Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
File: hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft (raw, json)
Hash identifier: pw0XPo8UE3grWNeeEF35/YRCcW1+GYaorGbkh/LBwY8=
Subject key identifier: 46:6A:58:46:4C:FB:AF:18:4C:99:03:1E:88:A3:FF:4F:A9:81:CA:F5
Authority key identifier: 86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
Certificate issuer: /CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Certificate serial: 01964FA388A56F2AB1E00780DD3627D7EC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
Manifest number: 0B3D
Signing time: Sat 19 Apr 2025 20:00:39 +0000
Manifest this update: Sat 19 Apr 2025 20:00:39 +0000
Manifest next update: Sun 20 Apr 2025 20:00:39 +0000
Files and hashes: 1: 3n4D1SR6scBc56Ie3xGq3b0L8M0.roa (hash: aBbdE/LoKCgkOQOFc+caUhkJgro6NFyptlXPezVha0Q=)
2: MWwCkyjKodNxojuXE4ToQXLtm5w.roa (hash: Ak0owLXzMtwfRek9KqA/lWNxi61mLQqKV5qpbUxSWP4=)
3: hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl (hash: VX8W3+ysnbDSG/EktH3vt7kwcEmsKxyDSH/0FLOnou4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:88:a5:6f:2a:b1:e0:07:80:dd:36:27:d7:ec:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8624f3f661f24be5fef641dc722e5cf5ac87389e
Validity
Not Before: Apr 19 20:00:39 2025 GMT
Not After : Apr 20 20:00:39 2025 GMT
Subject: CN=466a58464cfbaf184c99031e88a3ff4fa981caf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:5a:f9:a9:ff:65:5a:29:e7:7d:94:f2:67:
66:12:3a:4c:cc:83:5f:2e:69:26:53:2a:81:70:64:
52:c5:cb:97:23:ad:43:92:4f:6c:01:64:73:6a:81:
84:01:d6:01:e9:55:0f:72:0c:09:79:59:98:74:94:
d1:11:10:9e:a2:3c:96:64:5a:b1:a0:13:41:77:96:
4c:72:b5:37:6e:42:d9:bf:1e:79:10:35:65:29:b4:
7f:bf:7d:3b:02:68:74:09:0e:0a:4d:e0:48:c6:11:
03:10:5a:ca:b8:56:13:80:81:00:f2:f0:c4:37:76:
d4:21:eb:ac:68:82:17:69:0b:dd:2a:5d:cd:c0:7b:
fb:db:66:78:a9:0c:d1:ab:08:e6:eb:82:43:ce:91:
0e:4b:ed:4a:42:23:93:b1:ab:7b:4d:08:9e:ce:6e:
c4:33:40:f9:03:a7:df:12:68:0e:10:56:06:e5:b5:
7b:90:79:11:f7:35:ca:d6:08:b7:12:9e:c0:b2:06:
40:dd:b5:ab:64:db:04:39:a3:0f:b8:ba:a6:6d:b6:
3a:16:d5:65:17:99:d0:3e:39:97:14:1b:9e:38:fb:
c7:91:33:8b:b5:9e:38:8f:30:ac:8f:b5:df:00:0e:
e3:66:dd:ab:89:30:91:cf:3b:c3:e3:8e:94:b9:35:
e2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:58:46:4C:FB:AF:18:4C:99:03:1E:88:A3:FF:4F:A9:81:CA:F5
X509v3 Authority Key Identifier:
keyid:86:24:F3:F6:61:F2:4B:E5:FE:F6:41:DC:72:2E:5C:F5:AC:87:38:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hiTz9mHyS-X-9kHcci5c9ayHOJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2d958c-8878-4323-bedc-25e535c8a5b9/1/hiTz9mHyS-X-9kHcci5c9ayHOJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:7a:c3:fe:bd:8b:6f:fd:86:2c:e2:1b:23:03:ee:64:1f:76:
19:89:a2:79:79:57:95:b9:2a:eb:93:f6:38:b2:bd:c9:c2:7d:
9b:d5:ca:f2:72:92:bc:18:af:ae:13:d0:21:f8:e4:8d:67:3a:
ca:f2:9f:bb:2d:7b:ab:ca:e6:1f:5c:40:df:10:b8:b1:c8:9c:
88:fb:ec:fc:d6:43:a9:a7:ec:a4:2e:07:e8:e4:1d:63:b7:3a:
da:73:f9:7b:4f:06:b8:41:b7:e5:43:71:ff:0d:0a:22:0e:40:
8c:5b:eb:85:a1:5e:e0:f8:86:0b:de:cc:2f:67:a7:44:2d:61:
e3:8c:82:3a:f2:aa:5f:b7:ec:88:cc:65:da:df:14:36:16:e3:
19:86:d7:f4:6b:3a:21:cb:06:16:00:38:1b:36:00:dd:97:ad:
7c:13:c9:7a:ff:8f:38:99:20:47:82:50:05:bc:1e:22:59:0c:
28:37:54:c0:88:8c:1a:8a:ed:9f:3c:8c:34:e9:52:f4:c6:3a:
15:03:15:2a:fd:46:15:9f:bb:11:ef:bf:1d:a1:f0:79:17:3c:
ec:8c:cb:12:1b:50:24:88:1f:e7:fb:65:20:51:0c:17:a9:c7:
c5:41:3e:96:bb:59:7b:3b:d9:e5:07:a9:d3:3e:8c:12:36:13:
08:4a:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:36:15 2025 by rpki-client