Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
File: hGbpF0La0bn0x5ayOzfres2FgWE.mft (raw, json)
Hash identifier: uxDs0SY77u937+CZvCNSOBmGNwaYJchplRj2FYS0+ow=
Subject key identifier: 80:B7:71:99:D0:EC:B5:3F:2E:04:E2:2B:E6:15:5F:59:37:6D:82:97
Authority key identifier: 84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
Certificate issuer: /CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Certificate serial: 019653B7497941E2B683FB5CF3693FC03CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
Manifest number: 0F9E
Signing time: Sun 20 Apr 2025 15:00:42 +0000
Manifest this update: Sun 20 Apr 2025 15:00:42 +0000
Manifest next update: Mon 21 Apr 2025 15:00:42 +0000
Files and hashes: 1: bbcA4RxlQmcQjNn0rG4goHNMuOU.roa (hash: R2hOoSIVcz11ndb2ZPvvYv6Kv8fgZfMkny+ajnRe2GQ=)
2: hGbpF0La0bn0x5ayOzfres2FgWE.crl (hash: KwZpNnX2ZkpVvhg5/6lhFIxqpxu37oeqGUgQzn7sKxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:49:79:41:e2:b6:83:fb:5c:f3:69:3f:c0:3c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466e91742dad1b9f4c796b23b37eb7acd858161
Validity
Not Before: Apr 20 15:00:42 2025 GMT
Not After : Apr 21 15:00:42 2025 GMT
Subject: CN=80b77199d0ecb53f2e04e22be6155f59376d8297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:9c:e6:02:36:f8:9e:92:dd:ed:53:b9:b1:
38:f5:22:ab:14:f5:4a:91:77:35:b0:f3:7a:c6:c7:
a4:fd:2b:91:a6:ff:38:28:84:5f:29:bc:eb:83:36:
90:e9:4b:b4:b5:3c:78:09:de:f6:8b:cb:9b:93:16:
d6:a6:73:b2:b5:af:9c:1c:e8:ae:28:b3:04:33:fe:
5a:89:6d:04:45:ea:c4:6d:fe:99:3a:f0:8d:8c:e0:
08:a2:fe:8a:f0:3c:30:06:77:df:db:53:b6:c1:39:
32:e6:8f:ad:6d:5e:7f:a5:c8:a4:50:a0:9f:c5:71:
cf:01:84:0b:5e:80:6b:fe:e3:27:45:ac:0e:7e:da:
dc:d5:97:23:d2:6f:78:85:40:22:00:5a:74:95:d6:
74:9b:5e:4b:a2:ed:89:d4:81:b0:68:1d:d4:f0:ec:
1f:24:e8:69:b4:7b:fe:ba:e9:3a:d2:73:fa:0c:d5:
0e:d4:32:3f:fd:72:97:50:19:76:77:33:0f:64:d6:
2d:92:84:7e:ea:31:6c:54:b2:a5:25:53:97:9c:22:
33:6d:7c:e6:bd:58:5a:8b:5b:33:a8:d8:43:0a:5c:
94:35:13:bd:db:0f:41:dd:23:5a:51:b8:95:f3:3f:
4d:60:44:d3:6e:d5:9a:16:d3:eb:d3:c7:00:67:74:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:71:99:D0:EC:B5:3F:2E:04:E2:2B:E6:15:5F:59:37:6D:82:97
X509v3 Authority Key Identifier:
keyid:84:66:E9:17:42:DA:D1:B9:F4:C7:96:B2:3B:37:EB:7A:CD:85:81:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGbpF0La0bn0x5ayOzfres2FgWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a669b7-0779-459a-9220-4e32c8b8ee36/1/hGbpF0La0bn0x5ayOzfres2FgWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ce:28:35:e3:45:40:02:a9:e3:e3:42:91:7a:5f:72:b7:b3:
c5:87:7f:00:57:fa:0f:9e:53:69:4f:e6:2b:32:75:bb:21:89:
c2:45:54:63:b2:d5:dd:72:8f:7a:82:a4:1a:84:46:c5:e0:9f:
69:b4:cb:52:da:9e:46:07:aa:ba:c9:8f:b3:f5:c1:7c:ed:87:
d2:9e:3b:17:71:fc:42:ac:cd:32:34:53:e7:1c:fd:ec:db:93:
fa:b8:e1:79:92:0c:1d:32:d4:82:70:6c:e2:01:b8:45:78:e2:
60:17:81:d6:bc:7a:73:05:d4:9f:47:95:be:1d:1e:3e:16:97:
06:68:c6:34:07:cb:c4:60:86:dc:ce:fe:4d:94:05:0d:86:52:
2e:d8:c7:ed:52:5e:6c:3a:37:b3:50:97:39:45:bb:40:77:4b:
25:b9:cc:fe:d4:a9:fe:eb:2e:2e:f5:bb:0d:70:b4:4f:ab:b8:
fc:8c:41:a5:89:3d:4b:a7:5c:a0:ef:31:df:a0:24:f1:d3:f3:
8f:40:83:6a:22:05:7f:88:65:58:c6:a2:be:7b:c0:d9:09:7d:
bf:de:6d:85:fa:d4:ef:5a:c8:f0:19:ac:5f:2e:cf:22:f1:e1:
be:6c:29:b4:ea:3b:d3:64:91:64:4f:15:2c:21:44:7d:06:f3:
84:df:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:34:13 2025 by rpki-client