Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
File: HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft (raw, json)
Hash identifier: uAaiq2NPcmRBKpWxTk8SK/Yfihnsuvcw83gKelGpb7M=
Subject key identifier: 72:82:41:00:BE:41:A8:14:03:45:AE:7F:9D:2A:45:4C:BE:EE:04:8E
Authority key identifier: 1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
Certificate issuer: /CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Certificate serial: 0196A80B37E204A31F3D0480E6D6F09DA9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
Manifest number: 0A83
Signing time: Wed 07 May 2025 00:00:29 +0000
Manifest this update: Wed 07 May 2025 00:00:29 +0000
Manifest next update: Thu 08 May 2025 00:00:29 +0000
Files and hashes: 1: Bh5IC48JAR5FB63v2dnakNOTX34.roa (hash: FMLGNxpZDrf8rppZSMEnpJR9pt6oa5eJBxowJrkMq7o=)
2: HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl (hash: wLCZ2npkTk881w4IZ+4iJB+ZnyARyrRvushUjn547Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:37:e2:04:a3:1f:3d:04:80:e6:d6:f0:9d:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1de5dbc0b610485d0f7e2194d8f816d6c1445326
Validity
Not Before: May 7 00:00:29 2025 GMT
Not After : May 8 00:00:29 2025 GMT
Subject: CN=72824100be41a8140345ae7f9d2a454cbeee048e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:92:4d:50:df:53:74:40:c6:5a:0f:f2:11:13:
6d:82:d9:f2:78:37:4a:26:5d:63:6a:83:a7:5a:39:
ab:e9:31:5b:c0:f1:4e:fa:28:59:93:c1:7c:6e:ee:
c6:16:87:cf:e2:a4:57:27:67:80:62:a6:86:94:62:
e5:1f:52:5f:d3:bb:46:a2:e3:5b:3a:45:bd:0e:96:
d9:8f:49:70:b6:0d:f1:ae:dc:e9:52:67:bc:44:f8:
ef:93:bc:b7:5a:9e:b5:07:cd:f5:16:e8:4a:51:ec:
68:78:7c:72:a8:81:3d:fd:d4:89:29:87:d7:2f:a9:
fa:8b:74:07:9a:2d:b7:47:73:3a:25:af:0d:7d:e4:
21:31:d7:34:7e:d8:fa:26:fe:33:67:f5:bd:bd:6a:
17:84:79:84:78:04:c2:cd:0a:a7:1f:44:3c:4e:92:
6a:e4:65:09:e0:45:18:c6:02:01:84:e2:b4:bf:86:
b7:87:f4:da:3e:7a:77:15:b2:60:f6:51:0e:28:8d:
76:e2:ae:70:4f:55:f7:13:90:dd:a1:3f:71:bc:16:
38:f9:1e:2a:d5:30:a0:60:49:c8:28:dc:48:53:2e:
8e:43:a7:6f:40:0e:a5:f0:23:e8:f4:64:d6:c9:95:
7b:e1:b3:a7:50:a7:be:0b:07:4b:6b:01:80:f4:70:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:82:41:00:BE:41:A8:14:03:45:AE:7F:9D:2A:45:4C:BE:EE:04:8E
X509v3 Authority Key Identifier:
keyid:1D:E5:DB:C0:B6:10:48:5D:0F:7E:21:94:D8:F8:16:D6:C1:44:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HeXbwLYQSF0PfiGU2PgW1sFEUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e77b83-a23b-4897-b4dd-68eedf5f66bc/1/HeXbwLYQSF0PfiGU2PgW1sFEUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:af:d1:0b:2a:36:4e:e5:f0:bc:e2:92:a4:20:0a:9c:5a:3c:
56:d3:71:54:82:64:83:cd:23:89:7f:48:14:10:bb:b6:83:70:
39:a6:de:22:ff:6e:da:fb:6f:26:16:e3:a8:f9:2a:04:24:17:
4b:cc:71:68:32:f4:25:f6:f2:0f:e3:7a:22:da:0e:24:9a:6d:
54:f6:cf:a4:01:fb:02:ee:03:f0:b7:d0:e1:66:b2:f8:50:e6:
69:bb:f0:d6:2c:bb:18:65:67:41:6b:38:64:5f:40:b6:96:72:
57:e3:c7:6b:4f:01:10:9b:23:a1:06:fe:a8:7a:ca:32:04:35:
c2:ff:57:67:2b:40:68:f0:84:3e:d0:03:e4:e7:29:78:30:97:
3d:f4:8a:12:79:8b:c7:ec:bc:d6:4c:05:ff:41:4d:08:7c:5f:
d8:50:81:01:b1:c1:94:0b:04:17:89:ed:c8:98:a8:35:e9:68:
af:c9:11:ca:29:ee:3d:e0:38:b3:a4:74:6f:0b:4a:58:b4:83:
44:6a:72:8a:b0:c3:21:8d:57:a0:cb:7b:f9:3e:9f:f5:f0:e1:
17:b0:a5:8c:13:66:f7:25:04:77:8c:7b:48:63:ea:e2:e2:96:
ce:a2:68:dd:40:ac:24:60:45:58:d8:49:3d:91:e5:74:4f:5e:
c9:e0:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:44:23 2025 by rpki-client