Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
File: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft (raw, json)
Hash identifier: XR15ZcTJ8yuehtZCiJ0VNk0DueAer476X8NuJxCcYlU=
Subject key identifier: 5B:84:E6:CE:D2:2E:40:8E:0D:EA:A4:04:A3:F2:11:0A:E6:F1:5F:73
Authority key identifier: 84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
Certificate issuer: /CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Certificate serial: 0196B06A1CFF02A655776F12DFF86973F342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
Manifest number: 1533
Signing time: Thu 08 May 2025 15:01:06 +0000
Manifest this update: Thu 08 May 2025 15:01:06 +0000
Manifest next update: Fri 09 May 2025 15:01:06 +0000
Files and hashes: 1: UzSEdJBP2Gqr1z-0qx79WTsLauw.roa (hash: vl1ow4mOIeKlrrAdbJAJQJmVxWS6mp39VC/9XaCz00U=)
2: hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl (hash: nyczyR/vyGtURLiBZ+PfVy1xx+wI/HRzICpEGRWQmfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6a:1c:ff:02:a6:55:77:6f:12:df:f8:69:73:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84e1429a53e6463b3c74f5a3f17c5d4a51ebd0b8
Validity
Not Before: May 8 15:01:06 2025 GMT
Not After : May 9 15:01:06 2025 GMT
Subject: CN=5b84e6ced22e408e0deaa404a3f2110ae6f15f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f5:43:37:8c:18:f4:4a:55:96:7d:6a:db:d2:
99:a2:a9:9c:60:4e:ac:e5:4d:7f:35:a0:38:1b:48:
2c:be:14:43:b7:74:d5:e6:95:01:d3:5d:5f:cf:5e:
99:15:e0:f9:d5:4c:e2:41:95:e2:3f:6a:98:b7:d6:
e1:25:92:86:e9:9b:db:e5:ce:55:03:1d:63:7d:09:
04:1d:17:9e:3c:60:5e:0c:c6:c9:ac:a5:b0:6a:9d:
d9:09:18:61:4e:ef:fe:b8:a0:83:b2:ab:0b:76:84:
40:72:2e:9b:5f:b3:e5:00:42:ef:25:2c:af:60:4a:
ec:b8:dc:4e:46:3a:e7:c5:30:0d:9b:f4:23:24:0e:
b6:f2:a9:45:a7:72:f3:c0:98:14:19:b0:9e:40:6c:
62:b0:7f:96:f7:f4:a2:d4:03:59:9e:b3:37:10:c6:
59:f8:26:ff:a8:ae:0b:cd:ea:07:50:22:4c:c3:22:
3c:b3:9a:2f:57:15:11:9b:85:11:7b:55:1f:b5:89:
6a:9e:4b:b5:ad:3f:f4:3b:39:48:2a:92:d4:62:e1:
33:4e:21:c7:4f:87:30:ef:53:64:37:ad:fa:5b:94:
8c:e7:ce:d5:40:fa:1d:e9:9e:c1:1b:1a:90:63:cb:
0b:18:17:3a:c8:c4:6b:96:fe:ac:7e:41:b7:3d:6f:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:E6:CE:D2:2E:40:8E:0D:EA:A4:04:A3:F2:11:0A:E6:F1:5F:73
X509v3 Authority Key Identifier:
keyid:84:E1:42:9A:53:E6:46:3B:3C:74:F5:A3:F1:7C:5D:4A:51:EB:D0:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/72dbdf-c71d-4e59-8076-c41dcca8b775/1/hOFCmlPmRjs8dPWj8XxdSlHr0Lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2c:69:38:b4:dc:fd:57:9a:ab:85:6e:dd:c9:73:53:ac:13:
98:e2:41:f3:f9:ef:b8:d5:61:97:85:1d:61:50:e4:95:83:00:
6a:0f:8b:21:85:aa:06:f9:3a:65:c6:fb:bf:02:5b:64:34:0f:
b1:22:73:c4:bf:88:fc:e8:c4:5d:f0:83:48:b4:dd:e7:9a:45:
82:d6:24:24:30:51:71:81:81:b7:dd:64:5c:24:03:79:0c:5f:
2e:df:15:0c:ec:bc:64:3d:88:38:18:31:02:ba:e9:4c:25:63:
17:db:4b:23:8d:1f:6c:6f:dc:9e:0c:48:42:14:7a:11:ab:b9:
0c:46:29:26:81:fc:4f:bf:bf:94:54:fe:3d:25:b3:8d:b6:df:
79:70:6b:76:fa:4c:a1:ae:51:12:c4:0b:ef:b1:3b:29:93:79:
37:d6:e9:09:fd:89:4e:fd:3d:c8:b3:ea:f0:be:6d:46:82:38:
66:f9:49:7f:2b:c0:ea:e0:4c:c8:12:6c:8f:1c:71:50:20:4d:
32:b3:53:23:8d:ff:a7:66:be:b9:b4:6b:55:c3:67:3c:db:db:
b6:01:a0:2b:5b:54:a6:64:f3:8b:fe:ce:46:e9:a4:01:59:6f:
a6:cd:a2:aa:69:54:0c:c0:36:a3:04:91:57:f1:e8:1b:93:37:
d4:a6:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:25:29 2025 by rpki-client