Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
File: hq8scWa7NKaW_eL7rO9AAbCo5-I.mft (raw, json)
Hash identifier: CViGnNZpC008hwKvJDQLaXKdI4opUXLg1Eoi/36L54U=
Subject key identifier: 54:45:AC:C0:2C:86:6C:BE:8C:DF:55:02:20:D1:56:DF:05:8D:AB:36
Authority key identifier: 86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
Certificate issuer: /CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Certificate serial: 0196102032AAE6854FCB912B686F4D83447F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
Manifest number: 105E
Signing time: Mon 07 Apr 2025 12:01:07 +0000
Manifest this update: Mon 07 Apr 2025 12:01:07 +0000
Manifest next update: Tue 08 Apr 2025 12:01:07 +0000
Files and hashes: 1: eYEds7FDx_xUoPL2I316_VuKY8Q.roa (hash: 6jycAZRy3tzHGHbqvOTBaF0biLwY1IgSfYJO3j2HlNo=)
2: hq8scWa7NKaW_eL7rO9AAbCo5-I.crl (hash: Uz7y+wAWidZCCFnQ8V6yH0ljBSTF8OhxPqX+WdLNjKw=)
3: zDK4uAw5mPfAHDc_-CPlpx-pNLs.roa (hash: FqisInA8WAgK5pDKePE9gltA7tZisv2Ptzza8Sx9lYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:20:32:aa:e6:85:4f:cb:91:2b:68:6f:4d:83:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86af2c7166bb34a696fde2fbacef4001b0a8e7e2
Validity
Not Before: Apr 7 12:01:07 2025 GMT
Not After : Apr 8 12:01:07 2025 GMT
Subject: CN=5445acc02c866cbe8cdf550220d156df058dab36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:f7:39:ab:b5:c5:b9:44:41:85:0e:b7:74:
ea:52:48:5b:b8:e2:e3:a4:ac:88:ca:10:2a:e6:89:
3b:dc:dd:0e:43:a4:ae:d1:fe:38:bb:26:70:aa:b9:
c6:48:05:7a:af:23:47:d1:fa:a1:58:c1:9c:31:00:
4e:11:38:25:f3:3f:ed:f6:59:f2:fd:9a:1a:9c:b2:
e1:2c:99:ca:7f:ec:e6:cf:94:92:13:3c:47:a3:5f:
89:1e:c2:91:dd:e9:9e:7f:dc:f0:d0:4b:5f:dc:30:
5a:fa:d0:f5:c8:fe:e5:bf:7b:6b:08:24:1c:af:97:
3c:b7:d2:3c:32:06:f3:e0:6a:a1:2e:7c:fb:c1:56:
7b:94:f2:8a:21:a7:b4:3c:2b:a0:8e:31:f9:32:75:
9b:77:db:23:e1:13:9a:09:47:a3:3b:86:91:ba:9c:
f2:1d:a4:e7:9c:10:49:66:5d:0b:4b:6d:06:e0:0e:
5d:78:a7:90:a2:37:91:d8:a4:c8:4e:44:cc:fe:79:
08:88:d5:3e:e1:a1:96:a3:82:77:8c:b0:79:46:b7:
56:d4:5a:46:0b:64:e4:51:25:04:26:86:6e:21:1c:
2c:ca:cc:c7:fe:9d:46:6c:7a:ea:77:45:85:80:8d:
55:20:52:93:45:ae:ba:62:56:7a:11:bb:59:b9:76:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:45:AC:C0:2C:86:6C:BE:8C:DF:55:02:20:D1:56:DF:05:8D:AB:36
X509v3 Authority Key Identifier:
keyid:86:AF:2C:71:66:BB:34:A6:96:FD:E2:FB:AC:EF:40:01:B0:A8:E7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hq8scWa7NKaW_eL7rO9AAbCo5-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f8f66d-8a47-4431-af51-e4f58704804e/1/hq8scWa7NKaW_eL7rO9AAbCo5-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ab:ae:82:ed:55:f4:25:f1:f6:d4:4f:a1:cb:b5:f9:22:e1:
d4:14:5f:40:f5:1d:74:84:5b:db:64:13:ac:69:5d:bc:bd:c8:
42:d4:0c:0a:1c:a0:01:5b:6b:ab:fe:85:cc:08:e6:45:db:9f:
c8:61:57:e5:f7:fe:48:98:3d:f0:cd:69:1f:fc:ff:04:e5:ea:
ee:c7:ab:a1:f9:8d:14:b5:68:71:02:26:33:30:dc:5a:35:6e:
39:52:bf:82:ba:34:69:fc:71:e1:42:98:d5:0a:1d:73:3b:61:
3a:e1:d0:00:46:15:84:77:b8:71:d7:47:f8:db:37:d1:81:0f:
f1:90:56:19:3f:3c:39:ab:4d:0d:e2:18:99:b8:24:d7:32:78:
ef:1c:9c:62:c9:d4:78:e0:2a:13:6b:1b:7d:7d:53:6c:45:01:
29:7e:73:0a:44:92:28:9c:9b:89:22:e1:fd:d0:a3:2c:02:1e:
20:8d:80:02:b3:f0:f6:48:39:fe:e0:ef:c6:d3:a7:3b:75:cc:
ab:f5:83:61:eb:c1:a3:6e:2f:f8:28:9f:cb:0c:cf:d6:dc:2f:
16:0d:a6:8b:40:66:1b:75:a1:9d:4e:76:0a:e0:be:01:18:bb:
b5:90:d2:78:fb:bd:84:66:cb:45:74:78:ec:7d:9d:55:e4:8f:
0c:ba:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:10:12 2025 by rpki-client