Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier: RhkviJj+ds89UFJvd+105qSMommhc6WxWBaYfaJdw58=
Subject key identifier: 4D:F0:F7:38:D0:97:07:79:9B:FD:71:56:04:D6:EA:5E:2D:09:99:7C
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 01962ABBE9B25BEF7928B78A9B742D3B0EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number: 14F5
Signing time: Sat 12 Apr 2025 16:01:20 +0000
Manifest this update: Sat 12 Apr 2025 16:01:20 +0000
Manifest next update: Sun 13 Apr 2025 16:01:20 +0000
Files and hashes: 1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: MOirykJ+1FTSrUAqTibybTbjF8jL3T093mADs+awyuo=)
8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bb:e9:b2:5b:ef:79:28:b7:8a:9b:74:2d:3b:0e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Apr 12 16:01:20 2025 GMT
Not After : Apr 13 16:01:20 2025 GMT
Subject: CN=4df0f738d09707799bfd715604d6ea5e2d09997c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:8f:94:32:50:e4:fb:a3:36:ca:70:9f:d4:
4a:ee:5e:c9:c2:2f:d2:6d:39:fc:d3:f7:6f:ee:87:
22:de:43:10:de:9e:52:3d:fc:f7:4d:48:f4:6b:cc:
93:0c:91:72:70:02:f6:2d:d3:cf:5d:46:99:07:df:
79:5d:29:14:97:aa:f1:24:a0:19:e8:5a:68:20:65:
21:82:31:c8:f6:83:28:7e:2f:ab:70:d2:51:17:9f:
bc:06:38:3c:86:c9:9e:5b:1e:02:04:c3:fa:f7:98:
4b:8d:38:71:e5:fc:de:32:60:a6:dd:ce:24:84:54:
35:fb:c6:4a:f5:e7:c7:47:3d:43:ca:f4:6b:b0:62:
78:31:d0:3e:29:20:58:94:31:61:96:d5:09:ab:0e:
ad:6e:b7:a8:3e:f1:ea:bf:49:a6:c5:a3:2c:76:27:
69:a5:57:8f:94:80:f3:86:f6:c1:e1:4b:c2:a2:02:
01:ac:2a:55:8a:d2:45:12:5e:66:77:a7:b7:54:2c:
d5:76:cc:07:6d:4d:1c:3d:17:94:20:06:d4:80:78:
8c:e4:f7:12:84:15:ea:bd:dd:5c:71:83:7b:5c:7e:
19:7f:8f:f8:79:e8:ef:8f:43:a8:56:3f:52:ff:9b:
23:9e:6b:b7:fc:5c:39:77:8e:51:21:a3:cd:3b:9b:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:F7:38:D0:97:07:79:9B:FD:71:56:04:D6:EA:5E:2D:09:99:7C
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ab:df:f4:47:06:7f:1f:26:4e:10:30:2a:d0:f0:a8:eb:09:
e6:15:9c:99:a9:7f:75:28:24:7f:0e:6a:d2:81:f3:75:5c:a4:
1e:25:86:dd:0f:99:92:76:31:54:5e:ca:37:af:0b:de:7d:c2:
21:24:ac:54:8f:80:e2:b4:cd:d0:58:78:71:c0:ca:68:33:8b:
82:6c:39:ae:59:3c:bb:59:8e:96:ff:ed:8e:4c:3c:84:e8:66:
e3:f1:58:a5:5d:ac:53:9d:94:db:6a:5d:7a:66:c1:40:43:b8:
a3:e9:47:22:fc:a0:e2:b3:d9:12:d5:ef:88:bf:28:e2:ba:2b:
a7:b9:fa:9b:12:04:13:40:0f:8e:89:54:0d:68:1b:ee:77:c4:
bc:ca:3f:ba:ca:7f:bf:c0:c8:f7:94:4d:78:7f:ad:37:e2:1f:
ba:4c:e0:38:4b:04:75:0a:81:93:ef:51:8e:5f:56:f2:51:ed:
d1:00:2c:68:db:bd:d8:5d:03:bf:bc:8e:cc:92:10:05:2b:64:
c3:d1:d0:8c:86:61:44:1b:49:44:1a:2a:a1:0f:59:bb:4b:d6:
f9:a9:f6:85:cd:f7:45:3b:36:60:5a:7c:33:2e:49:ee:53:9a:
06:b1:a6:e2:7c:65:ed:d5:a4:fc:67:08:2e:d2:a0:7a:3e:a1:
4a:53:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:31:34 2025 by rpki-client