Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: qZFBwO6I2/lqm18laZY9JXKXNJRxFVCbM0EPeFnuI9I=
Subject key identifier: 99:63:C1:C4:12:0A:4C:E1:ED:06:11:8D:76:38:15:70:ED:02:6C:0A
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 0196C871B33EC9C4D5B4AC6999304B414D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0CCA
Signing time: Tue 13 May 2025 07:00:16 +0000
Manifest this update: Tue 13 May 2025 07:00:16 +0000
Manifest next update: Wed 14 May 2025 07:00:16 +0000
Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: gK21mqt8rkolbMsuiSLOx6umt1GlM9mtK174zO0X2HY=)
2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:b3:3e:c9:c4:d5:b4:ac:69:99:30:4b:41:4d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: May 13 07:00:16 2025 GMT
Not After : May 14 07:00:16 2025 GMT
Subject: CN=9963c1c4120a4ce1ed06118d76381570ed026c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ab:7f:bc:75:7b:73:49:d2:5e:4f:82:7f:4f:
f1:24:a4:92:11:04:17:13:ea:eb:bd:92:5c:69:9e:
bb:aa:0a:5c:33:7d:71:43:36:62:e7:2f:4c:47:e3:
11:82:07:e4:04:2a:5e:02:2d:56:ce:c0:75:c7:91:
fd:43:1e:75:d8:56:a2:ad:40:11:8e:23:24:d4:b0:
38:66:c4:bd:53:0b:49:0d:17:d7:51:eb:1a:06:6b:
76:05:10:b6:d5:4e:59:ee:fc:6b:01:a7:9f:df:98:
69:56:da:3f:40:1b:93:67:40:c0:ce:8f:38:df:32:
39:a9:b1:eb:b0:ba:47:20:1f:18:5a:1d:6e:ce:ef:
04:16:c5:91:e8:df:58:44:68:35:01:c6:58:ff:6c:
2e:66:dd:53:94:4e:ca:b2:fa:86:1d:41:93:83:7e:
24:52:2e:e7:7b:5d:ac:a4:c5:8a:db:82:f1:9c:a2:
f3:8d:b1:ff:e0:4b:67:1f:2a:04:2d:2e:99:dd:41:
5d:12:bd:1b:a2:63:d1:12:3e:86:99:4e:56:d7:48:
40:ce:a9:84:5c:85:84:6a:ca:e8:b3:6e:f7:19:ad:
90:e7:be:d8:c4:4a:f5:72:94:26:ea:96:0a:4e:11:
ea:34:5a:52:78:b3:1f:b1:85:f8:46:2a:a9:68:15:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:C1:C4:12:0A:4C:E1:ED:06:11:8D:76:38:15:70:ED:02:6C:0A
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c9:00:28:b0:50:c7:c4:81:f0:fd:75:ab:fe:60:7e:fd:e7:
35:61:19:d9:be:3d:17:ca:d2:64:41:6c:3c:1a:a4:08:64:d6:
91:f0:6d:cd:73:eb:c9:db:c5:99:aa:a1:24:8c:a5:2f:86:28:
34:f5:5b:7f:29:49:e6:cf:6b:d3:19:40:d7:48:d4:6a:eb:1f:
1f:15:3f:00:72:01:8c:b6:86:9f:5e:5d:29:25:74:a8:91:f1:
9d:09:dd:82:5e:64:24:80:37:52:fb:ef:ac:d3:06:5e:2b:10:
6a:ba:78:19:61:72:6c:32:a8:17:f1:93:d6:f5:1a:05:55:4d:
24:c8:0c:98:70:eb:51:7f:0f:6c:3d:64:d5:21:df:eb:32:73:
36:a8:84:08:b2:13:e3:89:3e:4e:09:c5:d4:2d:53:62:63:8e:
a2:72:18:f8:0c:97:a9:a3:5c:51:85:21:6e:0b:43:c4:11:af:
da:3f:63:6b:e7:9c:d8:39:9e:bf:06:57:85:41:58:b2:a2:6c:
73:3e:9b:18:f8:be:30:55:b1:41:9b:87:d3:2b:5a:06:db:57:
32:ed:d6:6c:9f:da:03:fe:10:ec:a9:5c:e6:ca:1f:5e:61:74:
7a:7d:74:6f:43:6b:c2:1d:06:8e:53:46:a3:94:5c:0d:4f:70:
72:65:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:09:09 2025 by rpki-client