Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json)
Hash identifier: U4WfWYiF799Bdy8dUvYCdb921GRfF6QROAS5iPprFrU=
Subject key identifier: 2F:E7:AF:B2:5A:38:EE:D3:1A:71:3C:C3:44:9B:1E:21:80:AD:EF:45
Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Certificate serial: 0196A842B26D1E81F1DB21F35E78BD70B92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
Manifest number: 0A4B
Signing time: Wed 07 May 2025 01:01:05 +0000
Manifest this update: Wed 07 May 2025 01:01:05 +0000
Manifest next update: Thu 08 May 2025 01:01:05 +0000
Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: qnx6v8j9/DkmH3lBtEjyGzEp6n9WNpT2w6RWWdNOzG0=)
2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:b2:6d:1e:81:f1:db:21:f3:5e:78:bd:70:b9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0
Validity
Not Before: May 7 01:01:05 2025 GMT
Not After : May 8 01:01:05 2025 GMT
Subject: CN=2fe7afb25a38eed31a713cc3449b1e2180adef45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:3a:7f:eb:4b:37:86:46:21:09:08:4b:27:
e1:7d:65:ac:2c:f6:6d:2c:cd:70:b1:94:24:92:96:
bf:8d:a4:7c:75:c8:63:68:f9:0e:89:ac:28:f8:e6:
ed:45:21:4d:35:8e:41:38:d3:64:15:3c:81:fc:a5:
d1:13:b6:cd:e8:6a:4b:66:61:e1:a9:72:57:8c:93:
01:0f:f0:3e:f0:3d:b1:d4:b4:f6:28:e9:1a:c3:43:
28:ad:9e:4f:28:39:d2:f0:e1:20:db:2b:92:aa:3f:
b1:b1:e8:6c:05:a3:eb:b6:de:cf:f6:f3:0d:2a:fb:
70:59:b9:27:b7:a0:ba:59:be:21:de:d0:a4:96:b6:
65:c1:ac:2c:bc:5a:1f:42:c8:de:f1:b1:01:47:dd:
de:c5:1f:52:82:7a:6a:3a:13:28:22:92:5e:f0:ea:
83:7c:5c:5a:1a:7d:80:b5:74:bb:cd:a8:7c:43:2e:
67:f9:8c:5e:84:97:e7:5d:a4:45:e8:d6:06:ac:95:
4e:56:5a:cd:f2:16:4e:33:a6:35:cf:e7:1c:15:e9:
a0:0b:ea:1a:30:39:23:f2:b3:b0:14:bd:7f:58:d5:
a7:87:4d:15:47:fc:81:cb:b5:2a:8f:a7:ef:8f:cb:
e0:b0:36:d9:f2:e4:09:a1:eb:87:cd:f5:63:e9:5a:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E7:AF:B2:5A:38:EE:D3:1A:71:3C:C3:44:9B:1E:21:80:AD:EF:45
X509v3 Authority Key Identifier:
keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ec:3b:0e:56:ec:f9:87:9d:bf:54:e2:2d:05:db:a2:c3:da:
5c:87:0a:53:d7:fc:02:51:41:0f:a3:e2:26:cd:1e:31:18:fc:
70:8f:e1:65:5f:a0:bd:0e:e7:ff:91:e9:f7:81:14:d5:f8:1c:
59:78:9c:ba:65:65:2e:4e:5d:86:91:25:52:a3:43:fe:1b:33:
34:67:01:6d:94:a2:22:cb:29:c8:45:d4:39:56:1f:c9:62:8d:
34:d4:a7:ac:88:e0:35:67:98:ad:78:a2:35:39:d5:93:df:d1:
a1:55:6a:82:4a:fe:59:f3:0e:bd:1e:0e:27:c2:64:62:0a:99:
3b:4e:78:91:40:51:5a:5a:51:9d:54:40:2c:f1:d5:1c:0d:97:
53:70:fb:f5:5c:8f:56:a4:b8:3e:fc:20:c0:a1:30:0e:a4:ff:
37:65:80:73:71:90:a8:99:36:e1:ec:08:9d:da:c9:2a:f8:0d:
49:c3:5f:c8:39:9c:42:29:ce:9a:e7:ae:0e:cb:08:1e:8b:29:
f6:e3:d1:ff:61:73:6c:fa:8b:d7:d1:1d:0e:05:b0:0c:fb:34:
59:c5:b0:73:a6:e6:47:3e:9b:a2:66:b9:ac:ea:2d:be:b1:13:
6b:21:94:33:83:bb:6f:5d:d1:b9:3a:e3:25:af:0c:71:6d:85:
bf:35:5d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:02:09 2025 by rpki-client