Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: z81FfmqKe74OWkscuJc690HQnYsKF7eVfsP2cQi4VME=
Subject key identifier: 20:20:86:BA:9A:0F:43:3A:54:C0:BD:86:49:44:FA:F3:37:BF:55:2D
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 0196AA9EA0EA7506FE56021AC9B01D8389FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 0230
Signing time: Wed 07 May 2025 12:00:44 +0000
Manifest this update: Wed 07 May 2025 12:00:44 +0000
Manifest next update: Thu 08 May 2025 12:00:44 +0000
Files and hashes: 1: am3Sy264Yl-JO5WdEXeWKKEs9ps.roa (hash: 9k8mynHVOZTwg4WDO/sfA0hKUXErmcKqWcYze5ZqrNU=)
2: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: nHNtUFug34W59QMqhGkPQK5tug9Q946k50cMn10OgHA=)
3: sXyVeEgdrOK8h5ebOKwuNo_SSAg.roa (hash: ESBdMDmOcBiwaOXHXdAgFsuBwburzoKdU0lwdUGfYAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:a0:ea:75:06:fe:56:02:1a:c9:b0:1d:83:89:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: May 7 12:00:44 2025 GMT
Not After : May 8 12:00:44 2025 GMT
Subject: CN=202086ba9a0f433a54c0bd864944faf337bf552d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:02:d2:58:25:3c:fe:ae:a3:7d:cf:4f:d7:
d2:32:7d:61:fb:bb:54:96:e7:79:50:7a:17:eb:f8:
dc:1f:b7:b1:1c:d3:2e:e1:b0:c8:f8:34:19:e1:18:
f9:5b:4d:ce:b1:ca:0c:c5:31:7d:c4:49:96:0b:b6:
f9:b1:5b:a6:23:35:3a:98:a9:df:92:59:3c:41:81:
76:72:b7:9f:42:6c:46:9d:50:fa:4b:b7:7e:82:eb:
26:09:5c:cb:4e:3e:14:03:7a:9d:27:91:5e:80:a5:
0d:31:d1:3f:72:91:78:7d:d1:ef:da:e8:2d:a3:c0:
79:d6:1b:3a:9b:18:04:75:bc:b6:56:4a:e8:d3:14:
df:3a:6b:a1:81:89:3b:ce:42:bb:f5:d3:94:68:48:
99:a5:9d:9e:41:7c:0f:25:2f:b8:7d:69:eb:20:97:
96:85:fd:56:9e:ac:8e:dc:46:9c:1b:60:9f:9f:59:
bb:b4:91:ab:a0:2b:aa:ef:5b:06:39:0e:20:60:60:
2d:c4:44:bd:6b:5e:4f:80:5b:a4:bf:a6:f0:29:5e:
cf:40:22:ee:b2:b8:be:4a:b5:f7:dd:24:bf:27:e2:
30:9b:f2:30:ab:26:73:f8:c5:78:43:ba:f6:e0:4e:
42:10:78:4c:bc:62:e5:22:95:83:f5:c8:aa:58:6a:
b5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:86:BA:9A:0F:43:3A:54:C0:BD:86:49:44:FA:F3:37:BF:55:2D
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:cc:df:77:36:eb:61:8f:f5:ed:8a:c5:b6:6e:01:72:db:
bd:89:e2:99:d6:0c:0d:ab:32:8b:ce:a8:78:65:62:df:74:81:
45:71:7a:1d:36:b1:f8:4f:cc:42:74:4c:34:24:1c:92:2d:68:
59:75:01:a2:1d:04:b1:59:b7:81:6b:4f:a9:d5:a1:53:fa:90:
20:34:5c:53:90:a5:02:a0:75:e9:1d:f1:38:0c:32:e9:62:2e:
5b:cb:1f:9c:6a:10:9b:ad:6a:23:2d:dd:e7:7b:28:22:0d:82:
27:e6:8c:81:52:b5:a3:d8:b4:e8:a6:42:e8:e2:73:48:5f:8d:
33:9b:a3:a8:28:7f:0c:b6:d4:9b:d2:3d:40:35:e1:cc:54:06:
21:30:8f:54:60:d0:44:8d:49:71:6e:42:6c:20:78:eb:3f:3e:
d3:99:4c:99:b3:ea:45:f2:2b:6d:77:ff:ca:ee:bd:3b:88:be:
45:40:77:06:12:27:b2:5f:9e:b1:81:99:16:f5:d2:8b:d7:e8:
74:9c:7f:22:8a:2a:c5:1f:e7:ba:20:2a:55:8b:5d:9a:db:4f:
0b:ea:7a:7c:00:b9:91:7e:dc:48:f3:35:b4:5e:d0:77:16:5f:
ad:9f:f5:9a:ed:df:71:92:75:bb:16:ac:de:f1:94:5b:17:90:
02:1d:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:08:03 2025 by rpki-client