Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
File: rHZwaYz67yZH-8mgb3OAhW4rMCc.mft (raw, json)
Hash identifier: 6JA4Nn0BD7MOiIynGZPlWOyPXHvsbVCjrUiP51rs9KE=
Subject key identifier: 64:F2:C1:F0:20:84:44:4A:F8:A4:04:D4:7C:A3:AC:D4:CE:E7:9A:05
Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Certificate serial: 0196C0B890AA2B83C35DDB5819B59E49E707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
Manifest number: 0F39
Signing time: Sun 11 May 2025 19:00:43 +0000
Manifest this update: Sun 11 May 2025 19:00:43 +0000
Manifest next update: Mon 12 May 2025 19:00:43 +0000
Files and hashes: 1: JQTWtShPwGEwVFU8i8E82c7erRQ.roa (hash: AWyFT4kOA1zNKVFniNaOQlkLDIns54LN+qDhlyph/BU=)
2: WVdl-uCV2iOAd5QeDrWIMC8ZaZo.roa (hash: CehMTtzEG7E3qCdiNMcnQ4ftqXLEiDLiNKB1gOKsgck=)
3: nc7DP5U-Jl22CsJJw2phARU5j0c.roa (hash: rdcrf8/30vk8VHZdwnISLBUlsokPeOe7cBYMpoPH+B8=)
4: rHZwaYz67yZH-8mgb3OAhW4rMCc.crl (hash: 6Ipn2T/pEggtnAeSTK5/U9YJY4PxlZfbfViNO8+vlng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:90:aa:2b:83:c3:5d:db:58:19:b5:9e:49:e7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027
Validity
Not Before: May 11 19:00:43 2025 GMT
Not After : May 12 19:00:43 2025 GMT
Subject: CN=64f2c1f02084444af8a404d47ca3acd4cee79a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:2d:d1:1b:6b:af:2c:32:c0:59:1d:ea:62:
40:b6:39:3b:4d:5f:a2:a3:9d:36:9b:6b:06:5e:22:
71:af:a0:5e:b6:c8:61:90:8c:be:11:c3:ee:bf:83:
8a:91:59:f4:61:22:57:e4:29:3e:f9:7e:5b:95:d3:
bc:9f:d6:0d:5d:da:79:53:ba:48:55:f4:2e:8a:57:
f7:41:8c:53:fc:64:80:b5:9f:8e:0b:cb:88:5e:78:
e8:2e:70:a9:33:07:2a:6c:68:a4:d4:80:a2:e5:75:
8e:ad:f8:1e:dd:cf:f5:26:36:27:9c:6d:e1:b5:c8:
8b:f1:c7:80:2b:f6:87:5d:ba:c5:c0:a0:32:9a:66:
9c:1f:c6:aa:eb:06:c7:b3:55:7a:2a:14:a5:8f:52:
ca:9e:7e:f9:9e:12:75:15:0b:9e:31:11:95:e0:65:
a9:75:ee:b5:43:36:98:d3:45:f4:fc:b2:4d:17:d6:
4a:db:d1:f9:d7:3e:bf:92:d4:e1:4d:86:51:94:bb:
be:91:f6:8a:bc:a1:ba:a3:73:d2:1b:de:4a:dc:13:
31:09:c3:4f:f4:ce:72:47:0e:9d:88:a8:87:0e:b6:
ab:b5:b6:27:1e:a1:fa:6c:84:f1:e3:a2:6d:15:ff:
db:f7:18:77:f1:72:56:9d:4a:77:d5:cb:02:21:7d:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:C1:F0:20:84:44:4A:F8:A4:04:D4:7C:A3:AC:D4:CE:E7:9A:05
X509v3 Authority Key Identifier:
keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:1d:a9:59:67:6a:f5:61:b0:0b:15:70:cb:e3:c1:d9:ea:ec:
5d:a6:f9:4e:38:11:53:03:33:3d:1c:a3:61:b4:2a:ec:af:31:
84:4f:a8:1f:14:e3:a6:e8:5c:81:24:b5:cb:c0:b5:53:98:8b:
d7:4e:41:b6:11:50:18:cd:a3:e6:c6:8c:25:67:bb:af:7b:03:
5a:35:de:30:08:20:88:e3:db:09:19:14:2f:e2:70:b5:e9:e1:
e2:8e:28:08:c9:a3:51:da:de:bb:aa:c9:dd:1b:bc:41:85:ff:
83:a4:e1:8a:2c:27:45:41:1d:59:ea:e0:a2:27:78:74:e3:fe:
67:f7:c2:f1:e5:8a:ab:0d:80:51:26:0e:fa:72:24:bd:35:3e:
25:15:e6:89:b6:35:15:e0:b8:bf:a5:79:ef:5b:54:c2:d2:07:
77:4d:7d:d3:7f:8b:b8:b1:b4:87:49:ab:42:3c:8b:49:73:ba:
d2:55:93:b3:b4:b5:60:90:f1:bf:28:60:98:2d:95:9d:3f:ae:
99:22:bd:9e:d5:d5:52:6b:b7:ba:bc:69:13:df:d1:bc:8d:8b:
fb:bb:62:28:74:eb:bc:d4:59:c5:63:99:87:99:49:94:36:0e:
d3:ea:03:79:30:fa:89:27:5a:ff:cf:43:48:2e:88:03:c0:5b:
2c:fe:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:34:04 2025 by rpki-client