Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
File: 1-hskeN_g8zonixP0LdMZYB1jeKg.mft (raw, json)
Hash identifier: fwl9u4xdc4UYSca25Wk6yMBzF6tSSwG/iHW9Uip5eK4=
Subject key identifier: DC:C0:14:D0:BB:EE:50:4D:59:07:28:26:52:DE:29:3D:6E:33:CA:20
Authority key identifier: FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
Certificate issuer: /CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Certificate serial: 0196C7CCF1D2EC25AE0EA09AF3BDCBC95C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
Manifest number: 0661
Signing time: Tue 13 May 2025 04:00:19 +0000
Manifest this update: Tue 13 May 2025 04:00:19 +0000
Manifest next update: Wed 14 May 2025 04:00:19 +0000
Files and hashes: 1: 00q_V9fiuxK8x1J5dDf6heEWqpM.roa (hash: XdV8RV4SCz2Bjb29weutw1xlx9C6MC3WoiwiAcbHJHU=)
2: 0DRjjmcZlOUPV43RadORGLY5fAU.roa (hash: OsLSdbKdwCfPfb6fa3q09CVq+CXKI7ScoH/tLbYmOyY=)
3: 1-hskeN_g8zonixP0LdMZYB1jeKg.crl (hash: +nk42zyphtDV1v1R56ObrrsOrM0RIJlsrpHzvrco9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cc:f1:d2:ec:25:ae:0e:a0:9a:f3:bd:cb:c9:5c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1b2478dfe0f33a278b13f42dd319601d6378a8
Validity
Not Before: May 13 04:00:19 2025 GMT
Not After : May 14 04:00:19 2025 GMT
Subject: CN=dcc014d0bbee504d5907282652de293d6e33ca20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:8d:56:67:b9:8c:08:b6:b7:bb:82:0b:fc:
20:51:8c:29:6d:16:ef:e6:0b:f9:90:8a:44:c9:15:
68:0a:62:19:66:65:6f:1e:e7:f7:03:d7:86:22:f7:
59:66:49:7d:31:15:48:36:91:7b:91:15:86:ae:67:
97:79:30:79:72:2a:80:5d:48:d9:25:58:d3:86:0c:
7f:ca:b8:cc:39:cd:3d:3f:fd:85:72:48:3d:7d:72:
00:db:36:56:90:62:26:78:c6:8e:20:aa:6d:7e:7a:
4c:ba:84:51:3c:80:c4:d9:00:cf:1d:bf:0c:0e:5f:
c2:b6:c6:f5:19:de:9b:6f:23:d7:a7:8d:f1:2c:b2:
26:c5:83:fe:f5:de:22:d2:a6:66:67:0c:70:77:3f:
b7:12:e9:e2:fd:58:37:a2:bd:ed:73:f7:c5:15:f5:
0e:ed:8b:b1:2e:e0:0e:7d:18:53:b7:65:f0:e8:11:
b7:2e:9e:25:90:0e:6d:7e:3a:2c:75:1b:88:01:59:
b5:38:7c:2d:81:76:32:d9:71:70:57:c7:8d:68:cb:
45:88:77:a9:01:f7:4a:4a:f9:ec:d9:a7:6d:34:b4:
79:86:e7:e8:5d:80:40:8b:ed:db:bb:42:09:c7:15:
35:e3:d2:46:df:92:75:06:83:95:84:be:38:c8:f7:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C0:14:D0:BB:EE:50:4D:59:07:28:26:52:DE:29:3D:6E:33:CA:20
X509v3 Authority Key Identifier:
keyid:FA:1B:24:78:DF:E0:F3:3A:27:8B:13:F4:2D:D3:19:60:1D:63:78:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hskeN_g8zonixP0LdMZYB1jeKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/08a9c8-4be3-4682-af82-2a1cce7d2c65/1/1-hskeN_g8zonixP0LdMZYB1jeKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ca:6b:6f:4c:1c:d4:97:6d:65:d9:51:02:59:98:1b:1a:4c:
9b:20:3b:9a:3b:5a:52:09:ad:16:21:61:6a:e4:ca:68:90:40:
3a:98:6e:d7:73:dc:0c:b7:8b:b1:a4:be:4b:7f:f0:23:de:be:
58:a1:ce:50:8c:a7:37:f2:0b:27:5e:ce:45:11:f7:d2:7e:7e:
d3:cb:00:e5:b2:30:74:5b:8a:87:3e:07:4f:56:50:90:f1:9d:
7b:a8:b8:10:28:73:91:65:5f:77:f6:8a:01:ec:35:bf:dd:36:
b7:e9:4f:8a:d4:96:49:4d:63:d6:ea:10:87:99:a0:0b:b1:e5:
4d:d6:03:27:02:0e:0c:c3:10:14:a3:f8:85:d6:c0:35:1e:20:
75:ee:99:3b:01:53:27:72:6f:fd:0b:a1:09:6c:59:8f:2a:a5:
b7:3d:48:63:a4:0f:c9:50:79:28:80:3e:da:41:17:a2:f5:44:
47:a9:d6:22:ea:d8:54:ec:0a:f2:3c:d3:c7:ed:89:1f:ee:f7:
42:81:e0:1e:07:04:11:2c:19:74:fe:e3:77:a2:25:4b:ec:4e:
80:24:ad:a5:05:ce:60:01:b7:7b:5d:86:b8:66:a3:62:f1:f4:
07:c5:2a:18:02:d4:28:c4:e8:b8:4c:4c:17:c1:6b:e6:d3:11:
22:39:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:17:21 2025 by rpki-client