Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier: RkhWmxJjBlDhzOCl3gcSNTfu6tqwxT/dPnuq2KJiPmY=
Subject key identifier: 8C:84:DA:58:5F:4F:AC:FB:CD:4F:97:22:BD:2C:5D:80:BD:5A:B5:04
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 0196444438094942FAA81FC6EE885391CB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number: 14F7
Signing time: Thu 17 Apr 2025 15:00:43 +0000
Manifest this update: Thu 17 Apr 2025 15:00:43 +0000
Manifest next update: Fri 18 Apr 2025 15:00:43 +0000
Files and hashes: 1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=)
2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: S2pNPo+9sQSp5aPdhriiTP5elY+G7/fKd74z02UtBLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:44:38:09:49:42:fa:a8:1f:c6:ee:88:53:91:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Apr 17 15:00:43 2025 GMT
Not After : Apr 18 15:00:43 2025 GMT
Subject: CN=8c84da585f4facfbcd4f9722bd2c5d80bd5ab504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fd:31:69:d8:8b:37:9e:2f:ab:b4:b9:8e:a6:
ef:5f:4a:24:ae:85:90:89:fa:5a:3e:f6:a9:31:2c:
ff:22:9d:3e:fb:85:95:87:9a:45:42:2a:67:ce:2b:
4f:ab:27:f0:c8:1b:66:c1:9e:8a:6b:19:04:33:33:
d7:49:f5:03:1e:5d:ca:87:ba:70:40:e6:67:47:3a:
dc:57:21:9e:a5:d4:4d:c6:82:b1:b0:2e:f9:6c:52:
89:42:dd:1e:e5:31:8e:81:67:6b:a3:ca:28:3f:d6:
55:ad:89:cf:20:33:4a:87:0d:4e:09:25:d6:84:ce:
f3:14:ee:57:52:5b:c5:c7:c1:a1:7e:0e:61:f6:d5:
a4:41:78:80:1d:2f:0b:bf:49:85:81:35:f5:d2:9f:
01:7b:88:26:c2:02:b6:f8:f5:28:e6:6c:cb:34:dc:
e6:78:35:a0:42:b5:e0:c4:7a:fb:25:3e:1b:f6:54:
b3:cb:28:7e:a1:3a:95:09:8f:c7:7d:fd:7a:52:c4:
f3:1b:d0:15:40:7e:12:96:ed:14:11:d6:9d:fc:02:
b9:bd:e7:45:42:ba:a8:ec:fd:82:3a:91:c3:fd:08:
ab:c2:33:36:4c:41:8e:a7:12:1e:5f:37:86:88:eb:
25:54:bc:5f:f8:c8:df:27:55:05:42:8e:3e:f3:14:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:DA:58:5F:4F:AC:FB:CD:4F:97:22:BD:2C:5D:80:BD:5A:B5:04
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:74:9f:54:df:3f:d0:da:69:cd:8a:9c:1a:55:85:b4:2d:ae:
13:cb:63:fd:35:4a:b8:40:53:ed:2e:13:bc:2e:8d:52:66:e6:
6d:1e:fd:c5:76:1f:a7:9b:c5:89:39:67:40:3b:64:4b:cc:bd:
8d:a3:79:33:20:d2:22:fb:3d:bf:d3:dd:ce:0b:a2:e5:92:6f:
b0:59:94:9c:78:29:0a:0d:64:3a:5c:0b:70:fe:e9:ec:d5:a5:
90:18:cd:29:e2:46:ee:74:85:b0:d7:c9:a9:d7:eb:3d:3b:31:
07:71:24:b6:57:3b:82:43:a7:40:e0:df:9b:eb:9b:1e:56:09:
01:6f:4c:dc:6f:96:e9:e2:bc:11:6a:8a:51:94:cb:31:a0:59:
cc:96:c3:2a:0b:53:56:99:8e:b6:02:f2:f4:e2:20:28:84:cc:
5a:ab:d3:db:0a:44:f4:11:73:63:35:6b:58:dd:bb:6b:93:6b:
58:88:ee:50:98:95:f1:5a:2f:52:32:9d:fa:64:25:d5:ea:a0:
5e:52:61:f0:4f:8b:3f:3e:fa:c8:00:fa:40:a4:bb:aa:77:1b:
e2:41:2d:9c:4b:36:16:f4:2c:25:ad:7b:78:21:6a:42:a1:f4:
be:63:fa:a7:2c:3e:17:12:d4:ac:75:63:f9:ef:9d:7c:f5:9b:
5f:4a:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:31 2025 by rpki-client