Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
File: hI2YANad664Rt_gWHDzogYH957Q.mft (raw, json)
Hash identifier: u6hCy4uuAB3QWPS8e9CpRXRrziBYvMWMqlzBftdbIwU=
Subject key identifier: D7:65:55:9A:29:62:3C:9A:DF:F9:C3:52:EE:34:8B:A1:B9:92:31:BE
Authority key identifier: 84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
Certificate issuer: /CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Certificate serial: 0196B2C61A911A6970C336CBCC5B150CF748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
Manifest number: 0927
Signing time: Fri 09 May 2025 02:00:49 +0000
Manifest this update: Fri 09 May 2025 02:00:49 +0000
Manifest next update: Sat 10 May 2025 02:00:49 +0000
Files and hashes: 1: Pi13Jn_f8QNwlYweA6cENA4uaSs.roa (hash: UZD7c+7NUs2opXS6uWJEcxhLpAXCSZYdWwe68q1uABI=)
2: hI2YANad664Rt_gWHDzogYH957Q.crl (hash: 0wkJ4VS2WjIBXRohnmTItVi6gEI0Jp/sZm1Qnil+YkQ=)
3: kSeV1NXuoW2kMAhRuEJXNL0G3J8.roa (hash: BCpFIjkEeCfOQHY9iAYyAPzCmQqEp82NEt+xGk7yxzQ=)
4: sXoE76O0g9HbvTQdsrTuLQ6BEGY.roa (hash: 2c9XhIaXdBcwGvuorQuJKcEG+b0v5OcuRLvlracJLGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b2:c6:1a:91:1a:69:70:c3:36:cb:cc:5b:15:0c:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d9800d69debae11b7f8161c3ce88181fde7b4
Validity
Not Before: May 9 02:00:49 2025 GMT
Not After : May 10 02:00:49 2025 GMT
Subject: CN=d765559a29623c9adff9c352ee348ba1b99231be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6a:9b:79:86:33:84:10:97:43:c8:7f:94:8c:
d1:45:61:f6:dc:07:eb:3f:76:7a:18:71:19:5f:3c:
82:f8:88:9b:4a:a3:66:d8:1b:60:3b:0d:4f:66:0c:
0f:2a:01:91:ed:ea:58:a7:01:82:fc:56:fb:c2:46:
4f:45:fa:4f:94:a6:21:c8:b0:59:ad:bd:1b:78:a1:
d8:fc:73:95:54:35:3e:0a:74:c7:d1:00:48:a8:9a:
e6:ab:78:d6:b5:64:48:27:cc:7a:49:61:68:22:28:
c2:c6:86:ba:23:4c:a1:2f:c3:c6:a8:9c:65:c1:c8:
20:7c:96:f7:e9:3a:2b:84:9e:3b:50:a6:ac:14:db:
e0:2d:f5:b8:99:bc:16:33:1d:b7:57:33:63:12:e4:
a6:eb:9d:ca:4d:b4:a3:0c:e8:8f:ee:5f:28:c5:96:
6d:57:a9:2e:3d:aa:97:59:d0:cb:76:27:0c:89:d8:
6e:16:f3:b5:e2:10:c1:76:84:64:ff:8a:22:27:96:
9d:1b:e5:30:d6:ea:75:b9:9b:4e:43:33:cd:d4:17:
10:c2:d4:68:98:d8:83:0f:63:76:2d:aa:b2:78:be:
56:ff:c5:a0:0a:c1:67:7d:e9:30:c4:af:e9:66:9a:
64:45:e2:da:04:ce:03:b4:3f:d4:eb:0c:68:ce:23:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:55:9A:29:62:3C:9A:DF:F9:C3:52:EE:34:8B:A1:B9:92:31:BE
X509v3 Authority Key Identifier:
keyid:84:8D:98:00:D6:9D:EB:AE:11:B7:F8:16:1C:3C:E8:81:81:FD:E7:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI2YANad664Rt_gWHDzogYH957Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/387136-3c70-4619-8321-3d93fe6d20aa/1/hI2YANad664Rt_gWHDzogYH957Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:fd:6d:b3:d2:3b:61:0c:39:7c:39:f1:73:32:8e:83:7d:f3:
a8:be:d0:da:7d:29:7e:59:0c:9f:5f:63:44:6d:e6:7b:2a:d2:
bf:29:3a:aa:d0:04:c1:df:0b:23:cd:83:9d:9b:ac:6e:25:5f:
cd:45:c9:a0:92:21:3e:68:25:e4:5e:23:b3:d0:72:be:a6:0e:
27:23:f1:72:e7:0f:f5:59:a8:b4:30:f1:3c:f1:ee:d6:d8:f9:
d8:ec:30:3f:96:9a:e8:b6:fb:3f:a6:8c:4c:41:8c:fd:67:9e:
b8:75:b6:2d:59:02:1e:b3:7b:fa:20:b8:d3:df:cd:c5:bf:c5:
6e:ec:72:c3:f4:2e:1d:90:95:dc:9c:a3:f4:ec:21:fe:49:0f:
9c:d2:3f:1a:5c:87:63:ff:13:1e:2a:ba:79:8f:1b:18:99:16:
24:b4:0f:2a:74:8f:a2:6d:66:a5:13:fd:fc:4b:a7:ff:56:49:
0c:7e:e0:45:37:aa:e4:73:77:0c:fb:71:4a:69:c4:a8:04:3b:
65:c7:54:10:1a:56:5f:59:7f:65:1a:b2:bf:80:89:ae:6e:69:
d7:e7:3b:78:47:e2:9a:b3:86:cd:28:fa:1a:fe:1f:fd:75:2f:
8d:6d:ab:09:03:f8:68:4b:3a:3b:df:29:1d:15:26:66:a1:a8:
cf:74:21:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:11:47 2025 by rpki-client