Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
File: hxB-P9m5S0s25qjzcOhlCn9X5sM.mft (raw, json)
Hash identifier: NBsv52snn4LLw6YQUdb8llvMsOq5dfxkPOo2SW4Nd84=
Subject key identifier: 64:D3:DE:2A:B3:E5:5A:FE:A7:A5:83:7F:D3:A7:50:5B:07:82:D2:F6
Authority key identifier: 87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
Certificate issuer: /CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Certificate serial: 0196BE2599C2A07B1F83016A9905BE130ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 07:00:57 +0000
Manifest this update: Sun 11 May 2025 07:00:57 +0000
Manifest next update: Mon 12 May 2025 07:00:57 +0000
Files and hashes: 1: J2vDIE39ML2dQIioX-84LBq6-7M.roa (hash: 8kL6c8FUmTdyZfSSSH7csG9NWpaHPuGePFXhn8lYBjs=)
2: S-FqJ5rHJScfH16THhv-Awb7K-Q.roa (hash: qZ4G5Ir5+2IF3qwAQCRLSDxYrzLLeDBCxC9VdbkE9zU=)
3: hxB-P9m5S0s25qjzcOhlCn9X5sM.crl (hash: bIepb/fsHihpj4x10fMSvXXEpqBStEjHAeJueKwQV9c=)
4: pWgX5JiF8p7IJPd1N7EyBTiovEk.roa (hash: b0ArhWGdNOXnp+wzwnp1QcD9Bn6HmXnGIfByPMG51fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:99:c2:a0:7b:1f:83:01:6a:99:05:be:13:0a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87107e3fd9b94b4b36e6a8f370e8650a7f57e6c3
Validity
Not Before: May 11 07:00:57 2025 GMT
Not After : May 12 07:00:57 2025 GMT
Subject: CN=64d3de2ab3e55afea7a5837fd3a7505b0782d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:75:c6:a1:06:4c:72:fd:b1:22:75:d2:5d:e7:
01:cd:18:8d:84:fc:a6:a5:01:f8:b7:8e:09:04:cc:
10:d1:2e:79:9a:7c:3f:47:13:cd:06:4d:54:00:da:
ea:ca:49:28:4d:80:4d:f6:c1:f0:81:6c:67:ac:f7:
30:0a:d6:b5:e8:19:e9:c9:96:b7:76:54:5f:94:3b:
13:8c:ca:8b:ff:9f:14:9e:8b:dc:de:c3:7c:03:e1:
a1:e0:87:b7:f3:b2:3e:17:74:8c:7f:f5:a1:94:a0:
70:96:a0:bc:3a:ba:32:e7:09:1d:01:7a:64:aa:a4:
d4:5e:3c:dc:63:29:ab:26:86:5d:2d:e4:db:8b:1d:
22:af:fd:5e:04:d4:09:0b:94:df:43:b2:c6:93:07:
bf:db:27:87:75:fd:75:e7:6e:f3:a7:c0:e0:22:92:
26:df:4a:40:b9:17:41:c6:b1:74:d2:24:ba:d3:b6:
34:95:4b:17:3b:15:90:48:f5:8c:3c:e4:ec:77:c0:
2c:2f:41:08:69:63:78:62:c4:e2:ad:17:98:1e:a9:
c0:73:55:38:d4:64:c6:dc:3c:bb:53:6b:f1:e2:09:
63:e2:8f:e7:6e:82:c7:c5:51:07:97:2b:e2:96:ca:
4d:f7:b7:6b:dc:b3:d2:65:91:e3:e1:8c:32:42:d5:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:DE:2A:B3:E5:5A:FE:A7:A5:83:7F:D3:A7:50:5B:07:82:D2:F6
X509v3 Authority Key Identifier:
keyid:87:10:7E:3F:D9:B9:4B:4B:36:E6:A8:F3:70:E8:65:0A:7F:57:E6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hxB-P9m5S0s25qjzcOhlCn9X5sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a59390-8048-43b9-82b5-761dab389b5b/1/hxB-P9m5S0s25qjzcOhlCn9X5sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:af:2d:00:53:36:a5:6f:90:d8:75:6b:2e:cc:73:24:b0:e3:
e0:11:d8:4f:52:01:1c:1b:34:8a:d1:ad:f6:06:fc:f6:c0:3e:
5b:ec:fc:d4:c3:fc:bb:98:91:2b:4a:4f:7d:f0:4e:6f:cc:28:
ef:10:0a:69:3e:b5:ba:50:03:d6:1d:31:88:f2:e1:04:cc:1b:
97:b4:79:5c:3d:e5:7b:97:e3:63:00:10:fc:ac:1e:c2:1a:d1:
7f:c5:e9:0e:fd:ea:37:d2:f7:ea:b8:c3:8d:1e:8d:b6:94:18:
34:1e:ff:21:de:54:13:0a:d5:d6:4c:f9:05:c9:74:9f:90:36:
3c:c6:16:01:c5:67:14:eb:c2:a7:d2:dc:79:88:d1:4c:42:05:
40:d1:4b:15:79:da:6d:9e:9e:b1:b7:b2:8e:19:bd:af:92:e0:
40:e1:9c:a9:bb:43:a0:e0:0b:ea:4a:27:8e:54:c6:5c:12:62:
6c:54:b0:0f:12:ef:d9:d3:92:09:6f:f9:7f:08:3f:54:91:f2:
88:c8:a0:9a:72:42:58:d7:3b:0f:44:74:3e:9e:cc:21:85:5e:
a6:10:82:76:a0:f3:a9:49:46:62:56:08:c0:aa:63:d9:8c:83:
0a:c5:ca:d9:b0:30:d0:26:18:4d:d3:cf:49:5b:72:62:56:89:
e1:ca:71:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:39:04 2025 by rpki-client