Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
File: hBhM6RkCNkC7klbC2NGgSfoQJSA.mft (raw, json)
Hash identifier: f9y46VqHyIWoqj19G31cVePDoZ0H3/dcLBInVPUkpWE=
Subject key identifier: 9D:D3:A1:0A:FA:A7:0E:13:E6:AE:88:4F:44:70:5F:D7:90:FD:B9:37
Authority key identifier: 84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
Certificate issuer: /CN=84184ce919023640bb9256c2d8d1a049fa102520
Certificate serial: 0196526DC560FB66CB592185B40C060C1897
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 09:00:47 +0000
Manifest this update: Sun 20 Apr 2025 09:00:47 +0000
Manifest next update: Mon 21 Apr 2025 09:00:47 +0000
Files and hashes: 1: HyOxfsfCg8-tkufuXac7nvkK01o.roa (hash: L5Ny6HNe08uh+c2YqS2y8m1kghjhUwTxv7PPQGLCeAk=)
2: Za1vvPAEMQLX9tFDLmhPbJ3BBlk.roa (hash: ny9mwL29fdAvRnLi4zBGCZuIouNHHSaZbEkA3+/PrUQ=)
3: hBhM6RkCNkC7klbC2NGgSfoQJSA.crl (hash: 3kJHDh3gml4C26OLkmManKDsd92Tiz4cBM+HBh2eKu8=)
4: pQKQijoa8QLl8H3UvggEgIJH4JI.roa (hash: JjHJzDNM1I3FEnY1/wJ+QeN9KOwj+3VjvvY6xPkS+9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:c5:60:fb:66:cb:59:21:85:b4:0c:06:0c:18:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84184ce919023640bb9256c2d8d1a049fa102520
Validity
Not Before: Apr 20 09:00:47 2025 GMT
Not After : Apr 21 09:00:47 2025 GMT
Subject: CN=9dd3a10afaa70e13e6ae884f44705fd790fdb937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a0:63:95:7b:72:cb:d4:94:17:51:a4:d0:dd:
f5:e5:d0:24:25:04:52:c1:90:37:f8:78:0b:74:00:
9e:1e:75:69:82:83:04:42:4a:79:b8:1e:41:3b:63:
49:f4:01:31:6b:91:cf:5e:9a:6e:a7:aa:86:4f:45:
23:57:36:69:36:16:2e:00:75:ad:38:e3:f2:df:a3:
a6:d0:a9:01:a1:95:f3:bc:89:fe:f5:a9:c4:db:6a:
ff:e3:67:d0:ec:6b:42:f0:26:ba:6b:0d:f6:10:bc:
df:75:86:23:d8:25:e0:69:d4:2b:81:a6:2a:c7:0a:
21:b3:bb:2a:02:d7:7d:fb:ec:1f:7f:fd:13:69:31:
42:9e:a9:d8:47:a1:5b:49:4b:db:a4:93:2c:63:39:
8e:dd:3a:ba:32:2e:e9:9c:d2:2b:f7:03:3f:98:9c:
bc:f1:2a:8d:3c:2f:b0:45:b9:73:db:41:4d:4f:fb:
a9:69:47:1d:72:f9:de:c0:eb:14:97:d2:61:95:11:
68:f4:a8:74:e1:28:07:1a:ba:f9:5a:70:80:5d:42:
40:88:5e:10:cd:9c:f7:94:91:c3:f7:20:4f:38:ff:
85:a7:b5:d9:a9:81:4b:67:bd:4d:69:f3:e0:36:c9:
bf:18:c5:57:a1:d2:f5:b7:68:f1:9a:1d:56:52:3a:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:A1:0A:FA:A7:0E:13:E6:AE:88:4F:44:70:5F:D7:90:FD:B9:37
X509v3 Authority Key Identifier:
keyid:84:18:4C:E9:19:02:36:40:BB:92:56:C2:D8:D1:A0:49:FA:10:25:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBhM6RkCNkC7klbC2NGgSfoQJSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2922cf-1861-419d-9eea-0a79d54965a9/1/hBhM6RkCNkC7klbC2NGgSfoQJSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:58:24:fe:c5:a9:61:2f:a5:c6:dc:cf:23:61:85:00:68:8d:
f5:88:34:77:68:5b:e4:eb:01:86:33:92:dd:a0:f7:fc:09:76:
9d:7a:b9:2d:ea:9d:24:73:f2:a3:d6:2f:7b:73:82:74:b9:ae:
e4:a0:40:7d:6d:a0:2b:5b:9b:5b:94:b9:a6:e3:0a:4c:bf:72:
9c:15:62:8e:ab:e5:8e:e3:4d:c6:62:89:86:c7:32:25:e6:87:
53:9b:a9:f2:76:cc:cf:18:dd:6b:d7:57:2b:65:f1:05:ab:5e:
65:9b:56:93:b0:29:00:e1:d0:0f:66:d1:90:e5:69:67:de:48:
ec:49:a5:a8:96:65:06:bb:88:64:ad:73:52:0d:28:4f:b2:a7:
46:c9:b9:12:77:61:a0:20:97:4d:99:da:e4:83:79:38:8e:38:
60:d2:20:fa:ef:ec:8b:c0:bf:5a:fe:ca:37:a8:cf:2b:ac:57:
99:4f:12:a8:9c:1b:f4:27:7e:c9:b5:58:30:c5:49:e3:25:29:
0e:ef:f2:03:ef:54:c4:3e:f2:e2:b1:f8:a9:f8:15:ee:49:ad:
f1:ff:b0:30:9f:c1:b3:5a:9c:7c:82:2f:32:06:d7:dd:f6:a4:
2a:35:b1:38:36:12:06:a7:f8:1d:4a:e2:55:a7:b7:51:45:55:
e4:e5:65:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:46 2025 by rpki-client