Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
File: HJe0gj08nhIexkmCHgDwp5rrm40.mft (raw, json)
Hash identifier: xkE1q9XCnGajAqTDIidp9bl8PdXgF3TMO4E0QssI5EU=
Subject key identifier: 97:CB:DF:9F:E3:C1:AA:F4:CD:BE:FA:15:DB:2C:1C:9C:3D:07:EA:46
Authority key identifier: 1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
Certificate issuer: /CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Certificate serial: 01958BBB2EED51556E80D6AD179D532CA891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
Manifest number: 149A
Signing time: Wed 12 Mar 2025 19:00:54 +0000
Manifest this update: Wed 12 Mar 2025 19:00:54 +0000
Manifest next update: Thu 13 Mar 2025 19:00:54 +0000
Files and hashes: 1: 8jvY6gdKf49fsHMa8JzUxLXy6Co.roa (hash: zq4v0B4wOz8tRoHJTPQ0OEhJqUOFXXY6z/cXiV3Bsic=)
2: HJe0gj08nhIexkmCHgDwp5rrm40.crl (hash: tg4Naa+EB3j5KWsQeisShVawTeEOg7/Y7OevflMo2G8=)
3: MKGyJdFY_R5aFNPzG6jh9qi5L8g.roa (hash: 4xTLRWvAhNdFnC4rR2yT1xCAEdrH5/3kjyyJfVcTeSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:2e:ed:51:55:6e:80:d6:ad:17:9d:53:2c:a8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c97b4823d3c9e121ec649821e00f0a79aeb9b8d
Validity
Not Before: Mar 12 19:00:54 2025 GMT
Not After : Mar 13 19:00:54 2025 GMT
Subject: CN=97cbdf9fe3c1aaf4cdbefa15db2c1c9c3d07ea46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:0e:16:2e:5d:d7:3b:bf:fa:15:20:89:1d:
7e:f8:6d:d7:99:02:2b:29:26:72:84:9a:32:50:1d:
ad:99:32:f5:34:1a:19:6f:d7:a8:e9:1d:22:d4:56:
ac:cf:9a:94:b3:95:9b:71:5e:47:9b:0a:6c:f3:e1:
3b:d2:b3:e3:44:8a:c0:9a:85:65:92:66:53:45:03:
45:8e:83:03:53:e3:3a:d6:37:15:49:b8:0f:5d:06:
3a:95:6f:b8:c0:16:24:81:f1:cd:87:36:b4:6e:bf:
3d:9e:a6:3b:98:d0:5c:6a:6e:d8:2e:fd:e4:2c:6a:
60:6b:a0:31:13:64:58:ae:7c:78:5e:f6:e1:4f:d9:
1d:de:db:01:75:6e:d0:85:c1:c3:43:91:0b:ab:5c:
fa:26:58:20:83:de:c3:3c:a8:3e:6a:2f:da:47:56:
99:41:5d:50:e6:13:d4:48:05:c0:40:44:be:5a:b5:
a2:e4:43:4b:fc:12:2c:f5:12:2f:89:09:25:c5:fb:
b3:ee:de:a2:99:c4:80:e6:39:d4:f9:86:c1:c0:60:
81:25:8f:1d:63:de:09:4b:4d:eb:15:42:ec:28:80:
c9:eb:6e:de:92:3e:ae:2a:ba:0b:8b:56:fa:8e:88:
39:2a:4c:db:85:f2:ea:5d:b7:ae:e4:3e:27:c1:9e:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:DF:9F:E3:C1:AA:F4:CD:BE:FA:15:DB:2C:1C:9C:3D:07:EA:46
X509v3 Authority Key Identifier:
keyid:1C:97:B4:82:3D:3C:9E:12:1E:C6:49:82:1E:00:F0:A7:9A:EB:9B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJe0gj08nhIexkmCHgDwp5rrm40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/15641a-6614-45e4-a2a9-9b9cd89659e0/1/HJe0gj08nhIexkmCHgDwp5rrm40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:02:ff:c1:26:14:a8:87:f8:80:da:c9:82:42:77:f7:8d:
28:b8:21:4b:3e:1e:87:a2:0c:7d:ad:0f:d3:49:03:c6:b8:ad:
93:bc:18:bd:9e:8a:85:63:f6:c0:b5:a3:88:60:da:38:ae:32:
54:10:38:69:f1:2d:c2:d7:87:2c:d7:9c:ba:a1:c9:a0:a4:e2:
3f:ee:34:9e:60:75:37:6e:c3:87:e5:30:f7:e7:25:55:48:50:
5d:74:fa:26:d7:5a:07:94:cc:63:32:dc:5c:a6:cd:e0:b7:c9:
f6:06:60:fe:d0:b4:c9:f2:9c:63:a6:33:b3:9e:46:a3:60:45:
a3:29:a1:b9:5f:63:53:f0:a4:3d:00:b2:6c:f1:d3:57:2e:85:
b2:45:fa:89:9e:bd:62:c8:93:bc:3e:80:e4:5a:f1:f3:f9:e7:
81:14:e2:0d:44:29:a5:af:d6:f7:0b:52:f8:62:a6:a6:b4:aa:
8f:47:3f:1d:4d:b7:13:ca:28:b8:b8:33:67:dc:cb:0b:a6:3b:
49:55:12:26:0d:a0:bd:a0:65:5e:97:e1:9b:aa:3e:d5:08:5f:
43:4d:05:b3:fe:5c:81:27:0f:e2:db:5d:aa:17:f4:a2:c3:73:
3d:f1:74:64:9a:46:a1:68:af:9a:58:d9:8a:df:b6:fd:ca:8c:
8a:2f:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:27 2025 by rpki-client