Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
File: HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft (raw, json)
Hash identifier: 56jfe5yJHdwA/J1bqUiHBofA+Q6vdbdwDtvOoh+xwfU=
Subject key identifier: 2B:A2:F5:65:CB:0E:5A:19:7C:98:52:A6:F9:BD:56:13:B8:28:09:D0
Authority key identifier: 1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
Certificate issuer: /CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Certificate serial: 01965793AC492165BB31AA7D8AEA253B29B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
Manifest number: 0A36
Signing time: Mon 21 Apr 2025 09:00:17 +0000
Manifest this update: Mon 21 Apr 2025 09:00:17 +0000
Manifest next update: Tue 22 Apr 2025 09:00:17 +0000
Files and hashes: 1: HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl (hash: VYvyo26I+SmZoqMNC8oAd7qZkCZPlmgS09Loin9IVto=)
2: YxdHjBspbev4c6wpMrvGTIQmKNw.roa (hash: Di9hYOa680JFEYC2+KK51U5HyB76OARKRnq2zFchJs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:ac:49:21:65:bb:31:aa:7d:8a:ea:25:3b:29:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea1f59a96797271e1fd6673a9c534257da88e6b
Validity
Not Before: Apr 21 09:00:17 2025 GMT
Not After : Apr 22 09:00:17 2025 GMT
Subject: CN=2ba2f565cb0e5a197c9852a6f9bd5613b82809d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:c6:4f:97:d6:27:1a:37:b4:8a:f8:e6:e1:
24:b1:cb:e9:e1:c5:ac:56:6d:20:ea:55:97:7e:f9:
90:16:09:91:ee:0f:e3:44:30:bc:89:86:1b:7a:e6:
23:05:7d:dd:5c:5a:b1:c5:fa:35:6c:ac:d8:61:fb:
a4:e4:5b:57:a8:a4:1d:d6:ef:b5:96:00:2c:e9:ee:
2f:5e:fe:a0:f7:30:81:b9:47:8e:99:42:21:0e:2a:
aa:f8:2e:67:9a:13:c9:ca:d0:27:d5:5a:fe:53:8d:
c2:cc:8c:bd:84:fa:f0:0c:97:a8:ae:46:f9:78:b0:
32:f0:dc:a4:09:7c:45:0b:40:82:26:dd:22:58:83:
49:b6:b7:16:67:ce:fb:0c:b9:e3:78:39:98:13:83:
87:a9:05:c8:5d:1f:01:b2:87:8e:1e:5b:07:9e:64:
e1:36:3c:c3:f7:eb:ad:3a:2b:04:51:eb:0d:71:0a:
db:82:b7:ff:6a:fe:47:95:c2:4b:17:71:cb:a7:b7:
ef:4f:c8:e5:92:de:6d:9b:9e:10:e6:0f:23:fd:d7:
a4:1b:6e:c8:3e:0b:50:94:31:97:8a:30:12:48:53:
c5:fc:2f:83:4c:de:d9:b7:5f:22:b5:75:f2:fe:f7:
e5:2f:28:75:97:54:74:4c:a6:9e:bc:75:bf:ce:cd:
11:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:F5:65:CB:0E:5A:19:7C:98:52:A6:F9:BD:56:13:B8:28:09:D0
X509v3 Authority Key Identifier:
keyid:1E:A1:F5:9A:96:79:72:71:E1:FD:66:73:A9:C5:34:25:7D:A8:8E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqH1mpZ5cnHh_WZzqcU0JX2ojms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92b508-1fad-4299-8720-7c4afb88e2f2/1/HqH1mpZ5cnHh_WZzqcU0JX2ojms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:ed:15:73:f6:6e:ad:c4:8b:f1:a9:d1:87:7b:f7:c5:1f:
d5:d8:ed:11:ab:16:f2:f1:78:97:e6:bc:c8:4a:82:74:19:83:
05:cf:5b:3a:2c:15:21:b7:78:c5:58:75:36:10:30:64:f0:ee:
2c:1b:87:2c:4e:97:20:b5:63:9b:7e:79:06:e5:44:85:b1:33:
d0:04:5c:52:88:9b:27:e7:74:e4:5e:15:2e:ad:09:60:54:57:
ce:6c:5f:07:34:08:a8:9e:86:6f:42:b0:cc:95:84:c7:52:2b:
34:d7:f4:2f:f5:9f:56:da:31:ec:93:2d:a5:fa:6c:cc:61:cb:
36:a7:39:ad:33:70:61:a5:1f:6e:fc:9a:24:ea:69:12:04:7f:
a1:e4:7f:22:23:d1:b0:89:11:cf:cb:ff:6f:3f:cf:29:72:f5:
bb:d2:35:c4:80:c4:7a:e5:fd:aa:e6:3f:c0:55:39:97:c6:72:
67:40:6c:57:2a:8b:d4:c9:39:d3:60:26:01:8b:3f:1d:3f:4c:
21:91:73:a1:d1:0d:4c:00:01:9a:3a:2a:92:18:d2:7d:5b:df:
03:c7:26:5d:95:e9:97:ff:fe:54:09:4e:87:aa:26:93:f0:42:
36:ab:f2:0a:ef:1a:51:b7:04:63:38:0a:56:c5:64:47:7e:4c:
1f:14:3b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:11 2025 by rpki-client