Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
File: hR1ONNTkhTnBcEUdTiYTiIf26SI.mft (raw, json)
Hash identifier: pTjEqvjmd9aJAn26YyaAs9Ivyjt2XJVJBI5Jbo9fFgc=
Subject key identifier: C4:9F:42:62:73:EF:00:62:AA:ED:F8:82:7A:59:4D:64:8F:D1:BB:43
Authority key identifier: 85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
Certificate issuer: /CN=851d4e34d4e48539c170451d4e26138887f6e922
Certificate serial: 01964067B118FBD8037DE38A89150318D8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
Manifest number: 109F
Signing time: Wed 16 Apr 2025 21:00:59 +0000
Manifest this update: Wed 16 Apr 2025 21:00:59 +0000
Manifest next update: Thu 17 Apr 2025 21:00:59 +0000
Files and hashes: 1: EgrdXaLN-vc8C2zZS8RN3DywvDo.roa (hash: hzm54PDUPW3onP/qtSLZRsQOvKv3wuQ4riGx7IRQcQA=)
2: hR1ONNTkhTnBcEUdTiYTiIf26SI.crl (hash: 5kCjI0FhTOU2O7loF+/hIdo8wky9q2Zr//e+nFSU76o=)
3: rAaiXMvO9i5snovqluPbyo_QCN0.roa (hash: pt3vDzVbNzSpy4PSZ8+XX3gpZBn6uEG/ZRILx9TbDQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:67:b1:18:fb:d8:03:7d:e3:8a:89:15:03:18:d8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851d4e34d4e48539c170451d4e26138887f6e922
Validity
Not Before: Apr 16 21:00:59 2025 GMT
Not After : Apr 17 21:00:59 2025 GMT
Subject: CN=c49f426273ef0062aaedf8827a594d648fd1bb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6e:f0:f4:ab:9f:6e:19:8d:26:c4:73:67:b3:
8c:e8:70:08:1b:51:c4:85:be:55:3f:ed:f0:99:f9:
41:9e:14:77:a2:fe:56:5a:43:02:c1:51:20:13:56:
ee:94:5e:7d:1f:ba:5c:ab:48:3c:0f:0f:aa:b9:ab:
0f:19:0f:34:a2:ad:f5:49:f0:1c:22:83:8b:32:ca:
31:a4:23:b3:b0:92:07:65:f1:35:57:e1:1b:6d:c7:
23:f8:2c:3b:2f:b8:bf:45:7a:4d:2c:21:25:56:ba:
51:67:e7:ba:6b:d5:71:cc:48:7a:92:78:7e:8b:0d:
2e:4c:90:cc:db:5a:84:3d:d8:1f:d4:9b:be:0b:0b:
21:5e:55:0c:eb:60:1f:1e:78:8f:21:ed:51:5e:b9:
42:35:7f:8d:eb:6f:c7:d5:35:25:5a:6d:ce:13:1d:
28:23:7f:af:f8:4f:ae:26:0b:27:d1:6b:4a:96:25:
b9:69:5f:98:0e:b3:49:21:16:22:f0:e5:c3:1b:cd:
13:46:fb:7d:2d:61:bc:54:6c:aa:1e:7b:92:03:aa:
ed:33:2c:e3:06:ea:4a:8a:f8:f7:00:fc:2f:f2:f1:
d5:e0:cb:34:df:f9:72:a9:08:a1:57:4f:ef:94:b7:
da:2a:c2:d4:67:ab:f9:37:c7:fa:d8:97:6a:e6:44:
d1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:42:62:73:EF:00:62:AA:ED:F8:82:7A:59:4D:64:8F:D1:BB:43
X509v3 Authority Key Identifier:
keyid:85:1D:4E:34:D4:E4:85:39:C1:70:45:1D:4E:26:13:88:87:F6:E9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hR1ONNTkhTnBcEUdTiYTiIf26SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/bf1589-6adf-44b3-9746-81c4055148e0/1/hR1ONNTkhTnBcEUdTiYTiIf26SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:4f:f7:1b:c2:c0:ba:57:18:7c:f9:b8:a4:38:cf:df:e3:25:
0c:da:79:8d:2f:75:53:c0:61:ad:55:44:07:31:7b:ae:e4:ec:
ea:9b:27:05:93:71:e1:d1:0e:31:70:0c:91:95:ce:8d:d7:12:
af:6c:b8:c9:63:c5:39:3b:5f:23:59:9b:2a:cc:39:bd:23:06:
fd:c6:18:b6:0a:65:01:7a:fe:74:4d:75:d2:3b:ad:54:e5:7a:
50:c8:69:fa:1e:80:10:07:92:10:62:c9:f9:ab:dc:5d:1b:20:
cc:9f:7b:dc:06:07:98:7e:5e:d3:cf:93:24:8a:db:41:c0:3e:
46:7a:cb:29:50:c8:0c:bd:06:62:db:97:e5:42:ea:97:65:2d:
0e:73:b0:84:23:19:00:80:57:80:bd:9f:b7:39:23:43:cf:5d:
2f:42:83:c4:80:25:77:de:ef:80:ed:8b:c5:da:f2:b4:4d:13:
80:66:4f:b8:dc:5a:15:19:a7:e9:c3:e4:17:78:22:5e:a9:a6:
eb:0e:c3:29:cc:e4:e8:3c:bc:63:ff:55:93:4e:9e:9e:6d:e6:
8f:4f:ca:f7:40:c3:17:af:b3:42:49:43:c0:a8:9a:2e:a1:85:
ed:7a:2b:ad:fe:80:2b:d9:eb:f5:97:b8:ae:00:88:1c:99:61:
01:f3:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:23 2025 by rpki-client