Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
File: hPmLsajH8dZnQkjEfg8ErgSa-lE.mft (raw, json)
Hash identifier: 3tLESHmlJLC7s+XxzfPGPbY3Xbb+FJZ5zElgIlxMyII=
Subject key identifier: 7F:94:C5:C4:3F:77:5A:DB:E3:2C:92:43:C6:38:15:1D:40:18:5B:A1
Authority key identifier: 84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
Certificate issuer: /CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Certificate serial: 0196B258C2B3BCE1CC179C6E09D8C4559F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
Manifest number: 0B37
Signing time: Fri 09 May 2025 00:01:23 +0000
Manifest this update: Fri 09 May 2025 00:01:23 +0000
Manifest next update: Sat 10 May 2025 00:01:23 +0000
Files and hashes: 1: Q_PyNzOCLo2V_8ZRI_IgL5-pqQ0.roa (hash: xZL3dvgx52JKq0c82ndChebXnYRXvZQcyI/g63uh0f4=)
2: hPmLsajH8dZnQkjEfg8ErgSa-lE.crl (hash: //V8Fk4VTCfGc7kv0SyOyx4GucGJAnOaYsVO4fE2CGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:58:c2:b3:bc:e1:cc:17:9c:6e:09:d8:c4:55:9f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f98bb1a8c7f1d6674248c47e0f04ae049afa51
Validity
Not Before: May 9 00:01:23 2025 GMT
Not After : May 10 00:01:23 2025 GMT
Subject: CN=7f94c5c43f775adbe32c9243c638151d40185ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:ea:56:e2:b0:72:39:f7:bc:b7:47:75:03:
8b:d3:7f:fb:9b:ac:ed:54:53:c8:ae:1a:e0:d1:85:
bf:9f:99:5f:8c:2a:f4:92:7d:3b:70:18:7b:98:22:
b3:74:08:1b:fd:ee:66:a4:e9:1a:ac:b1:59:18:a2:
81:09:57:72:5a:de:4e:73:c5:0c:15:3b:76:fa:02:
f8:9c:ff:e4:9a:af:58:84:ee:66:58:14:c4:e5:3b:
dd:ad:32:d6:76:52:4b:78:92:88:fb:54:33:dc:8c:
89:d2:ed:6b:d2:66:80:aa:79:01:53:97:3e:ae:51:
81:5a:e2:af:c4:94:5e:33:d4:fb:38:1d:5c:73:c0:
f6:38:04:f8:24:b1:68:96:ea:e3:71:76:dc:7d:8d:
bd:f3:cd:5d:cf:ab:bf:6d:b1:76:33:7d:77:7a:99:
65:b6:a6:43:6a:72:98:47:5b:f4:1f:7b:43:8d:bf:
b3:a9:b6:a8:45:ab:56:26:62:fd:7b:57:46:26:f3:
4e:7e:c0:b6:ca:9f:6f:3a:5d:1d:9b:04:42:d7:66:
81:ad:e4:81:a3:c7:b8:3f:64:3f:27:b5:a4:31:77:
a8:22:eb:b1:f4:41:72:8a:b7:e7:9c:94:2f:a9:c8:
7a:d8:c6:5e:0e:2e:87:c5:36:52:f0:cc:4b:09:1a:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:94:C5:C4:3F:77:5A:DB:E3:2C:92:43:C6:38:15:1D:40:18:5B:A1
X509v3 Authority Key Identifier:
keyid:84:F9:8B:B1:A8:C7:F1:D6:67:42:48:C4:7E:0F:04:AE:04:9A:FA:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPmLsajH8dZnQkjEfg8ErgSa-lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c6859d-6e46-4a66-a7b0-4e3594b2da7f/1/hPmLsajH8dZnQkjEfg8ErgSa-lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:55:de:78:4a:8e:0f:38:33:c4:b1:c3:63:66:fc:d3:b5:27:
86:2e:56:77:f5:ce:10:7a:5f:3e:3b:f7:b7:80:dc:92:45:83:
17:90:1c:63:5d:65:16:c1:27:31:01:a5:96:bf:ea:2a:21:76:
50:a4:fd:88:2e:bf:ad:a3:2f:76:13:00:51:12:12:db:1e:dc:
39:2c:a7:4a:1f:c8:a7:1a:87:58:d3:c4:78:2b:e2:1b:60:16:
8d:e8:56:e4:52:c2:50:46:88:f7:fb:12:c3:fb:ad:4c:61:89:
51:c6:07:c1:e4:d5:7a:be:e0:6d:8f:88:d8:87:63:1b:dd:c0:
74:2a:25:62:b4:a2:4f:46:61:4f:2e:3f:6b:20:c3:73:c3:16:
43:15:5d:59:4a:e1:02:df:fb:d7:27:43:f0:13:9b:a1:af:ab:
6b:01:f7:31:03:6d:b0:27:79:27:24:65:c0:9e:aa:67:35:b0:
4e:3f:b8:c6:3d:79:a1:fc:88:3e:11:49:de:11:87:ed:0a:35:
c9:be:98:c0:c4:aa:f9:c1:e9:c5:8e:03:47:37:c5:53:07:32:
a3:8c:57:0a:52:d0:73:f0:ac:b6:9b:1a:a8:e5:77:1b:89:b5:
89:8a:b1:ad:92:aa:d2:7b:05:44:b0:7c:13:96:a4:31:0d:08:
73:a3:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:34:31 2025 by rpki-client