Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
File: hSC3fQNbkS_6QG393ynjopY-aQQ.mft (raw, json)
Hash identifier: sVDZQ+8oL3kR2q/anbda/589GBzRiG1cwSefxQwoVJw=
Subject key identifier: 2F:67:92:0B:DC:F8:BA:82:AF:BE:32:6A:53:48:77:71:58:E5:7A:75
Authority key identifier: 85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
Certificate issuer: /CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Certificate serial: 0196C0EF6D2A422BBBC964945227ABC1C5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
Manifest number: 0749
Signing time: Sun 11 May 2025 20:00:38 +0000
Manifest this update: Sun 11 May 2025 20:00:38 +0000
Manifest next update: Mon 12 May 2025 20:00:38 +0000
Files and hashes: 1: GrVfgYYa0s5gLsRQp5P5vAQeHlE.roa (hash: Twu1XyErZ1bzBOtE8/HK3XbggJvMpOYaRXT376BODWE=)
2: XUIGCJfhGsoP5FdVAQmT9lUNYuc.roa (hash: hjmwDLHRKf4c787nov0R6bRVLxtqmM1uwueYf+NK6fU=)
3: hSC3fQNbkS_6QG393ynjopY-aQQ.crl (hash: TXnKVRzqKFZdpshrPdRUIag1xLM6I5AGtSTpClFh0fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:ef:6d:2a:42:2b:bb:c9:64:94:52:27:ab:c1:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8520b77d035b912ffa406dfddf29e3a2963e6904
Validity
Not Before: May 11 20:00:38 2025 GMT
Not After : May 12 20:00:38 2025 GMT
Subject: CN=2f67920bdcf8ba82afbe326a5348777158e57a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:b6:4d:29:87:0c:cf:64:70:e8:93:f8:28:
a6:7c:f5:09:1e:f7:eb:10:c7:5c:e8:75:75:b0:3d:
b4:0f:52:b7:8f:40:20:22:62:35:dc:71:c9:6d:38:
6a:d4:fe:22:f2:aa:f1:d6:7d:17:8f:80:de:22:1b:
0c:83:2c:7a:2d:69:ea:19:b7:7a:3e:28:72:c5:be:
69:4f:64:2d:c9:a1:1f:76:be:09:d2:36:d7:c7:22:
8b:82:32:48:bd:28:14:c8:22:ac:4b:ad:4c:f9:25:
35:c4:59:d7:9f:ca:a3:f4:e9:2c:53:97:7b:5f:f2:
71:13:f1:34:20:a8:6d:52:d8:37:ad:ff:89:ca:7b:
b7:e9:8a:d8:bc:16:98:2e:ec:fc:0f:fb:57:f0:2f:
b2:38:c1:e1:77:d2:65:b5:54:a6:19:13:4f:0a:49:
fa:40:e4:d3:ba:b8:cd:69:76:0f:8d:0c:f2:2e:ba:
05:6e:31:a3:4d:14:d2:01:57:dc:42:d5:e0:a8:d9:
1b:34:d6:5a:13:a1:74:e0:0b:db:1d:47:9d:65:3d:
68:b9:4a:26:ee:85:92:0e:8d:94:13:d0:6a:75:c5:
da:24:4e:64:de:6d:e3:98:f9:b6:94:e4:3e:a2:d3:
5d:7f:3e:bf:bc:bd:a0:4f:0e:c1:29:5a:b9:fb:fc:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:92:0B:DC:F8:BA:82:AF:BE:32:6A:53:48:77:71:58:E5:7A:75
X509v3 Authority Key Identifier:
keyid:85:20:B7:7D:03:5B:91:2F:FA:40:6D:FD:DF:29:E3:A2:96:3E:69:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hSC3fQNbkS_6QG393ynjopY-aQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f04686-359b-4744-b930-1af279625fd0/1/hSC3fQNbkS_6QG393ynjopY-aQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:78:a3:1e:73:68:b2:f5:b1:75:3e:5f:d8:2c:4a:8a:ce:19:
0f:56:4f:99:15:68:0a:8c:0d:48:94:e2:4d:6e:0f:9b:14:f8:
63:2c:03:93:4c:a2:91:04:db:cc:46:d4:27:09:8c:6b:4c:f5:
ad:c2:ad:1a:71:eb:3e:f2:63:6e:ad:91:b1:c1:c4:9a:5b:e7:
74:64:17:d2:0f:b9:4f:33:7e:89:17:76:f6:6e:b6:27:82:15:
c4:4c:a8:0e:ba:b4:28:4b:ed:82:53:29:dc:78:30:7a:88:74:
7f:66:c1:7e:3e:32:0c:6a:66:fb:17:b9:ee:74:39:7b:7f:16:
5c:a9:25:65:67:5e:f2:8a:16:36:01:8f:91:c0:6b:7d:0d:74:
0e:28:d0:06:0c:5b:ec:f4:38:df:9d:bb:62:64:b4:9f:d6:f3:
2d:d1:ce:3d:77:2c:e6:b7:11:42:3a:15:5b:e8:e0:30:63:d2:
4c:0f:94:8d:f4:86:6a:9b:a8:6a:ad:14:3b:4b:29:88:21:cf:
e2:5f:b0:4c:d9:e5:cd:de:c4:7b:0d:96:91:64:82:56:b3:64:
b0:ea:29:03:6a:2b:87:19:f9:60:7f:9b:8b:b0:47:0a:7d:ed:
2a:97:5a:e4:d3:cc:b1:dd:e0:07:01:3d:c7:ce:73:af:5f:e2:
2a:b1:6f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:39:02 2025 by rpki-client