Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: Epyv/6OXWgVUVxCUyi4xCRC28Zu94SaVsEuqalt1CEA=
Subject key identifier: B0:6B:59:01:C7:08:D8:C5:72:8B:6D:48:DF:D7:5E:32:FF:25:83:8A
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 0196B71035D7359B78ACB90A724078D0D8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1534
Signing time: Fri 09 May 2025 22:00:14 +0000
Manifest this update: Fri 09 May 2025 22:00:14 +0000
Manifest next update: Sat 10 May 2025 22:00:14 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: bUzfh0q7G+ZuNACi4fFLq4A9IZXeN3mSvfayqP9CaTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:35:d7:35:9b:78:ac:b9:0a:72:40:78:d0:d8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: May 9 22:00:14 2025 GMT
Not After : May 10 22:00:14 2025 GMT
Subject: CN=b06b5901c708d8c5728b6d48dfd75e32ff25838a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:37:55:02:c8:8e:cf:06:d3:8b:8e:d1:7a:
28:b2:10:8c:9c:3c:b1:72:ee:88:d5:bf:be:4a:ea:
3a:6f:2e:47:6e:8d:15:e8:34:04:0e:2f:84:1b:b7:
4f:fb:be:b1:2f:ae:3f:04:ae:72:37:9d:ad:b8:7c:
b2:d0:6a:17:3f:8d:9c:52:96:0e:0a:23:ea:ad:8f:
7f:8f:b0:a0:8c:d9:9d:72:f7:b3:90:c8:a9:73:e9:
17:8e:68:11:6d:30:eb:97:e2:1a:23:43:03:46:71:
25:59:60:2b:fe:8d:d6:99:14:9f:26:1f:6f:57:39:
b5:6b:38:75:c5:a7:c0:b4:03:e2:d8:3e:7c:7d:a4:
1e:d4:c0:a3:2d:5a:73:f3:a3:5e:6e:35:2c:d1:41:
6f:f0:37:3c:d3:1f:43:9f:9f:35:c8:dd:1e:4f:3c:
05:9d:34:25:e2:c3:4f:51:48:4a:bb:ca:63:dc:5e:
61:65:aa:65:db:fe:7f:7d:70:fa:eb:7a:b8:4a:3e:
7d:e7:bf:36:10:9c:db:a8:a6:a6:fb:6e:87:02:8a:
c6:02:fc:77:35:58:45:df:62:9a:df:14:b0:64:e7:
78:cd:80:d6:b6:88:bb:7a:a1:89:23:d5:bf:b6:84:
fc:61:fa:b9:07:81:bf:66:d6:6d:09:ea:86:b9:dd:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:59:01:C7:08:D8:C5:72:8B:6D:48:DF:D7:5E:32:FF:25:83:8A
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:47:80:f6:01:3c:87:5a:3a:3b:07:88:32:48:8b:b3:3b:fe:
cd:71:b4:13:c7:ba:a2:97:67:90:b9:42:a9:d1:1f:fe:63:d1:
ec:c6:1e:6a:ec:2f:b8:93:f0:c0:11:35:2f:9b:42:27:d8:b7:
03:08:bc:0d:6f:ba:15:45:d2:b2:d9:69:d6:fa:19:32:e4:d6:
e2:3b:1a:a1:39:9b:53:86:20:32:04:1b:d7:36:c7:ed:a2:9b:
57:11:22:b3:8d:35:68:07:de:d7:ec:36:52:1d:d0:93:ad:08:
ab:d5:01:73:2b:73:dd:23:7c:27:71:30:bd:4e:44:ba:0a:fe:
71:54:9d:83:43:11:22:cb:65:15:70:72:cc:c9:02:c6:6a:38:
50:95:e2:43:58:3d:b5:d6:8e:23:3e:58:5c:32:2f:7d:db:59:
c5:86:b6:cd:da:c7:f7:83:2f:2f:3b:b6:4b:a3:a6:37:c1:ad:
cf:47:ee:45:62:d8:6a:0b:d2:fa:df:33:d1:e9:73:91:a3:a0:
ee:9e:64:47:51:83:92:e1:5a:17:43:58:4f:1e:4b:42:03:54:
04:94:f2:85:29:4a:13:3a:c0:e9:9d:be:ca:a3:33:fd:a1:40:
d0:05:2e:47:77:e5:24:af:d1:4b:ee:ea:8d:d6:98:2f:74:d7:
b4:3a:5f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 06:57:28 2025 by rpki-client