Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
File: hD0a_PE70hF9R99oPkCmMocATP4.mft (raw, json)
Hash identifier: Q2ZzlsrqaWTsXc70Z88x1h9GS7nb4f+m48ImvgxEurs=
Subject key identifier: C9:64:08:7D:9C:04:2F:25:3E:03:C7:1D:BA:59:74:4A:B7:23:85:72
Authority key identifier: 84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
Certificate issuer: /CN=843d1afcf13bd2117d47df683e40a63287004cfe
Certificate serial: 0196BA48B7F7D95F6310A82A8AA0CF3D4EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
Manifest number: 11D8
Signing time: Sat 10 May 2025 13:00:49 +0000
Manifest this update: Sat 10 May 2025 13:00:49 +0000
Manifest next update: Sun 11 May 2025 13:00:49 +0000
Files and hashes: 1: OvE7gVL8MCEWJHKpQXsF4bPe3UM.roa (hash: l4/jaJLOp+Avt+TjQWwkFvtdykblfc3pi7YpMoKQxCI=)
2: gRQ4yCuvseaLE57M9fowKbjZKdc.roa (hash: 2erIoIyPnSV3Zcfsjq1qAurwTSkvBBBTKvIM2MmgiUw=)
3: hD0a_PE70hF9R99oPkCmMocATP4.crl (hash: e3sn4IXR5adQh20rUoyUEMDztkuKcUCyO+ze6RvQh54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:b7:f7:d9:5f:63:10:a8:2a:8a:a0:cf:3d:4e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843d1afcf13bd2117d47df683e40a63287004cfe
Validity
Not Before: May 10 13:00:49 2025 GMT
Not After : May 11 13:00:49 2025 GMT
Subject: CN=c964087d9c042f253e03c71dba59744ab7238572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:25:f2:fe:3e:a2:c8:4a:f7:dd:a3:af:4d:9b:
36:99:56:3d:d1:ca:e0:ec:c6:e6:e5:56:e4:75:09:
88:0e:4f:8f:0f:54:b3:f1:51:15:0f:bc:12:1f:ec:
89:11:3e:66:bd:d3:9e:dd:65:a9:87:bb:cd:21:6b:
be:0e:ad:c5:35:0d:7f:f3:d5:d8:d2:4e:5e:9b:9e:
99:3b:f0:0f:6d:ea:5f:07:8c:70:dc:25:e7:94:ba:
bd:61:83:2f:b8:39:f8:85:df:c6:16:a8:3e:f2:36:
78:12:a6:93:1f:95:a5:54:28:38:31:3c:f5:84:cc:
b5:0a:c0:bf:b6:21:e8:29:c6:89:f7:bb:ab:d6:6b:
84:d6:d0:df:86:c5:6b:36:1c:0c:c0:1a:58:fa:e3:
5a:d4:9b:52:84:e3:cd:9d:a5:8f:58:99:cc:32:ce:
ff:95:7f:ba:5a:7c:04:e9:85:36:dc:88:12:5d:51:
b5:09:74:27:e7:f8:93:25:7f:5f:e1:1e:c7:81:44:
65:9a:8b:cc:fa:8a:98:c6:cf:e7:65:85:a7:45:b2:
65:d7:9b:1d:ad:71:e0:8c:e6:52:d0:a6:26:63:ae:
fc:f6:ae:32:a4:2d:e3:13:fc:ab:f8:07:ef:85:83:
18:c9:91:11:41:55:da:4b:1f:b5:42:39:a9:8f:77:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:08:7D:9C:04:2F:25:3E:03:C7:1D:BA:59:74:4A:B7:23:85:72
X509v3 Authority Key Identifier:
keyid:84:3D:1A:FC:F1:3B:D2:11:7D:47:DF:68:3E:40:A6:32:87:00:4C:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hD0a_PE70hF9R99oPkCmMocATP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/173306-2dbd-4ad8-bd51-b1f3bcc67aae/1/hD0a_PE70hF9R99oPkCmMocATP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2a:03:0d:d0:63:15:a4:c2:15:1c:f7:f9:68:69:4f:cc:3d:
01:1f:47:37:e3:f0:98:fb:52:5f:db:b8:9f:55:43:6f:23:12:
92:8c:d7:4d:25:62:2a:d6:7b:ea:b6:95:6b:89:ea:3b:06:e9:
b8:b6:9b:76:47:be:3c:fa:3b:83:2c:5d:03:eb:9d:da:84:44:
48:c1:e7:3d:cf:cb:f6:75:ce:57:44:e1:d5:e3:61:db:76:be:
55:ee:1c:3e:78:15:f8:91:20:9d:2b:f0:ff:ab:79:ed:66:9f:
b9:24:ee:f8:2f:af:8e:73:54:44:d3:a3:02:4e:75:97:ab:06:
7c:8f:43:99:3c:ae:b0:02:15:a2:06:4c:40:b8:53:dd:7e:35:
f9:29:b7:95:4c:4e:99:54:0c:33:57:29:fb:22:db:2d:51:32:
c3:ac:fe:c1:c7:20:d1:fb:8a:b3:11:e3:ce:4b:89:b7:a0:09:
6d:61:3a:55:96:14:f9:ed:95:11:8e:35:0b:9a:3f:55:2a:40:
2d:87:9b:56:91:9e:e9:6e:4f:58:92:f3:5a:b9:ae:9a:3a:66:
3b:85:bb:11:f0:59:a7:af:82:c4:cd:b3:41:44:34:ca:05:0d:
67:fc:19:a6:47:dd:cf:cc:aa:79:ea:e5:03:c2:fb:e4:1b:50:
8f:45:ac:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:11:49 2025 by rpki-client