Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier: W42GsGm37bnOW0PaeBxpyjCvmqw7yiry7Veg9fcwq4E=
Subject key identifier: AB:FD:C5:32:4E:DF:79:68:7A:A9:5B:5D:07:9D:22:EE:98:44:5A:5F
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial: 0196D7E4F38968E425930BC02ECC94CA2D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number: 0ED1
Signing time: Fri 16 May 2025 07:00:28 +0000
Manifest this update: Fri 16 May 2025 07:00:28 +0000
Manifest next update: Sat 17 May 2025 07:00:28 +0000
Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: hiKaW2AZhoQn3uqaI2KM6bj7af0xLylgD2S8q+/B6gk=)
2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:e4:f3:89:68:e4:25:93:0b:c0:2e:cc:94:ca:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Validity
Not Before: May 16 07:00:28 2025 GMT
Not After : May 17 07:00:28 2025 GMT
Subject: CN=abfdc5324edf79687aa95b5d079d22ee98445a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:b2:48:b8:72:b6:f2:cd:12:70:61:59:d5:
bc:6b:d1:63:95:71:59:92:e7:e0:bf:87:5c:6a:3f:
c8:0d:1b:74:b8:4b:75:0c:33:97:79:bd:81:63:43:
94:8a:f2:2d:32:4b:c9:c3:b0:36:21:5c:9e:93:94:
b5:2b:f4:80:51:02:e5:16:b2:e8:7d:9f:be:61:fa:
c8:86:36:21:34:d7:cf:2f:df:0a:36:4c:71:ba:04:
20:30:18:6f:5e:10:50:8b:74:e4:da:f8:9d:de:50:
6d:e2:65:5c:d4:17:06:88:4f:ce:11:d1:25:a1:34:
ff:7d:0c:ab:22:5b:bc:84:8c:cc:69:8f:02:64:7c:
2f:3a:66:85:7c:60:1e:36:d8:49:33:7e:46:10:cb:
06:25:af:b3:ce:a0:ab:f2:c6:e7:8e:a4:6b:ae:ff:
90:44:58:6a:2a:0f:da:2e:a9:05:47:1e:17:30:48:
81:25:2e:5f:0b:a1:ff:16:52:89:73:a4:62:98:5d:
60:19:60:ef:71:b2:46:bf:2b:aa:f8:68:3a:3e:d7:
c7:2d:5c:66:da:c2:1f:0f:16:0b:fc:9b:f2:3e:29:
a3:f5:56:78:7b:6d:f9:0b:b4:f8:b7:a1:2e:61:c1:
15:5b:4a:f9:b5:4c:d1:e2:51:98:ce:6f:ed:b2:88:
84:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:C5:32:4E:DF:79:68:7A:A9:5B:5D:07:9D:22:EE:98:44:5A:5F
X509v3 Authority Key Identifier:
keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c0:1b:62:a4:80:e0:ee:9b:69:de:63:a4:74:4c:24:1c:6b:
d2:bd:f5:8b:e0:4f:e6:64:eb:32:7a:d3:3c:6e:8d:b4:25:5d:
a1:7f:f9:3d:ef:a2:22:d2:12:c7:07:2b:32:f0:d4:47:12:7b:
1f:f5:d9:f8:76:c0:c6:a0:54:19:64:fb:2e:ea:fb:ea:c0:aa:
b8:e0:39:f7:56:e9:96:a0:5f:76:a1:42:f3:3b:24:ea:b5:3b:
21:46:c0:4a:33:6f:0b:47:e4:64:d5:cf:f4:57:6e:e6:ea:c4:
28:c2:b8:d2:c2:0c:25:c9:44:76:87:b3:79:1d:87:77:1c:9d:
d5:05:98:09:a7:62:93:26:ef:94:11:55:68:0f:72:09:54:ea:
ca:ef:8f:b2:5b:0b:14:78:98:95:d5:0b:95:f1:16:87:be:0f:
eb:0b:7d:5c:c2:c9:87:ad:c8:a0:91:48:96:07:13:20:6d:a8:
4d:cf:ed:2f:57:11:10:0c:7c:e9:57:6e:5a:0b:58:7a:ff:88:
b8:1b:22:4b:4d:33:cb:eb:2c:fe:83:31:4a:ca:e4:43:f6:bf:
ef:26:e1:cf:b8:c0:a8:05:99:45:02:26:eb:7a:f7:65:78:95:
a3:9b:3a:ed:37:32:05:2e:41:c5:10:8e:2c:1b:71:0e:2d:09:
87:22:1e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 09:48:22 2025 by rpki-client