Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File: hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier: emgc6NQmExbwTx2WH9wvljx4eIOBlrMNM808vnMdbdo=
Subject key identifier: 9E:3E:1B:6C:21:EC:9D:C5:AF:9C:7E:96:21:E8:A6:F4:36:B3:E9:8B
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer: /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial: 0196C15D074DA885247650D128FEDDA5A63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number: 0E7E
Signing time: Sun 11 May 2025 22:00:21 +0000
Manifest this update: Sun 11 May 2025 22:00:21 +0000
Manifest next update: Mon 12 May 2025 22:00:21 +0000
Files and hashes: 1: Zj9lVIh8knr06HL6M68exsdyR78.roa (hash: DpNM17SY3ZBbdFnRbmny2u5MR4zgFSyDbmfcX50gqPI=)
2: bY5mkAJO0t1esNNj9cEpQ4nzKkc.roa (hash: z13XZYVRnwVPeNhKWRhYmONg5auw0wvV41lj3Dj2Gf8=)
3: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: q3da1ODS5qyNgF7Hj2e6SeJ0ht0Oek2+ZEQReD8XoxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:07:4d:a8:85:24:76:50:d1:28:fe:dd:a5:a6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
Validity
Not Before: May 11 22:00:21 2025 GMT
Not After : May 12 22:00:21 2025 GMT
Subject: CN=9e3e1b6c21ec9dc5af9c7e9621e8a6f436b3e98b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:a6:20:6d:d5:b9:46:b4:18:cc:6c:d1:85:
d5:4f:9d:f0:56:a7:bc:64:e7:d0:9e:5e:68:90:80:
6a:b2:1e:bc:8e:b8:77:0e:18:14:7e:5b:03:a0:56:
e6:b9:eb:54:c4:66:c9:5e:fe:12:58:31:d3:ac:0b:
de:99:23:fc:10:95:fc:42:75:f4:31:95:eb:6d:36:
01:d3:9b:29:30:22:64:e6:e8:3d:08:1e:75:ec:4c:
f0:34:0b:50:3c:66:86:54:11:b1:5f:a0:dc:fd:c5:
2c:29:75:5a:94:7e:ad:1a:83:b6:e1:83:80:ab:cb:
2d:07:67:5d:df:de:cf:6c:1d:6a:c5:6f:8d:19:43:
d9:ae:07:6c:80:ea:35:52:15:2e:f3:e0:8f:61:2f:
b2:f6:56:14:f1:84:aa:d6:6e:76:f1:7a:04:5f:2a:
6a:bd:6b:fd:a2:52:97:8b:a7:49:30:d5:d4:0b:49:
da:99:9c:f1:6e:98:b7:86:66:5e:4a:32:d1:17:72:
83:4e:56:49:79:0b:4f:62:30:9e:17:7a:9f:56:7d:
7e:60:07:20:13:0e:e0:af:2f:b1:0b:76:9f:72:78:
fc:87:72:9b:29:c4:5b:00:d0:66:70:85:fd:2e:7e:
11:97:7c:56:00:7b:a1:65:7e:46:d4:90:b7:fe:10:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:1B:6C:21:EC:9D:C5:AF:9C:7E:96:21:E8:A6:F4:36:B3:E9:8B
X509v3 Authority Key Identifier:
keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d5:aa:9d:9d:4a:5d:c7:b5:77:c9:6d:f6:2c:24:6a:69:1e:
24:41:8a:30:ee:83:bd:69:3a:9a:1d:71:bd:ef:2b:4b:dc:ba:
ce:e9:4e:02:67:7b:20:fa:44:c3:49:ef:94:c5:80:04:61:2f:
4c:89:63:aa:a8:c4:f3:77:dc:de:97:49:43:97:e1:44:7c:06:
72:d9:40:7d:78:b8:38:d2:8f:e7:83:1d:9d:95:61:6f:24:a7:
f8:a8:d4:d2:9d:5a:31:21:a2:ea:2a:e1:46:45:db:4f:23:70:
45:a4:7f:56:9f:24:c2:cd:88:37:85:bf:23:e9:e1:f7:2f:e6:
fb:6d:d9:f7:3e:01:6e:27:2e:5e:b2:27:27:dc:e9:9c:3c:51:
5b:96:66:a0:77:7d:9d:b8:e5:df:d4:e5:45:5a:f7:f0:56:a1:
03:85:5d:c8:82:e3:5b:a9:5e:cb:c0:d5:56:3a:e5:9b:ee:4c:
f1:25:33:e0:1c:87:ca:bc:49:e6:bf:df:14:75:c6:9b:8b:a0:
13:32:8c:7c:bb:fd:7a:eb:bb:6b:ce:fe:a4:bf:c4:70:95:e5:
ad:aa:26:35:9e:97:45:af:e0:2a:f3:7d:db:9c:f8:63:cd:71:
32:b2:bb:a2:be:51:58:f8:e9:d3:c7:a8:7b:f7:38:ca:f7:27:
04:b1:84:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:57:05 2025 by rpki-client