Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json)
Hash identifier: N9/QrdZAwylHDu3R1zD1EcGaN5GsOnnae0daVx6iiHc=
Subject key identifier: 35:2E:AD:2D:E4:69:04:0C:F6:A2:DE:19:9B:1A:04:65:8A:8C:91:AD
Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Certificate serial: 019655A5963E2ECFBF3C4613882D325C0EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
Manifest number: 035D
Signing time: Mon 21 Apr 2025 00:00:37 +0000
Manifest this update: Mon 21 Apr 2025 00:00:37 +0000
Manifest next update: Tue 22 Apr 2025 00:00:37 +0000
Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: 8Tc6A15Agh2doMR23On0NrRjGaq+jGGN30pzb5X27Mw=)
2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:96:3e:2e:cf:bf:3c:46:13:88:2d:32:5c:0e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0
Validity
Not Before: Apr 21 00:00:37 2025 GMT
Not After : Apr 22 00:00:37 2025 GMT
Subject: CN=352ead2de469040cf6a2de199b1a04658a8c91ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6c:35:c0:7e:2a:ec:a0:b7:9e:e1:9a:0f:e3:
ac:57:a7:34:43:1f:ad:9f:65:a4:34:13:94:0f:1f:
37:23:79:4d:ad:98:f5:25:70:ea:cb:d2:88:dc:a0:
40:5c:c6:f3:a7:4b:59:85:3c:48:b4:54:7f:bf:4c:
75:34:6e:34:28:66:5e:fc:b2:e7:81:a5:74:32:75:
6d:90:fa:77:6b:48:c5:d7:50:53:75:52:00:6f:0a:
e5:aa:60:6c:ae:7f:0f:13:1b:20:20:99:eb:a5:5e:
dc:ee:2a:69:c2:83:a8:3d:71:3f:f2:9f:bb:4e:9c:
41:f9:53:de:19:da:4d:7f:b6:a3:20:23:93:11:b5:
d9:c2:50:b9:2e:64:7d:2a:02:2c:e3:34:d9:d8:42:
44:a3:ee:a7:5a:89:46:ea:6f:a3:4c:60:ad:5e:d4:
ea:87:86:9a:60:6a:fc:08:c2:95:66:75:ba:b3:15:
72:f2:98:83:d9:c1:b9:10:16:70:c6:d2:8c:62:27:
35:71:43:f3:fb:0e:a8:ad:94:fc:d4:81:09:3e:8b:
6b:79:ea:f9:3e:c5:32:f5:11:44:69:0b:01:1b:aa:
f4:a5:12:bc:b1:67:b5:17:c4:85:92:e4:0d:91:a1:
a2:f6:32:5c:ae:52:09:d9:e1:b5:6f:0c:b2:5b:e9:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:2E:AD:2D:E4:69:04:0C:F6:A2:DE:19:9B:1A:04:65:8A:8C:91:AD
X509v3 Authority Key Identifier:
keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:08:1f:40:c0:21:d8:5f:7a:31:99:49:36:47:7b:2d:a9:
4f:d7:62:08:80:6b:ed:7d:47:db:06:86:00:cc:f1:24:fa:40:
ac:89:3b:9b:cd:12:a4:47:11:0f:8e:92:cc:8b:72:28:63:36:
95:33:9a:2c:59:c3:75:71:3a:d0:3d:77:06:35:7f:62:9f:b4:
2b:5e:60:db:f4:6c:01:33:a6:cd:21:cd:d4:42:99:35:b6:ef:
c7:93:62:a0:93:4b:a1:7a:58:b8:a4:c6:61:8d:16:aa:08:b1:
c8:e3:7e:92:68:e1:60:f9:13:93:5e:93:ce:7b:0f:7a:bb:23:
be:3e:72:10:b8:1c:02:ea:21:11:bf:17:c5:1b:f0:d2:19:72:
10:fc:5d:61:9b:00:8d:aa:79:3d:78:e9:f5:fc:7b:ac:67:8b:
b7:7e:3b:40:14:8f:9a:26:95:1d:b9:5e:f4:5e:b5:57:ec:4d:
f9:b6:ee:7f:fc:0e:c8:df:1c:41:25:7a:16:84:06:df:12:8b:
f3:30:43:22:07:af:9b:10:59:f3:4a:c3:39:6b:f2:f3:2f:74:
20:aa:7b:70:d2:b7:ee:6a:a9:02:6c:7b:5a:75:37:4b:18:74:
82:b5:c3:7d:1f:ee:18:a9:b7:31:7d:a6:da:02:b1:53:e1:b9:
7f:ac:3d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:08:28 2025 by rpki-client