Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier: bLBiHXaPLvEm0lKe3W19qyvnfxQpUFvq1DhZHLYkOSA=
Subject key identifier: 4A:6A:1F:59:2E:88:AC:D4:06:FE:8B:04:F2:3A:48:B9:9C:26:CE:60
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial: 0196A91DE16E816CBA793B5B34B126AA9DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number: 14D3
Signing time: Wed 07 May 2025 05:00:29 +0000
Manifest this update: Wed 07 May 2025 05:00:29 +0000
Manifest next update: Thu 08 May 2025 05:00:29 +0000
Files and hashes: 1: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=)
2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: vBOueT31EWNptvqYyYJUEQLpDMjv/qPCO9ujHRQrLgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:1d:e1:6e:81:6c:ba:79:3b:5b:34:b1:26:aa:9d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Validity
Not Before: May 7 05:00:29 2025 GMT
Not After : May 8 05:00:29 2025 GMT
Subject: CN=4a6a1f592e88acd406fe8b04f23a48b99c26ce60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:11:b0:25:eb:42:2b:17:e4:bd:ae:ca:38:
ae:36:0c:7f:9d:72:9d:ce:23:04:fb:4f:40:50:3d:
ad:a9:47:a5:71:8c:ba:8f:32:9d:aa:11:fb:22:46:
29:db:d4:61:a5:71:0f:43:2b:47:c9:ff:50:dd:c1:
04:2d:2b:cc:f0:90:25:3f:51:46:6f:a4:96:6b:f8:
c2:63:41:d5:67:c5:73:bc:67:ad:cd:68:91:d4:9c:
24:2a:96:44:a1:1c:df:b7:32:da:f7:9e:6f:63:9f:
f4:80:3a:23:87:4a:ea:a4:9a:58:7f:76:0a:67:2f:
4c:8e:5d:c2:64:16:0a:c0:24:3f:d9:2a:85:db:c9:
07:d9:b7:bc:47:bd:5c:be:0a:d4:6c:87:fc:e0:d5:
dd:43:68:67:e0:4a:eb:43:0d:3b:38:0d:6d:a2:ee:
5f:5d:1a:5c:73:31:97:de:7a:24:5b:bf:8e:f2:3a:
09:69:13:f5:08:56:c6:72:11:bb:50:db:7f:42:73:
b5:2b:a3:ba:cd:ef:fa:88:84:93:44:e8:1e:fc:8d:
0b:a5:36:18:d8:7d:03:0d:a4:21:25:b8:b4:30:f8:
a4:df:9e:d0:8d:10:5c:d2:c6:be:e4:84:3d:1a:23:
37:e7:9d:4b:c6:d5:0e:b5:48:9e:b2:17:cb:22:0f:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:1F:59:2E:88:AC:D4:06:FE:8B:04:F2:3A:48:B9:9C:26:CE:60
X509v3 Authority Key Identifier:
keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9d:44:09:0f:05:47:cc:cc:78:c2:1c:48:64:f9:c3:ed:6c:
98:40:98:52:3d:4a:43:c6:85:c0:96:a3:05:df:6e:c3:e7:f3:
52:c7:11:76:18:e2:58:53:17:a1:d2:75:b0:b8:06:0d:6b:cd:
89:91:89:5a:29:d4:f7:5b:ec:3e:31:00:da:a9:f6:4c:0a:80:
bc:ca:69:af:a6:5d:8c:cb:dd:ee:74:62:a1:f0:af:72:cf:db:
07:d0:87:d4:6d:2c:56:1a:01:ac:79:e1:e6:20:06:b5:ab:4c:
dc:6c:f5:c6:34:95:03:49:96:93:9c:4e:57:76:4e:b3:ae:7d:
cb:19:10:3c:f5:7d:c3:5f:78:08:ba:a4:e5:b7:d7:e4:54:58:
7d:16:4b:41:9c:d9:7f:57:59:a2:07:0b:3b:59:23:ac:02:f8:
f0:5c:09:17:a2:aa:28:14:e3:33:75:e7:0e:c3:f5:a8:bb:17:
b3:98:0c:e8:2f:cd:0f:48:42:2d:06:97:f3:de:23:c3:f2:68:
7d:b9:81:b6:67:5d:12:a5:1f:8b:f2:0a:f7:24:46:ed:35:c2:
cb:08:2d:86:af:56:87:c1:37:c8:7d:cb:c7:ab:3c:41:74:7c:
15:01:28:b7:e3:e0:e1:0a:d9:d7:03:58:c7:6e:cf:94:a2:d0:
53:e9:d4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:18:41 2025 by rpki-client