:c5:de:e4:6b:
f0:20:25:cf:13:c3:61:64:8f:a9:d1:3c:57:fa:78:e5:83:8b:
3e:ba:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:36:52 2025 by rpki-client