Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
File: hbhx1pOVYQRld5MjuRs05pv89bU.mft (raw, json)
Hash identifier: +q/v7Pvch2mdako19pR2NcguGqclCBceAvJHJ0RkxPw=
Subject key identifier: 74:AC:18:67:70:34:40:64:49:67:A5:FF:9D:8A:5F:50:3A:EB:7E:B2
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 019649D86CEF5A5635569073C8115DD93E08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
Manifest number: 03E6
Signing time: Fri 18 Apr 2025 17:00:42 +0000
Manifest this update: Fri 18 Apr 2025 17:00:42 +0000
Manifest next update: Sat 19 Apr 2025 17:00:42 +0000
Files and hashes: 1: hbhx1pOVYQRld5MjuRs05pv89bU.crl (hash: U2j/YJbabOKEUxHLFYTnC98o48I0cWW9dh0tCzFko4g=)
2: kbsmCVo1MuAxbWK2Mk_FNqJ4o-Q.roa (hash: FxGgyIXbAaHbajTUZb5rQl/upi6b8yc9JYqmBZ7HbLE=)
3: mCquFh2XBWkg-YOpmNb3-W_LQ_o.roa (hash: 6gQDaDFUWcD/jv1rl9eJBOecJII0xNwqHgOM59i+hCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:6c:ef:5a:56:35:56:90:73:c8:11:5d:d9:3e:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Apr 18 17:00:42 2025 GMT
Not After : Apr 19 17:00:42 2025 GMT
Subject: CN=74ac1867703440644967a5ff9d8a5f503aeb7eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:65:b5:a9:53:17:73:e9:d2:72:1b:24:df:
bc:b1:a2:e7:a2:95:ab:63:bb:45:3c:17:fa:50:65:
2c:b9:89:db:74:b3:e1:ed:45:78:6c:c0:6c:89:e4:
78:66:2e:2c:94:6a:91:88:79:8a:c8:f3:72:dd:a1:
dc:10:60:42:0b:76:f5:90:b8:84:ca:f9:7d:7c:a9:
d1:62:62:4b:12:8b:98:72:1c:16:a2:5f:c4:fe:f1:
d4:0a:89:ae:13:6e:bd:2e:09:31:17:b0:a3:50:b7:
af:2f:7e:2a:ed:4b:2a:3f:56:3d:32:6c:b5:34:ad:
f7:af:c3:1f:98:17:ac:a1:ac:c3:2d:6b:25:96:2b:
ea:55:90:4f:e1:a5:64:09:60:c1:13:2c:6d:f0:35:
98:f9:4f:60:76:2e:92:5f:59:45:51:62:9c:56:b4:
0d:48:6b:8f:83:39:91:7f:6a:b4:13:f0:8c:6d:41:
ba:be:02:d4:09:2c:5d:15:e0:55:61:e8:91:af:8f:
af:9f:b8:37:e5:82:b5:f4:19:3e:40:3d:0c:e5:02:
61:8e:b5:ec:87:50:42:56:5e:0c:51:ea:99:1c:b8:
eb:08:86:7d:6c:53:3f:80:94:d9:76:ea:6a:fd:2f:
71:2b:55:4a:86:16:45:d5:a1:e5:a8:8c:1b:97:35:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AC:18:67:70:34:40:64:49:67:A5:FF:9D:8A:5F:50:3A:EB:7E:B2
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:75:f2:6d:7a:a3:10:d1:71:67:a1:3e:b5:b5:a4:4f:d5:aa:
32:e0:12:2e:6e:8a:77:d9:ac:69:d0:7c:59:9e:f9:64:aa:9f:
d0:76:85:ff:a0:55:c3:71:26:eb:b5:22:dc:f1:79:e8:13:b4:
6d:59:be:02:0e:bb:6b:68:20:96:cb:05:e3:cb:17:04:a0:3e:
b6:24:f0:81:4e:04:ff:f2:c9:cc:7c:e6:7a:f4:3e:7a:0e:08:
ec:da:2c:fd:f6:7d:33:9d:1d:35:ef:e0:6f:5f:31:48:9c:97:
74:b9:19:7f:e8:c5:a4:46:86:87:ad:86:f5:41:27:7c:77:bb:
66:75:1c:36:6d:65:61:f5:72:70:d3:b0:af:72:9b:b2:dd:40:
36:d1:c2:ac:87:36:5a:6a:4a:24:91:78:e8:bc:9f:8e:12:63:
34:70:6e:b1:c4:4f:7c:91:21:9e:16:c4:88:7b:eb:f4:1a:61:
df:12:ed:c6:4a:d2:26:4b:09:44:df:c5:38:b2:43:bc:d8:b5:
50:75:6f:71:0a:f0:f3:59:8d:f7:d7:66:7d:b4:ee:df:ac:c4:
43:32:8f:a5:56:0a:76:da:8a:14:47:2d:1a:d2:4c:17:59:de:
55:ae:5a:1c:83:3d:8c:5c:e0:f2:b7:87:47:9a:f8:44:ee:41:
06:bc:aa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:07:35 2025 by rpki-client