Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json)
Hash identifier: AaDJ9rOg+eLvsqr8I1U7HCVQG4vTomqCnkcHgwfH9p8=
Subject key identifier: 3F:89:8F:46:74:A2:AA:58:65:43:D6:93:7A:83:1C:50:D4:87:E8:1F
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 01962ABC1DF4092DE171CA962F856434BBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
Manifest number: 1010
Signing time: Sat 12 Apr 2025 16:01:33 +0000
Manifest this update: Sat 12 Apr 2025 16:01:33 +0000
Manifest next update: Sun 13 Apr 2025 16:01:33 +0000
Files and hashes: 1: FYfGapYZgv1rSx7oxjUTR0AEqSI.roa (hash: /yS9+tjgVqFWik3KkW3YA5pzZoZBBA4Y+IeN8zVnoxw=)
2: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=)
3: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: /WKxk+q4y8wRJAFcr+dDC7ZFsPFQUZCpb3NH6pviMz0=)
4: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 16:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:1d:f4:09:2d:e1:71:ca:96:2f:85:64:34:bb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Apr 12 16:01:33 2025 GMT
Not After : Apr 13 16:01:33 2025 GMT
Subject: CN=3f898f4674a2aa586543d6937a831c50d487e81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:bf:c2:a9:61:ff:94:cc:1b:53:cc:e4:d8:
41:68:2b:f9:bf:2f:ff:5c:9c:ea:64:96:7e:5b:4c:
d1:4b:36:df:ce:83:06:54:36:6d:d5:fd:4c:6f:27:
cf:82:9c:c0:b9:e0:cd:3d:20:74:46:1c:57:4c:ac:
21:c3:59:a9:52:8b:00:00:98:2f:cf:3e:9a:10:ea:
42:c3:ef:1f:fd:fe:d7:fb:03:73:4a:af:d0:93:10:
cc:b4:bc:e6:35:c7:4d:58:ce:64:25:d7:4a:1a:9e:
cd:bd:d7:ba:af:d0:68:de:85:74:29:fa:82:e1:fe:
f0:f8:a4:0a:7d:60:8f:ce:ff:c6:32:08:f9:cc:27:
bd:8e:4f:94:2f:42:bc:db:04:5c:cd:1b:6c:ce:b9:
53:4a:e4:c9:48:9d:74:ee:2b:5f:38:38:61:7a:85:
32:c9:3a:9d:27:3b:73:72:8f:ea:e6:71:c3:14:e0:
73:0f:3e:27:6c:e2:2d:79:72:05:16:ba:8b:4b:87:
25:b0:fc:9a:5f:f8:38:eb:84:e3:5e:fe:48:71:91:
7c:b1:08:c2:ed:aa:05:ac:10:0a:66:ac:06:02:a0:
08:63:e8:b0:ad:20:2e:15:d6:53:ee:43:a7:72:89:
c2:b2:b3:00:9f:89:b2:f2:bd:7a:55:78:01:81:d7:
ea:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:8F:46:74:A2:AA:58:65:43:D6:93:7A:83:1C:50:D4:87:E8:1F
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f3:07:dc:f4:7f:da:a2:cd:e8:40:cc:2c:d8:a2:9f:01:ed:
46:24:a4:8a:6c:02:52:2d:ed:60:6a:06:5a:33:1c:a2:15:7c:
62:88:99:83:d1:a4:ec:3f:f6:95:3b:90:e0:b6:82:72:54:97:
28:c8:8d:f0:88:e2:50:d8:11:6c:68:c5:44:64:2b:ca:06:e8:
67:ce:05:ee:59:74:9c:09:a2:ba:e5:f1:98:50:dc:88:e9:cd:
a1:db:26:e2:2c:a3:16:cf:e4:fc:95:aa:58:7e:4a:71:cc:73:
82:13:1a:70:cb:63:eb:d3:e1:91:7b:7b:7e:04:d2:f6:98:68:
f3:69:c8:ae:f0:c7:c9:42:7c:31:d7:6e:7b:7b:f0:2b:d9:50:
54:be:84:82:ea:8b:82:67:4c:18:5d:94:85:c0:50:01:64:35:
b0:58:36:e2:36:1e:df:3f:57:55:d8:a6:43:73:51:4c:d6:ed:
e4:02:ba:31:9b:78:28:b8:65:21:b1:2a:0d:f8:e5:6f:a0:cc:
5c:6a:a5:30:f4:28:a8:a5:bc:9f:03:0c:5f:cc:65:4a:e8:84:
fb:1f:4d:94:ff:7d:26:8e:6d:e0:eb:8f:23:9a:68:c0:42:1b:
b7:e5:bf:f0:06:d4:73:7b:fa:6f:90:8b:ab:bd:4d:9d:f3:13:
3d:31:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:39:20 2025 by rpki-client