Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
File: hH0b6-TCPEIXuE9_2BkqslVUFag.mft (raw, json)
Hash identifier: WSi6QkpwCK4fkj7JG8Ywa3jy2VrvtKvVIpZ07pxxtYI=
Subject key identifier: D9:17:0C:4C:26:86:EF:4E:B4:B6:68:50:E0:FD:7E:3C:70:56:EB:A7
Authority key identifier: 84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
Certificate issuer: /CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Certificate serial: 0196B333A9E453F47FB8DC59AE1BDB43A74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
Manifest number: 13C2
Signing time: Fri 09 May 2025 04:00:29 +0000
Manifest this update: Fri 09 May 2025 04:00:29 +0000
Manifest next update: Sat 10 May 2025 04:00:29 +0000
Files and hashes: 1: PAjoOsQf0RmmoZA6UENFacJ4ClY.roa (hash: ZTPqKop0ZcVt0foxrf1KsXpnvWpYw7IeU4H32JK9XIU=)
2: hH0b6-TCPEIXuE9_2BkqslVUFag.crl (hash: iSUCe436yUM2vesPkwfh1NPIqlgDFqrI4JLrZI/YvH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:a9:e4:53:f4:7f:b8:dc:59:ae:1b:db:43:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=847d1bebe4c23c4217b84f7fd8192ab2555415a8
Validity
Not Before: May 9 04:00:29 2025 GMT
Not After : May 10 04:00:29 2025 GMT
Subject: CN=d9170c4c2686ef4eb4b66850e0fd7e3c7056eba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:f0:c1:48:80:38:ea:f8:25:40:83:34:67:
94:2b:3d:db:db:5d:28:a4:d7:a9:a8:f2:7b:89:b0:
24:aa:71:34:0b:56:95:71:60:c5:18:9a:84:18:6d:
0b:b4:5d:e3:fe:a7:6d:0c:41:cd:59:b1:83:f1:f6:
5a:d3:7a:c4:49:f4:3c:08:f6:ae:de:fd:73:34:8a:
4b:78:26:13:99:cd:ac:4c:21:01:b5:b8:e2:85:91:
79:a0:8d:e2:a6:0b:9e:73:f6:33:05:fd:b0:d1:1e:
38:c9:91:97:a8:53:ef:5c:26:d2:58:ee:38:93:54:
6e:7d:f9:66:f1:af:ee:68:2a:0c:9d:7c:f5:f2:00:
ce:91:71:07:b1:e4:5a:4f:06:d3:2a:3a:24:1b:01:
3b:ea:38:40:cb:c6:77:3c:7a:2a:81:59:6c:3e:93:
10:d1:ef:f0:14:d6:a3:4e:fa:fe:56:4f:c4:93:1b:
30:d6:73:9d:ff:ac:20:a1:4b:c1:d0:d5:48:73:c5:
e6:08:8c:f7:3d:f1:9a:43:2b:e4:ce:4c:a0:c6:d3:
ac:ad:a1:f8:e7:a0:f8:80:ff:17:63:da:8e:17:4a:
0c:a9:3e:68:0b:b0:30:fb:eb:9b:16:8d:7e:9e:dc:
21:46:ac:d7:cc:73:85:0d:d2:20:35:be:1e:c6:83:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:0C:4C:26:86:EF:4E:B4:B6:68:50:E0:FD:7E:3C:70:56:EB:A7
X509v3 Authority Key Identifier:
keyid:84:7D:1B:EB:E4:C2:3C:42:17:B8:4F:7F:D8:19:2A:B2:55:54:15:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hH0b6-TCPEIXuE9_2BkqslVUFag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f81eab-bc36-42a6-822a-cdb1d38556bb/1/hH0b6-TCPEIXuE9_2BkqslVUFag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:db:fd:5b:e9:ea:9f:c8:70:0f:7c:56:3a:10:27:74:b9:87:
36:bb:89:db:b3:86:c3:8d:e3:f0:c8:36:e5:b1:68:8e:52:58:
a3:dc:23:bb:a3:e4:e3:3b:a8:34:72:25:cd:85:93:69:b5:c0:
7e:0c:23:ac:f4:d1:b3:5b:56:32:16:bb:9d:e5:1c:54:92:83:
6a:40:a3:88:8e:0b:32:37:2a:3e:37:36:db:4b:e9:17:59:f1:
ce:13:d4:a0:e2:e7:ed:cc:36:33:c2:b4:16:e7:14:c0:7f:b8:
70:00:60:23:37:0b:2a:83:23:ea:05:14:08:19:f1:b4:ef:6c:
ce:2e:1c:d1:a8:ad:01:bf:65:fd:48:c5:02:51:a8:e5:c6:b1:
4c:24:f0:06:64:b5:50:6b:1b:6a:99:84:f2:95:21:e8:1b:5d:
db:80:a4:e1:4b:46:32:91:fa:65:a7:5b:51:50:e2:85:a3:ce:
88:0b:42:3e:f9:ec:6c:d7:63:07:75:89:dd:78:b3:31:d2:45:
e9:11:2c:6a:61:97:48:57:a4:18:cf:0f:01:43:d0:31:36:8f:
21:6e:05:31:ab:fd:6f:9b:81:65:76:01:6f:bb:b6:b6:c3:2d:
34:54:74:1d:3e:3e:b9:9f:f4:0a:a8:4c:38:05:c4:c8:33:58:
0e:79:6a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:06:30 2025 by rpki-client