Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
File: hA6dA48bwAXzsJxdyoIK2BCUiz4.mft (raw, json)
Hash identifier: f7OjpKLccAe52xanPuaKo+ugTpy+U0ePkUEPvdwkuzo=
Subject key identifier: AD:AC:FB:27:C5:C5:BF:44:F2:E6:2A:9D:09:F7:82:59:83:A5:A8:43
Authority key identifier: 84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
Certificate issuer: /CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Certificate serial: 0196BFA5D36F88A837AA2AC577AE1A0149C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
Manifest number: 1504
Signing time: Sun 11 May 2025 14:00:37 +0000
Manifest this update: Sun 11 May 2025 14:00:37 +0000
Manifest next update: Mon 12 May 2025 14:00:37 +0000
Files and hashes: 1: hA6dA48bwAXzsJxdyoIK2BCUiz4.crl (hash: 8L8Fj+1rCAW68HdNl+xO9tq3lGVVWQ9zFrLLGkAOVX0=)
2: t2I34y0ofKpembvBe1b_-CyvIM8.roa (hash: mSrCvo09CP/j+cfORar+o3HK77VwUvlajzCQ530vifA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:d3:6f:88:a8:37:aa:2a:c5:77:ae:1a:01:49:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=840e9d038f1bc005f3b09c5dca820ad810948b3e
Validity
Not Before: May 11 14:00:37 2025 GMT
Not After : May 12 14:00:37 2025 GMT
Subject: CN=adacfb27c5c5bf44f2e62a9d09f7825983a5a843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:33:8a:d3:24:36:a7:61:32:54:d4:cf:63:
70:51:2a:e9:6a:da:c9:1f:fa:b4:95:bf:c2:6e:39:
8a:3d:ca:d3:a0:75:56:e7:9b:1a:c0:77:76:28:93:
74:50:ee:aa:e1:04:1c:d2:3c:63:61:3a:87:f5:c5:
e1:43:11:41:42:b0:90:60:38:4d:39:30:da:ed:07:
02:28:ea:a9:93:ea:07:2a:b7:5c:fc:bc:d5:c2:be:
69:ad:4d:d5:b0:ec:5f:fc:a0:08:23:38:c0:ad:4a:
ef:94:e6:1f:a4:86:31:0c:73:61:22:0c:ae:b7:e1:
75:b3:c7:63:b8:67:07:bb:3d:b1:e3:fb:4b:61:4b:
64:56:79:94:ea:e2:90:78:6e:6a:66:5e:ab:27:b7:
d0:de:55:4b:07:a3:c0:ce:00:8a:00:e6:0b:21:6b:
32:52:ba:cd:27:f7:e1:e0:a6:79:ac:e0:e5:9c:01:
e9:ac:1c:b0:43:b6:d1:e8:39:fa:37:dc:c7:5b:97:
e6:32:db:b6:55:a4:c9:f2:7f:c3:d9:53:cf:b8:12:
3d:79:e3:c2:18:b4:46:ca:02:43:2f:17:1b:7e:a4:
56:3b:17:ee:25:da:f9:ec:e7:48:ea:4f:16:89:4c:
1c:e1:64:cb:c1:08:3f:fc:1c:4a:4e:5f:18:09:b3:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AC:FB:27:C5:C5:BF:44:F2:E6:2A:9D:09:F7:82:59:83:A5:A8:43
X509v3 Authority Key Identifier:
keyid:84:0E:9D:03:8F:1B:C0:05:F3:B0:9C:5D:CA:82:0A:D8:10:94:8B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hA6dA48bwAXzsJxdyoIK2BCUiz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2f380d-843f-42e2-8fb3-ce9e1b82967d/1/hA6dA48bwAXzsJxdyoIK2BCUiz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:25:4f:0d:f0:56:8f:68:87:12:90:c8:50:34:6b:8a:d0:31:
b0:f9:5e:92:12:2d:f6:59:a8:bf:65:0e:59:b1:55:48:5d:77:
6f:a9:af:26:b2:08:70:44:04:7f:8b:b4:f4:11:4f:0a:50:0c:
f8:4e:a1:9b:6d:e5:f9:18:68:04:76:ad:fb:50:e4:5b:04:a3:
7f:fc:1f:9b:fe:b4:62:7a:42:27:56:78:ca:b3:f3:08:56:3a:
0a:85:93:61:9d:24:5a:22:e9:2a:76:39:63:64:7c:a5:45:28:
a5:36:69:16:50:de:bb:fb:ca:8d:19:71:34:75:3e:7f:ef:1d:
ce:f9:5a:16:1e:8f:a0:09:a7:de:ca:fe:e8:c8:17:c3:c6:7f:
d1:e2:92:05:ea:2b:2e:a1:7a:3d:76:c8:fd:03:61:30:5d:56:
e0:09:05:a3:0a:ad:16:05:84:d6:bc:46:1d:53:45:9d:19:8d:
70:be:37:cc:0f:e9:4e:55:a0:db:b5:2b:03:21:5f:20:e2:03:
ce:81:fd:37:5b:45:41:ea:e2:66:7f:3c:4d:ba:83:84:8f:c8:
65:dc:4f:a7:51:75:46:d3:d2:44:bc:5d:8e:97:5f:9a:3b:09:
15:0d:5f:bc:b0:98:27:44:4e:1a:dc:3f:6f:6a:bf:46:7a:1f:
65:ba:5c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:00:21 2025 by rpki-client