Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
File: hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft (raw, json)
Hash identifier: U0qhqUV0cDHlyfp4AmTQ8mfnQsyKku5rcFUs+l8CcAk=
Subject key identifier: 86:A9:BD:C6:4E:14:54:AC:CB:04:75:9E:89:C1:2E:83:B1:80:4A:68
Authority key identifier: 84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
Certificate issuer: /CN=8498f3fefce2fa0120336264df15010461082e8a
Certificate serial: 01969E2C44D2815215A5A8DA667D3C09B7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 02:00:23 +0000
Manifest this update: Mon 05 May 2025 02:00:23 +0000
Manifest next update: Tue 06 May 2025 02:00:23 +0000
Files and hashes: 1: hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl (hash: 2Ej4fH3FGC3LiaRub7dNVKb58hZ/a6hRWP2CkN3MWQU=)
2: wDu0PbdcrV_g7-AL5I3kzmrgmd0.roa (hash: e7su7+uh2dnvlgeLnogNpRmXEp13YVA9VujtS7ejWQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:44:d2:81:52:15:a5:a8:da:66:7d:3c:09:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8498f3fefce2fa0120336264df15010461082e8a
Validity
Not Before: May 5 02:00:23 2025 GMT
Not After : May 6 02:00:23 2025 GMT
Subject: CN=86a9bdc64e1454accb04759e89c12e83b1804a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:6d:11:6c:ee:79:f2:40:62:6a:9a:e1:3b:
5a:a1:5d:6b:72:c1:95:9c:2a:55:75:bf:d1:8f:71:
39:29:4d:dd:2e:2a:22:8f:e2:fa:d5:f9:04:5f:f5:
f7:e8:34:0c:63:44:5e:e7:cd:d3:71:66:fd:97:28:
42:19:14:5a:dc:0b:ad:d9:0c:16:8e:1a:ba:27:22:
93:07:0a:32:ef:f0:d4:a4:25:b8:14:57:6d:b0:ea:
f0:12:3a:fb:64:49:f6:2a:f5:71:41:d8:0a:d9:76:
dc:32:e9:31:f8:99:3f:46:22:9c:63:ac:ae:c4:79:
f0:02:6f:de:c9:49:b3:bf:c6:f5:e5:37:7c:bd:4b:
ea:c2:de:78:54:d1:10:62:3e:b1:f8:19:e5:1b:97:
50:37:b5:ce:f2:5d:a2:84:93:96:fa:f2:32:22:f5:
98:81:90:71:76:14:57:68:e0:32:93:1c:23:84:52:
82:e3:5b:d0:3e:c6:a9:b9:a9:2c:af:e5:f8:c0:76:
5a:cd:55:b0:5d:bb:6e:95:fa:18:1d:d7:1b:b9:29:
d3:58:4b:13:4d:72:f0:87:ad:30:27:33:cb:ac:6f:
52:89:75:d2:43:e4:2a:a3:95:9b:91:1f:04:74:a2:
cd:01:0c:19:5e:e9:2b:2b:ae:ab:7a:7e:ad:28:43:
d6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:BD:C6:4E:14:54:AC:CB:04:75:9E:89:C1:2E:83:B1:80:4A:68
X509v3 Authority Key Identifier:
keyid:84:98:F3:FE:FC:E2:FA:01:20:33:62:64:DF:15:01:04:61:08:2E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJjz_vzi-gEgM2Jk3xUBBGEILoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4611ff-40b2-4c0a-a7f8-404dfdb46477/1/hJjz_vzi-gEgM2Jk3xUBBGEILoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:bd:2e:7c:61:ec:99:bb:f5:2f:bf:77:58:89:0e:9e:fc:
ad:e5:b1:08:ed:13:f9:f1:a5:bf:20:c0:df:2e:20:4e:e4:4f:
13:73:96:d9:ff:a8:cc:33:54:48:64:f2:c1:13:5d:0a:59:ae:
27:5a:54:4b:1a:09:28:a0:79:e7:68:85:d4:96:a4:ee:9d:86:
00:02:72:ef:f0:f6:8d:0f:58:75:10:a5:9e:56:e7:96:34:17:
15:88:a5:78:cc:29:50:28:87:e9:d3:1e:f4:49:9a:2f:92:89:
59:b3:95:2b:c7:cd:d3:42:5e:6d:12:95:3e:3b:5c:be:b3:d0:
78:2f:b9:b0:ae:67:d6:5f:6e:9d:3d:38:04:7d:c8:b3:e2:a9:
11:1f:28:43:bd:af:21:b3:d0:d1:09:b2:f6:88:33:12:42:62:
49:af:af:01:62:5e:1e:0b:67:09:1f:45:69:34:1f:51:25:90:
0d:02:9a:b9:e8:03:2a:5c:60:81:f0:7f:46:7b:0d:cf:87:bd:
2d:99:7d:75:1e:d8:64:b0:da:ae:6e:36:b4:ab:98:6d:ff:fc:
8b:84:0e:b7:bb:13:99:d6:db:2c:7b:04:24:1b:c3:0f:1c:f6:
e5:97:b1:cd:cc:48:f9:c1:44:7f:92:7c:25:9c:c4:23:9b:3e:
c8:7d:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:55:34 2025 by rpki-client