Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
File: hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft (raw, json)
Hash identifier: 0FeHF7N7p3Jfd6kwlZZsLCPHVW1DtjKM33uTKLQm9H4=
Subject key identifier: 9A:BB:26:7A:CD:2A:BB:99:9D:50:06:DD:4E:0A:B4:E0:90:E4:90:4B
Authority key identifier: 84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
Certificate issuer: /CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Certificate serial: 0196BA7FBC7020DB4BE55694FB56931F47D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 14:00:55 +0000
Manifest this update: Sat 10 May 2025 14:00:55 +0000
Manifest next update: Sun 11 May 2025 14:00:55 +0000
Files and hashes: 1: hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl (hash: V6wbQo61VVWA/STNMMbCMfZ6DZ8m+QUFj64cI/qnNMU=)
2: lge_NhHNBFIDg0XdYly6isNJOS4.roa (hash: pDkiQ0N7P9YYqBWB2tNQa40hEDOK8eDvKfQ/EMtchvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:bc:70:20:db:4b:e5:56:94:fb:56:93:1f:47:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=849ace066a44ed2f95fe6bc2d0a7da412763bf2a
Validity
Not Before: May 10 14:00:55 2025 GMT
Not After : May 11 14:00:55 2025 GMT
Subject: CN=9abb267acd2abb999d5006dd4e0ab4e090e4904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:32:b0:23:42:ba:98:16:8e:f1:d4:12:5d:
52:00:ff:ef:6d:41:f0:17:42:91:e5:9c:10:7f:01:
95:6e:52:32:a7:67:96:f3:24:ac:ec:ab:eb:42:3b:
f9:39:16:6d:5a:eb:17:36:51:91:4e:31:b1:77:34:
2a:b6:f5:7f:a9:5d:ae:ff:70:d4:99:7c:5e:c7:26:
f2:14:98:ae:c7:03:f8:96:1d:09:4f:3f:2e:33:38:
77:5f:87:cb:c5:0a:b2:76:33:5e:85:6f:9a:9b:67:
58:89:64:d9:55:c1:f5:91:30:8c:ed:dc:e8:46:19:
db:c8:78:06:b3:de:41:41:49:56:a7:c0:07:7f:0d:
a7:f6:e2:a4:8f:4b:37:e2:37:96:0b:93:84:7e:c9:
2c:37:ae:20:33:39:bd:b1:30:64:18:65:76:93:9b:
1f:77:03:50:89:9c:2c:fe:a4:ca:54:c9:8c:4d:d3:
cc:25:91:af:d6:61:1e:71:0e:5d:e2:87:97:e7:bd:
91:76:af:f4:ab:b8:12:cc:ea:87:59:7b:71:c9:a3:
44:8d:af:2f:9b:ee:b5:4a:d4:11:e4:12:a4:f2:9e:
1c:72:6b:4a:96:fc:ac:d5:67:0b:5a:b9:bd:11:f7:
c3:4a:bc:df:fb:55:2e:60:6d:f8:75:e7:86:eb:aa:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BB:26:7A:CD:2A:BB:99:9D:50:06:DD:4E:0A:B4:E0:90:E4:90:4B
X509v3 Authority Key Identifier:
keyid:84:9A:CE:06:6A:44:ED:2F:95:FE:6B:C2:D0:A7:DA:41:27:63:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJrOBmpE7S-V_mvC0KfaQSdjvyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/0a5817-ba85-4244-a052-f7c4657b7b8d/1/hJrOBmpE7S-V_mvC0KfaQSdjvyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:80:e5:3c:a8:87:d4:53:26:ba:2b:88:93:01:e8:13:a8:c3:
c5:35:51:c0:59:f7:e7:00:de:42:46:90:21:10:84:67:39:f6:
42:c5:b8:a5:17:9b:ff:79:d7:90:d1:f8:2c:d9:7b:96:d0:19:
d5:27:20:88:e8:d5:55:d9:f2:86:63:a9:2a:72:1d:f6:f3:36:
45:44:66:9c:10:e0:a1:fe:a1:f6:f6:8b:05:e8:35:04:32:ef:
b5:70:f1:c6:17:35:3c:2c:fc:58:2d:e7:aa:5f:c9:f9:38:34:
e4:d3:80:eb:07:9b:ae:08:67:7c:b2:5c:6d:5d:6d:f9:08:c9:
15:e1:f2:d7:72:e1:9a:09:2d:b6:1f:a4:85:66:6b:88:43:44:
b8:9c:c9:77:0d:fc:5a:83:76:ad:51:77:9a:2f:92:10:1b:88:
65:26:24:c8:58:9a:cd:45:1a:4b:c6:2f:9f:44:5c:e7:da:4a:
cd:e9:8b:f5:1b:2d:8c:01:47:79:b4:66:53:57:14:15:94:c4:
86:1e:bc:53:45:56:b2:dc:9d:f2:43:e8:03:b8:2c:1d:c6:90:
9f:7e:9f:7a:56:4a:0a:16:fe:5e:66:d6:06:f3:b9:ca:c6:8b:
f2:b0:92:51:29:0a:04:23:ce:52:44:53:9e:fa:97:52:af:64:
30:78:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:10:41 2025 by rpki-client