Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
File: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft (raw, json)
Hash identifier: QxlRjtf22Ofkcxp/Ob4EaTW077BWrRAT+emWN+Cs04g=
Subject key identifier: 00:69:87:07:52:B9:58:BF:76:E3:58:12:B0:B7:2E:C7:6B:54:91:24
Authority key identifier: 85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
Certificate issuer: /CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Certificate serial: 019644B1CE170C0292F2AB356C65DFFDEE45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
Manifest number: 0521
Signing time: Thu 17 Apr 2025 17:00:25 +0000
Manifest this update: Thu 17 Apr 2025 17:00:25 +0000
Manifest next update: Fri 18 Apr 2025 17:00:25 +0000
Files and hashes: 1: 5RI4SZ7klYwbXOltWz9mLe7dxD8.roa (hash: GWR45JMOb96igm8o2PgndioWHr8iBdYB9L2Wx8rR7YM=)
2: hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl (hash: 44Sn6jrBHELSPKpyVsZoAvPbWtZ2SYsCb21VPk9YLvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b1:ce:17:0c:02:92:f2:ab:35:6c:65:df:fd:ee:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8521d103fc73e9075dcf1e22bc8242b70f98c884
Validity
Not Before: Apr 17 17:00:25 2025 GMT
Not After : Apr 18 17:00:25 2025 GMT
Subject: CN=0069870752b958bf76e35812b0b72ec76b549124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:70:21:4c:ef:c4:7a:a6:56:a6:d2:67:67:
5b:3d:f7:60:b5:09:4f:44:38:94:0c:77:7e:55:6f:
2c:5c:e6:23:91:eb:68:f6:55:26:7f:bc:61:1b:69:
18:b4:73:5c:57:6e:14:48:92:81:37:7d:d3:29:02:
8a:c6:a5:dc:01:18:1d:bb:eb:86:c8:bc:80:66:89:
d2:cf:af:fc:d6:9e:77:70:17:8f:6f:aa:72:09:96:
82:56:bd:84:36:45:6c:96:07:2a:a4:f3:25:fc:5c:
4e:a8:96:d2:36:8c:81:4d:b1:43:9f:22:0f:2c:35:
80:d4:82:57:6b:63:64:36:9d:cd:c4:d4:80:2d:21:
05:63:47:47:5e:26:b7:ba:98:91:f8:52:87:0b:69:
5e:ee:2f:d2:1f:c9:9a:7e:b0:bb:45:d1:71:48:09:
d8:d2:27:fa:5e:d2:bb:f7:36:bb:27:57:04:a5:ac:
4a:4c:a3:75:60:43:6b:fb:c5:f9:50:87:f5:83:7a:
93:7b:d0:bf:b1:04:c0:a3:1c:a7:89:dc:46:78:ce:
03:00:12:d6:db:20:5e:24:d8:4c:d8:63:5f:43:a1:
56:9e:35:51:fe:87:f2:4c:b9:cb:9b:da:9e:f0:3e:
a5:ef:ec:c6:d8:5e:a7:19:e5:96:d9:a7:8f:57:78:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:69:87:07:52:B9:58:BF:76:E3:58:12:B0:B7:2E:C7:6B:54:91:24
X509v3 Authority Key Identifier:
keyid:85:21:D1:03:FC:73:E9:07:5D:CF:1E:22:BC:82:42:B7:0F:98:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b351ea-7e09-45af-a0ee-e40de08413fa/1/hSHRA_xz6Qddzx4ivIJCtw-YyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5e:71:e7:97:b7:cd:d5:f1:8e:37:1d:99:74:e2:8a:ce:dd:
75:8e:f5:85:bc:c7:f9:bf:d2:25:49:df:30:dc:e9:f7:57:4f:
ef:81:30:7c:63:ee:28:5a:92:78:57:9a:1f:02:fb:d4:07:fe:
ae:d7:91:25:0a:11:45:7d:af:48:16:62:ed:5c:a0:db:da:c2:
30:8c:01:0e:0c:b1:e8:e8:d6:02:86:a7:b1:15:4a:20:21:7a:
61:ea:0f:3f:3e:59:8e:eb:d7:d4:45:f7:06:32:20:bb:63:90:
1e:bb:b8:77:99:49:28:3a:1e:09:cd:c3:20:2b:aa:f4:87:5f:
d0:b3:ee:a8:7b:0a:28:19:ad:53:55:de:2a:50:d7:c6:77:08:
6a:e5:9b:c0:4f:4b:74:91:be:e7:4d:98:89:0e:82:74:62:06:
c1:b2:e3:2e:da:66:54:69:73:25:49:43:1c:d0:ac:87:25:a5:
c5:c0:10:a7:08:71:d7:c8:6e:9c:19:a0:9a:40:8f:51:f8:b8:
55:9b:07:a9:66:98:55:41:fe:dc:d6:a2:38:d8:9f:eb:5e:49:
2e:0f:11:aa:e3:04:a1:14:6a:88:b3:11:de:c4:f5:aa:06:0c:
54:53:a1:95:88:a7:89:41:9a:84:06:70:62:a3:0b:79:02:9f:
f2:60:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:57:47 2025 by rpki-client