Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
File: hPLOccb_zodWDVZe5czaMeAbnBU.mft (raw, json)
Hash identifier: I6KO7NjT6nBZItAgaqCOsOhWl1gq0/hELjeIVo8GFbs=
Subject key identifier: E8:F0:4C:CC:5D:9A:C6:EF:62:95:FF:EC:86:A7:6E:6A:78:39:70:5E
Authority key identifier: 84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
Certificate issuer: /CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Certificate serial: 01969D8749DF412C413AF8C3A12F14D54A2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
Manifest number: 104F
Signing time: Sun 04 May 2025 23:00:11 +0000
Manifest this update: Sun 04 May 2025 23:00:11 +0000
Manifest next update: Mon 05 May 2025 23:00:11 +0000
Files and hashes: 1: IDSoal-WPRQg2kggJnZlgyY7mtI.roa (hash: juWvqJns3UfT6SO2SE3jBpIvpwCfu+sMyWgDyL3Cs3I=)
2: hPLOccb_zodWDVZe5czaMeAbnBU.crl (hash: FTKOeH/HqvGIZDdL1QemXcXQpJEj+ueA19ovMEE7RRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:49:df:41:2c:41:3a:f8:c3:a1:2f:14:d5:4a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f2ce71c6ffce87560d565ee5ccda31e01b9c15
Validity
Not Before: May 4 23:00:11 2025 GMT
Not After : May 5 23:00:11 2025 GMT
Subject: CN=e8f04ccc5d9ac6ef6295ffec86a76e6a7839705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:f2:fc:29:e7:fe:a5:18:27:1a:38:11:21:
f8:4a:09:98:33:ac:02:94:fe:45:39:7f:8f:4f:c1:
db:3e:a9:73:9e:54:04:0d:8b:28:df:4f:5a:84:a0:
3f:51:71:59:cb:f3:45:e7:a8:b5:33:70:8c:a7:e9:
26:40:2b:04:7d:70:4d:8c:d6:b8:49:96:46:fa:ba:
ce:33:b2:99:2b:51:d3:af:d0:cd:32:07:cf:d6:33:
0b:a1:6d:e9:2a:e9:2c:a5:4a:e5:ad:0b:51:d3:13:
b2:26:79:e3:17:3b:5a:ef:f0:52:5a:f3:72:07:18:
35:11:c3:0a:be:44:da:94:02:c3:6b:e7:85:c4:97:
94:8c:61:b2:20:e1:e4:c5:e7:34:49:95:c2:f8:88:
33:43:9d:cd:c1:e5:cd:5e:dc:5b:20:02:a4:41:13:
aa:10:02:c7:36:31:33:38:dd:59:a7:83:95:f3:9b:
92:20:24:99:28:20:cf:48:24:9b:61:1e:67:e4:13:
ce:28:11:c4:10:e5:3f:be:92:23:15:42:24:5c:fe:
d5:cd:9e:4b:6e:b3:da:5d:cd:03:72:33:ce:29:3b:
0b:b3:c9:d7:6c:34:de:88:3e:44:81:5b:43:a6:0b:
f6:99:ca:bd:0a:e7:48:dc:bc:56:8f:63:ad:c8:42:
ab:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F0:4C:CC:5D:9A:C6:EF:62:95:FF:EC:86:A7:6E:6A:78:39:70:5E
X509v3 Authority Key Identifier:
keyid:84:F2:CE:71:C6:FF:CE:87:56:0D:56:5E:E5:CC:DA:31:E0:1B:9C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPLOccb_zodWDVZe5czaMeAbnBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2ac980-2259-46fd-a428-7b98c7462a7e/1/hPLOccb_zodWDVZe5czaMeAbnBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4e:31:4b:d5:72:48:30:74:b0:a3:6d:16:e5:30:9b:93:a3:
95:be:39:02:f2:67:74:f8:f3:d6:5f:ba:c5:43:fe:54:69:d9:
f6:65:9a:24:8a:76:e2:76:cb:f3:3a:0f:19:97:0a:95:ac:b5:
3a:fe:f1:38:57:d2:90:e9:9b:5a:b0:ba:fa:6b:ca:56:db:d3:
3a:c4:30:e9:4c:ce:05:6a:dd:6c:c1:3c:4e:0b:6a:53:b3:67:
f4:1a:72:92:92:34:b1:59:fc:f6:56:aa:56:41:3b:18:93:cb:
65:85:dc:5a:0f:7f:73:a3:44:c2:e2:fa:44:8c:1f:06:cb:45:
0e:1e:1e:2c:ba:10:b3:5d:d8:20:cc:cb:f1:4d:be:fb:98:f0:
06:19:57:42:dd:73:98:94:36:00:a1:cf:22:a4:86:d6:d6:72:
b6:c8:84:05:cd:f3:33:93:b1:22:10:ed:a0:54:c8:1a:78:98:
61:f7:8e:34:57:32:f4:48:8d:0f:f7:5a:f2:52:68:e1:a4:c8:
13:6d:8f:78:e0:d8:79:d8:b3:c4:5b:a2:c1:01:57:b3:7c:df:
db:c7:f4:f6:e0:85:64:a0:ed:c6:2e:50:50:9b:23:d0:0d:a2:
a1:bf:2d:6a:5f:79:78:0e:23:c7:d3:5e:3c:98:da:1e:25:02:
71:1b:18:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:45:27 2025 by rpki-client