Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
File: htVCMjwOMFHJx7uO0dHorP09uDQ.mft (raw, json)
Hash identifier: uy0cGGH37HFjv+AcAGPxhnkj3AHkoWZX22LNjdfBA7E=
Subject key identifier: 97:48:4B:43:C0:1C:40:87:9E:AC:06:05:96:8D:EB:D6:DC:3B:88:12
Authority key identifier: 86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
Certificate issuer: /CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Certificate serial: 01964F6D687E11BC2DC915DCA24F54D1BD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 19:01:32 +0000
Manifest this update: Sat 19 Apr 2025 19:01:32 +0000
Manifest next update: Sun 20 Apr 2025 19:01:32 +0000
Files and hashes: 1: 8RAc371ukABbTWcTiK04QzcyelY.roa (hash: I+sCdVGv/TleBprM3JJBzhdIfzsQV+d2G7DqXk+y4rc=)
2: bbCSbkJ69E4ZyMcMf3FWG13o9vw.roa (hash: QLK4XGB/GAetu80z0dQMeItgOqPLMqF/gY1QoYjWP2U=)
3: htVCMjwOMFHJx7uO0dHorP09uDQ.crl (hash: ajCkg/aUfrJvf2NsM6R+M3C/WXNbsgs+FLCuyD84FU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6d:68:7e:11:bc:2d:c9:15:dc:a2:4f:54:d1:bd:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d542323c0e3051c9c7bb8ed1d1e8acfd3db834
Validity
Not Before: Apr 19 19:01:32 2025 GMT
Not After : Apr 20 19:01:32 2025 GMT
Subject: CN=97484b43c01c40879eac0605968debd6dc3b8812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e7:c5:bc:8e:cc:21:0b:76:87:25:d1:db:7d:
36:7e:46:ac:b3:17:fa:fb:08:98:f4:0f:99:ac:c5:
dd:ff:92:ad:40:2c:f8:cf:48:a7:59:c6:62:b3:5b:
33:82:a1:51:d8:48:03:4c:f7:38:4e:32:1d:2a:9f:
60:33:79:9c:08:a6:48:be:e0:33:7f:54:90:7a:a5:
da:b2:03:90:11:61:40:9b:d5:74:fb:1f:3d:da:0b:
37:1f:fd:3e:0e:b1:42:63:6c:e7:60:e3:63:c4:fe:
cb:e2:38:c8:1d:bc:0d:44:95:18:3d:1d:a1:5a:7c:
c7:f8:20:96:ac:f2:53:74:8c:6e:7c:a8:d0:a7:94:
5f:50:0f:db:24:8c:a1:5b:86:5f:99:3a:72:2e:74:
5a:f0:a0:c7:2d:a5:1c:49:e7:a0:af:8f:f8:78:75:
85:7e:60:13:60:9d:9a:c4:b5:3a:dc:0d:7c:ad:fe:
47:34:d2:44:11:be:3e:44:7d:93:2a:3a:2b:ae:c5:
4d:b5:15:bf:c2:f7:23:75:e3:c0:29:32:12:31:8d:
17:04:8f:3a:20:da:d2:30:09:03:14:3f:3e:90:e8:
73:f6:ce:d0:65:3d:90:2e:1e:ca:ee:d7:ad:ff:e0:
13:d3:7f:5a:32:03:e5:36:b9:ab:f9:2d:b7:11:e7:
c4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:4B:43:C0:1C:40:87:9E:AC:06:05:96:8D:EB:D6:DC:3B:88:12
X509v3 Authority Key Identifier:
keyid:86:D5:42:32:3C:0E:30:51:C9:C7:BB:8E:D1:D1:E8:AC:FD:3D:B8:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htVCMjwOMFHJx7uO0dHorP09uDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a7c7c1-fc42-43a3-9ad8-70dad51e73fb/1/htVCMjwOMFHJx7uO0dHorP09uDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bd:7f:a6:96:c0:0f:e6:c0:e4:10:00:72:c0:bb:f4:b3:3e:
b0:9e:43:e5:3c:f6:49:a8:84:c1:1b:b2:6f:3b:98:10:7a:a2:
8a:39:67:ef:a2:96:fd:f8:ba:5f:a0:7d:35:16:4c:cf:a5:60:
bd:c1:70:68:2d:d8:e4:67:eb:11:4f:c4:ce:c8:09:5e:f3:15:
27:91:de:b1:6f:43:96:77:b5:6e:41:ec:78:23:ac:73:1b:b0:
9b:87:ab:90:ee:c2:f0:0b:77:f6:4d:d4:90:7f:8f:a6:71:6a:
f6:8b:86:7a:6b:9f:4d:65:2f:cf:e9:20:d9:b2:ff:d2:c3:db:
45:1d:19:93:2c:49:43:f9:8a:36:f5:8a:1e:a1:66:e7:6b:21:
cb:7d:15:1e:de:c1:34:ce:c4:0b:23:40:2e:07:7f:ee:af:b1:
cc:ed:63:04:5a:3b:66:e9:b5:89:8f:58:62:a0:0b:4b:80:9d:
82:cf:5b:72:43:14:36:11:cd:f3:f5:15:9f:88:d3:66:ba:77:
c8:5a:1d:2c:55:9c:8d:b0:46:6a:cc:8a:1e:5e:cd:cf:2e:7d:
dd:18:2e:42:9f:01:17:db:55:23:61:60:60:d5:59:4d:4f:b8:
dc:23:48:43:7d:e1:5e:45:af:70:28:7a:76:3b:15:17:1d:c1:
5b:eb:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:40:54 2025 by rpki-client