Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
File: ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft (raw, json)
Hash identifier: 87Yrd52qcZPnenHYKw9AHCJ8RdMWjklvyraWsAtmxhE=
Subject key identifier: B8:D2:E8:CF:F1:45:CF:7B:A2:A4:5B:7E:DA:A9:42:54:AD:49:FA:AA
Authority key identifier: 86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
Certificate issuer: /CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Certificate serial: 019652DB2D84462A6A641130BE01F2F1A05B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
Manifest number: 13C2
Signing time: Sun 20 Apr 2025 11:00:17 +0000
Manifest this update: Sun 20 Apr 2025 11:00:17 +0000
Manifest next update: Mon 21 Apr 2025 11:00:17 +0000
Files and hashes: 1: U-9gs6-HPp-63tFVTgK5YJ7Vtx0.roa (hash: is1qZnviSeshx9o2Nm8hFCS4enc7GdrzL/0sgsJwTiY=)
2: WeH1WlhYDBMKUix1j52cA9uy8vg.roa (hash: LDMrba3gzwSdDXVT+UZ/jMO8QMSCHSdMpFhiaPS/CDk=)
3: ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl (hash: 27N2KoNkDUoyy5tDGH9ZxOu/voPLkRxLlX8uqJi+B+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:2d:84:46:2a:6a:64:11:30:be:01:f2:f1:a0:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86df1259b3aa1de34d13d1d863178864d9d185cb
Validity
Not Before: Apr 20 11:00:17 2025 GMT
Not After : Apr 21 11:00:17 2025 GMT
Subject: CN=b8d2e8cff145cf7ba2a45b7edaa94254ad49faaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:57:71:b7:3c:31:e5:26:88:80:8f:53:1d:
e7:b9:da:1a:51:04:7f:ae:71:e5:b4:2a:4e:bf:49:
a7:47:12:d1:a0:c1:24:cd:bb:f5:c7:54:4d:96:58:
41:96:94:cd:21:79:06:f0:84:a1:d0:1c:c8:28:c4:
56:6b:bc:8b:74:61:48:b9:00:23:03:57:02:b2:50:
88:4c:10:f2:8a:95:8b:d1:35:ec:3a:f7:f3:5f:73:
8e:32:8a:2e:c8:3b:2f:a6:cc:4f:ec:1b:2d:a6:a7:
bd:53:e7:3c:e2:0b:e5:ab:90:70:da:da:4b:8c:95:
a5:79:e6:e7:29:65:1c:93:6a:7a:4b:0a:cb:ff:1f:
65:0a:da:e6:18:7d:ef:89:1a:27:94:4e:f7:b0:35:
9e:49:b3:fe:b4:9b:37:b8:cb:7c:00:9e:10:7c:d8:
f9:11:b6:35:b0:ee:42:46:90:98:15:31:f4:c0:b1:
f3:cb:35:42:6b:30:80:01:ec:e4:e6:e2:0c:a8:31:
f0:75:f4:fe:d5:94:87:35:53:81:10:dc:71:b4:3e:
2c:e1:c2:2b:de:b7:b5:82:14:ec:5a:09:cd:3b:c2:
c4:67:5e:03:fd:e6:38:e4:71:fe:59:97:67:cf:e5:
29:d1:c9:be:53:2f:69:f9:59:54:80:0b:5c:5d:87:
b6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D2:E8:CF:F1:45:CF:7B:A2:A4:5B:7E:DA:A9:42:54:AD:49:FA:AA
X509v3 Authority Key Identifier:
keyid:86:DF:12:59:B3:AA:1D:E3:4D:13:D1:D8:63:17:88:64:D9:D1:85:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ht8SWbOqHeNNE9HYYxeIZNnRhcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d01a91-a3ab-4e08-9564-a51aa23a8fdd/1/ht8SWbOqHeNNE9HYYxeIZNnRhcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9e:93:a8:2c:09:ec:47:49:f6:03:70:d6:7a:08:27:db:c6:
38:73:5e:82:56:91:5c:c7:97:ed:c3:c8:38:58:0c:fe:c4:6f:
0e:49:9f:21:53:b3:88:09:14:16:fd:42:cb:af:92:e9:ff:95:
7b:04:e9:6f:3b:c5:81:64:0a:a9:00:5e:5b:dc:56:a8:62:af:
27:60:36:c3:2d:0c:6d:78:d2:6e:6a:26:c6:48:2d:2b:6f:2b:
97:df:96:99:18:20:f8:7d:0f:3f:6d:b3:f3:aa:35:fd:1d:ac:
b2:01:11:d8:47:6e:13:90:21:80:36:8f:23:31:02:91:51:26:
ab:ea:82:d3:e3:bb:69:69:d7:07:f9:2d:ea:f9:71:c7:4b:eb:
f9:d8:56:90:76:ec:aa:de:9c:22:d0:56:17:b7:93:0f:e0:43:
be:05:93:bc:bf:2b:20:39:5b:31:3c:2b:ae:49:84:11:f0:09:
12:59:21:c9:fc:91:df:c2:54:ba:ad:e1:fa:37:48:15:be:c5:
ee:f7:15:ae:5e:a4:f8:cb:02:65:93:9d:4c:a6:0c:53:b8:36:
19:0d:94:c7:d7:f6:af:cf:6e:36:91:fa:c1:42:06:22:1c:18:
e7:08:ef:e6:ec:64:5c:e8:33:fd:e8:cc:09:bf:80:1d:5f:a8:
9b:62:ab:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:12 2025 by rpki-client