Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
File: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft (raw, json)
Hash identifier: bPGkdsMC6mxJQXtZxZ8uW6ShFaCKDzg9ni4qTfRqB7A=
Subject key identifier: 14:4E:60:B9:BD:08:58:2A:4F:98:A3:B7:2D:12:2A:75:48:44:56:27
Authority key identifier: 84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
Certificate issuer: /CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Certificate serial: 01960ED6E14A5E395494109AD80CE2108ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
Manifest number: 14D9
Signing time: Mon 07 Apr 2025 06:01:25 +0000
Manifest this update: Mon 07 Apr 2025 06:01:25 +0000
Manifest next update: Tue 08 Apr 2025 06:01:25 +0000
Files and hashes: 1: 6Np_DtFE1cY_Bq79WJx-AKdNFoQ.roa (hash: XDeNGBG9FcZmfX7y784opBbXWR4Kqd1BKc6tmbydzsk=)
2: hItmJgKobNdHEWAlF-4cCZue6Aw.roa (hash: DNC0yvlzkLonuwJuzoEr0sbbal1ihEVkJ/p6BrvVIIc=)
3: hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl (hash: /clizaIIN45e0kl3eX4FKzrQUteJcWiqWovD1FWcI4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:d6:e1:4a:5e:39:54:94:10:9a:d8:0c:e2:10:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849d5c1ca865b04b6f2b3ccd9016e92ddad99aab
Validity
Not Before: Apr 7 06:01:25 2025 GMT
Not After : Apr 8 06:01:25 2025 GMT
Subject: CN=144e60b9bd08582a4f98a3b72d122a7548445627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:6c:7d:c8:30:4f:f4:f2:fd:4e:c7:54:cd:
24:cb:6f:20:ba:16:57:18:5d:87:be:2a:e9:0f:9b:
a9:c3:90:4d:69:1f:c1:e7:67:3e:27:07:18:8e:52:
1d:a5:ef:84:9e:c3:b9:e0:c3:94:22:e9:fa:87:7c:
6c:97:06:b0:37:a9:99:6b:e7:30:95:ba:aa:3d:4a:
e8:fe:5f:9f:67:e0:0f:69:e9:25:67:38:da:e1:9e:
04:32:4a:71:73:6d:7e:53:12:06:0f:3f:a9:bb:07:
43:e9:9d:c1:99:e7:d7:16:ed:c6:9a:22:b5:07:04:
40:a5:f6:7b:c7:df:bd:bd:f0:bf:64:15:da:db:1f:
7b:13:f7:06:1c:4a:35:b5:92:33:d4:e4:f8:0f:47:
dc:37:f8:b9:39:e8:82:f5:58:59:af:9a:ba:13:98:
1f:8f:3a:78:a7:68:39:35:74:89:07:46:f2:15:69:
5c:58:6b:53:86:10:df:a1:39:7b:20:95:21:6b:70:
00:87:a0:fb:2d:9c:3a:21:f7:9f:52:fd:b8:16:8a:
a1:53:dd:fd:b6:f1:50:c3:09:ca:d6:98:e3:3d:c0:
41:df:27:b7:94:6b:2c:fe:bb:40:d5:e3:29:71:bb:
6a:1c:00:1d:e0:de:d1:87:63:75:56:98:27:26:23:
d8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4E:60:B9:BD:08:58:2A:4F:98:A3:B7:2D:12:2A:75:48:44:56:27
X509v3 Authority Key Identifier:
keyid:84:9D:5C:1C:A8:65:B0:4B:6F:2B:3C:CD:90:16:E9:2D:DA:D9:9A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c418b-ec7d-46d2-99d5-dde0d12735c6/1/hJ1cHKhlsEtvKzzNkBbpLdrZmqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:90:fb:59:0a:7b:56:0e:d6:65:dd:87:36:42:58:03:d5:de:
ec:8c:5c:25:28:c4:c0:0d:46:71:5a:d0:c1:64:c0:0d:98:bf:
e0:88:d8:4b:c7:6e:72:d0:b9:d2:f3:31:f9:75:57:38:4c:da:
ff:a9:e9:de:e6:b6:78:0a:bc:db:17:cc:80:d2:da:e4:d0:d3:
25:50:06:89:11:c4:ba:03:6f:a4:c2:64:73:c6:5d:59:53:0f:
c2:85:ac:ab:42:12:96:8f:7f:c6:6e:d6:df:02:02:69:3f:0c:
ad:ee:de:03:ce:58:cc:08:d1:37:3a:79:13:e6:fe:72:d4:97:
66:ea:6b:b2:56:c1:6c:92:21:67:c1:e4:2e:c2:be:72:c8:93:
99:27:d2:37:db:3b:d2:46:f1:6f:53:a0:7a:ae:f4:bc:0f:ed:
75:38:d9:91:ba:f8:66:90:e7:a4:77:a6:cb:c2:96:22:08:92:
70:24:44:b6:47:67:f9:cf:e5:7d:a6:2d:9a:1e:89:6b:b0:d6:
71:2f:d9:0f:8a:f6:76:13:2c:df:90:4f:8a:3d:b1:44:f2:c0:
14:25:a3:e2:92:72:a6:dd:a6:e5:3f:7e:78:6e:ea:b7:28:0b:
62:44:fd:26:e7:7c:af:6a:59:d8:26:b4:0c:87:4a:b1:41:77:
ed:64:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:08:44 2025 by rpki-client