Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
File: hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft (raw, json)
Hash identifier: EJ1h3PgU1f2UU6Ay1HySAEUEJ6CSW/w9q7JFB0bBvYM=
Subject key identifier: 73:20:AF:1B:A2:BC:91:F0:54:35:F9:A6:BE:61:EC:EA:EE:6F:9F:FE
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 0196AC1FA2FF8D253575711C7760EFEF34D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
Manifest number: 0D2A
Signing time: Wed 07 May 2025 19:01:16 +0000
Manifest this update: Wed 07 May 2025 19:01:16 +0000
Manifest next update: Thu 08 May 2025 19:01:16 +0000
Files and hashes: 1: hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl (hash: tmcj9SXDBteV/ZhWMH0sNXmkEIJEjiSaZtOld1lx5Hk=)
2: lHldbm0YksaCuz9XIehAf5kRzB0.roa (hash: BN7mh6nrwtoaOUPVrCKlYMfyId9M155pIfSIqKbQaEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:1f:a2:ff:8d:25:35:75:71:1c:77:60:ef:ef:34:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: May 7 19:01:16 2025 GMT
Not After : May 8 19:01:16 2025 GMT
Subject: CN=7320af1ba2bc91f05435f9a6be61eceaee6f9ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:83:d7:c2:62:1c:8e:e7:af:55:72:ab:86:
d4:64:b6:1d:08:81:69:84:71:62:4b:37:1c:34:c0:
3d:c8:df:ac:84:8b:ab:91:4e:be:ca:4d:e9:2c:f0:
1e:3b:62:e4:2b:08:d6:5a:8f:d4:d6:52:4a:ca:92:
5e:fc:fd:e5:ad:e1:9c:93:54:92:1e:b5:08:a8:d6:
5a:e8:81:9b:1a:5b:ff:14:db:81:dd:bb:67:8c:91:
31:e7:e6:bb:b5:8f:f3:f9:2e:da:57:3c:4d:05:05:
c6:38:91:0e:24:69:46:5b:ea:3e:9c:9a:a5:fe:8f:
7e:5d:d0:2b:72:57:c1:1f:20:d1:81:2f:35:b5:0d:
86:c8:87:36:4e:fd:de:71:b3:4a:cc:93:ef:a9:a5:
47:51:34:64:d6:19:82:c3:09:97:33:83:af:e2:48:
5b:62:e0:0e:69:ef:5d:a7:c4:6c:8b:95:56:9d:1b:
23:37:b1:70:66:9e:65:ec:35:d1:0c:19:eb:18:76:
06:49:f0:8c:72:7f:5d:d5:1a:71:db:1a:21:f0:60:
70:23:a5:8e:d8:fb:60:91:9b:9b:e5:d1:6d:fd:02:
6c:2a:e6:1b:41:25:fa:2f:ad:e7:7b:11:59:6c:e7:
28:4f:4f:3f:53:e6:21:2d:8b:ef:59:83:47:78:6c:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:AF:1B:A2:BC:91:F0:54:35:F9:A6:BE:61:EC:EA:EE:6F:9F:FE
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:42:48:75:f7:0d:61:79:e6:6e:e1:db:98:a5:76:8d:44:38:
f6:2f:a6:93:42:d9:26:48:4e:f6:ee:1a:95:a3:a0:30:0a:53:
a8:6a:a3:75:21:45:b7:10:d4:de:ba:00:d9:4d:02:18:22:48:
d7:45:55:c1:fa:4e:19:24:30:7e:24:b9:8c:23:c5:d6:e5:2a:
0f:2b:fc:99:da:ee:b3:7b:29:b8:30:b6:3c:5a:cc:48:ed:32:
b5:e7:c9:88:82:e5:bd:ff:a8:3a:22:ce:ed:4b:d0:07:67:8b:
d7:7a:d0:66:d5:ca:69:f1:76:dd:6a:28:6d:12:d8:2b:90:a3:
6c:fa:3e:27:16:7f:73:04:c4:ff:77:be:8a:ea:3c:00:05:af:
4f:e0:b8:db:ba:c8:1d:c2:1e:ad:a3:00:54:cb:45:85:13:f6:
b7:3f:0f:e3:b4:d6:2c:84:8e:9a:ed:2b:ec:9a:45:d3:8a:82:
4f:9c:42:dd:61:12:ff:9e:f3:3d:69:e8:59:9a:84:34:74:6b:
00:f4:5c:b0:4d:c2:81:80:02:8e:0d:40:76:a9:d4:3e:12:d6:
a3:a4:61:83:ac:9b:12:28:98:82:03:ea:10:83:f4:49:58:6f:
fb:14:d2:9a:6c:db:62:26:ba:a8:53:7a:aa:0d:79:b4:8a:9f:
8e:01:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:10:01 2025 by rpki-client