Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
File: hVBZemBkyIKuKvP6V1nxP4vR3fw.mft (raw, json)
Hash identifier: niGZP3lU2kIemVtxp5MoLLGlQaFtEXv7elklusVarx0=
Subject key identifier: A0:02:84:90:BC:76:A0:50:A0:46:63:3E:B5:11:3C:63:36:4E:AD:81
Authority key identifier: 85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
Certificate issuer: /CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Certificate serial: 019614D9088A24EDDE1CAAB32DEA26046809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
Manifest number: 0F11
Signing time: Tue 08 Apr 2025 10:01:29 +0000
Manifest this update: Tue 08 Apr 2025 10:01:29 +0000
Manifest next update: Wed 09 Apr 2025 10:01:29 +0000
Files and hashes: 1: Nnh8TxyMB33fgGngdO7IhueAOsU.roa (hash: R28y5tSNBK4A6wEp0RdvkAdrsGgoMExqmSzBUnD9C9E=)
2: hVBZemBkyIKuKvP6V1nxP4vR3fw.crl (hash: jnAdOsqPMy2Kg29HP2PCDH6Uilw7bP3oRMghmI5MVdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:d9:08:8a:24:ed:de:1c:aa:b3:2d:ea:26:04:68:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8550597a6064c882ae2af3fa5759f13f8bd1ddfc
Validity
Not Before: Apr 8 10:01:29 2025 GMT
Not After : Apr 9 10:01:29 2025 GMT
Subject: CN=a0028490bc76a050a046633eb5113c63364ead81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:55:e4:24:4a:d5:02:0d:d9:32:c6:a4:ad:83:
2e:d7:c0:05:e4:7d:a4:51:ec:80:57:94:49:39:26:
81:bd:d7:04:d5:79:2f:35:76:84:b5:c4:5c:c2:45:
6e:5e:40:98:a3:f6:56:6c:81:8b:27:82:53:0a:53:
4b:07:90:bc:2f:b4:87:d9:e7:4c:14:9f:a6:24:e1:
5f:3b:46:3b:a9:c0:66:40:f8:05:20:73:1e:4e:64:
71:8c:a9:21:0c:68:38:c5:af:f4:b3:52:27:87:07:
a9:4b:a3:a9:42:9a:89:b5:6d:7d:b3:05:ad:99:ba:
72:ba:e7:88:e6:c4:78:6f:42:c1:3a:1c:da:19:65:
4d:dd:08:4f:2c:b0:d0:b5:32:29:1c:aa:b7:50:5e:
92:ac:dd:b8:ee:8c:45:2e:f3:37:26:93:3a:d5:96:
32:06:17:2b:05:a1:9b:5e:f5:8b:f5:13:d6:51:a8:
31:22:12:85:50:00:54:ba:7a:45:85:25:1f:35:09:
71:d1:64:74:b0:c1:54:ef:f9:e4:39:2d:11:2f:6a:
71:de:89:f4:01:4e:61:fa:d1:d0:e6:d3:54:08:45:
82:f1:9e:b5:77:f3:d0:4c:f4:a9:fb:a6:25:60:1e:
79:62:bd:f7:50:a4:05:71:ea:22:a1:25:b8:10:b7:
98:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:02:84:90:BC:76:A0:50:A0:46:63:3E:B5:11:3C:63:36:4E:AD:81
X509v3 Authority Key Identifier:
keyid:85:50:59:7A:60:64:C8:82:AE:2A:F3:FA:57:59:F1:3F:8B:D1:DD:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVBZemBkyIKuKvP6V1nxP4vR3fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1c72c5-299a-4f70-812c-25c5f05aeb5f/1/hVBZemBkyIKuKvP6V1nxP4vR3fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:44:c0:5b:78:26:23:09:4a:4b:0f:cd:b9:b0:67:8f:e5:c2:
67:96:8c:e6:44:af:cf:f9:6e:55:b6:c2:19:d4:bf:d6:39:e4:
44:5d:3e:b0:f9:bc:5b:1b:22:54:f6:23:cf:a9:e7:a6:62:af:
7b:df:7f:07:df:1d:48:85:d9:79:4f:2e:17:24:e4:ac:bc:03:
50:fd:ad:a2:cc:c1:db:2c:89:e8:49:3d:35:77:e1:94:8c:ec:
d3:c2:1e:62:01:78:1a:04:05:98:0c:46:2a:ab:25:05:04:6a:
03:79:e0:f0:28:34:1a:39:53:1f:87:07:34:d4:ce:60:1e:67:
5a:b7:86:a4:1b:c7:3f:d0:32:09:db:3d:0b:b7:e9:77:76:86:
1c:08:e9:c8:85:f9:bb:ec:dd:0a:26:f4:6a:ec:2d:44:58:c9:
e7:5e:85:77:05:19:ef:6e:70:11:29:a4:4e:e4:53:04:e0:48:
f9:1f:49:68:f8:1a:6c:1f:3b:af:ff:3a:73:7a:fa:cd:c7:70:
24:ac:ce:f4:2a:72:16:bf:68:d1:dc:88:77:33:5b:8a:7b:5a:
e7:fa:0c:50:98:7b:c8:b2:0c:29:4a:00:d4:4c:dd:8b:7e:1a:
2b:d6:82:98:f6:2a:e4:84:75:10:b6:a8:9e:bc:8e:63:60:58:
75:b3:aa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:45:59 2025 by rpki-client