Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: AxXnQPbym9NrOvDn/zotRweCwbekdIbLLNQndmAlAv4=
Subject key identifier: D3:7C:30:8E:52:B1:C6:59:13:88:4E:9E:36:39:12:AF:9A:EE:51:FC
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 0196AD9F6F6E897AF9DE3C7C43FD2632E330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1532
Signing time: Thu 08 May 2025 02:00:29 +0000
Manifest this update: Thu 08 May 2025 02:00:29 +0000
Manifest next update: Fri 09 May 2025 02:00:29 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: aF6PtSN+RaezwvUUuMw+zmsoDOILW4Uze/9hYLZQhwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:6f:6e:89:7a:f9:de:3c:7c:43:fd:26:32:e3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: May 8 02:00:29 2025 GMT
Not After : May 9 02:00:29 2025 GMT
Subject: CN=d37c308e52b1c65913884e9e363912af9aee51fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:45:e8:f7:81:d1:d1:1a:fa:62:cb:02:81:
bb:02:bc:5f:2e:19:10:8e:67:2e:d8:a9:6b:71:28:
37:b4:8a:d3:ea:ec:9a:29:3f:22:57:59:e2:7b:f4:
84:0f:c6:81:57:58:28:89:1c:d6:8f:2a:35:ce:00:
8b:45:33:fc:41:ef:d7:ea:46:e8:62:fc:a0:61:60:
19:63:4a:0f:0c:92:4c:bc:91:6f:c1:ec:b1:95:9f:
18:f4:41:be:64:3d:d2:4d:cb:e9:99:4b:d5:3b:02:
d0:75:58:3b:ff:ba:83:32:af:1a:6a:0e:b0:84:9e:
dd:71:27:77:cf:ad:34:6d:77:d7:84:9b:26:04:bb:
2e:04:d9:61:3c:c0:89:f7:60:01:15:df:80:62:24:
41:e9:2b:75:d2:27:62:f7:fc:f9:d7:c5:3d:ba:f4:
eb:1b:b6:db:1e:20:e1:be:51:23:4a:96:f5:d6:02:
c8:cd:cf:df:d9:ee:15:ec:cb:c1:76:3d:1a:c3:50:
b1:b6:77:4f:e7:2d:49:15:dd:91:11:e8:da:95:18:
e1:7c:a3:1b:d4:f9:fe:ed:94:47:be:ff:5f:9b:2e:
f1:cc:ad:d4:15:a7:e8:31:31:ae:40:04:4e:36:5d:
d3:36:16:22:51:97:a2:4f:38:6e:c7:7f:d3:a3:0d:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:30:8E:52:B1:C6:59:13:88:4E:9E:36:39:12:AF:9A:EE:51:FC
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f3:42:5c:73:e1:43:c0:6d:ba:18:69:30:90:d3:f1:38:ab:
80:3d:8c:4f:42:00:f2:8a:5d:6c:e5:50:f1:32:ea:b6:21:27:
79:dc:55:ab:96:19:58:26:7f:f8:a1:e7:ad:82:6a:d4:d0:e7:
f9:8e:47:53:df:a1:9d:16:cb:e9:88:fb:6b:e1:b1:98:d8:58:
2e:29:c2:42:39:36:1f:5a:e2:25:16:a1:68:40:f2:0c:71:ec:
fe:d2:03:bf:f4:3e:7f:6b:80:a4:87:81:30:a2:94:c0:07:8b:
1d:25:34:8d:e1:5b:c3:dc:f9:8b:cd:b7:2b:16:a6:83:e1:a0:
0a:95:29:81:1e:a0:f9:6e:64:bc:34:d7:c8:f3:ca:c6:e2:16:
c1:a3:d7:71:44:52:67:a9:ea:ee:75:3a:2f:7f:a4:93:bb:83:
4d:1d:55:1a:b6:96:bc:64:a4:48:e4:25:be:14:b5:ae:e4:1b:
d5:9a:95:01:ef:c6:1f:47:5d:d6:d3:9b:70:f0:6e:bc:39:4e:
94:e1:87:a5:24:51:3d:31:9b:c0:93:d7:f6:8b:e1:91:68:a0:
39:a6:3c:a6:3c:1b:2d:58:c6:aa:f8:7d:c7:27:be:6b:ed:b1:
19:ed:96:42:cc:07:75:97:0a:db:0c:4a:1a:ea:dc:37:be:fe:
ad:47:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:20:38 2025 by rpki-client