Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
File: HCcW7wn65JDMfNvTYJTbXz0KHHI.mft (raw, json)
Hash identifier: p9M46BwffOAJ9yF2yP99TxViuJ+XREpHYio+tSFvaV0=
Subject key identifier: CD:83:D0:F7:DD:A4:D4:3C:A6:72:10:B2:A5:1F:8F:30:70:F1:18:52
Authority key identifier: 1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
Certificate issuer: /CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Certificate serial: 0196B935F6B62C20BFF4DDB39F613C0CA668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
Manifest number: 04A2
Signing time: Sat 10 May 2025 08:00:43 +0000
Manifest this update: Sat 10 May 2025 08:00:43 +0000
Manifest next update: Sun 11 May 2025 08:00:43 +0000
Files and hashes: 1: CpQOplnmKu5LLulHc8JnvbebR4w.roa (hash: 5reIQFf+aPQY/29qAhB9EgFnG+Par8TwmIu2wMdsT6g=)
2: HCcW7wn65JDMfNvTYJTbXz0KHHI.crl (hash: 2zMhKnMYA8+wSVTSq0NyOfLxpBl0rREDArSrSfdnf2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:f6:b6:2c:20:bf:f4:dd:b3:9f:61:3c:0c:a6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2716ef09fae490cc7cdbd36094db5f3d0a1c72
Validity
Not Before: May 10 08:00:43 2025 GMT
Not After : May 11 08:00:43 2025 GMT
Subject: CN=cd83d0f7dda4d43ca67210b2a51f8f3070f11852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:f8:1d:9b:90:b9:1e:c5:04:0c:ea:8f:93:
51:fa:8e:0c:e8:f0:8d:d1:c4:66:18:71:08:3f:fa:
8a:6c:a5:aa:65:01:f7:83:ce:2e:1c:01:9a:bf:ce:
06:93:07:fe:50:a4:73:19:e7:9e:ac:2c:fc:13:c8:
f8:ae:04:27:78:b2:cb:60:83:6a:87:2f:ff:22:ef:
eb:25:7d:bd:60:a4:51:b0:50:8d:10:ea:43:6e:d5:
5c:ed:31:c6:bf:bd:fc:63:dc:90:6a:b5:3b:43:51:
f6:4d:86:29:a7:27:c3:fc:56:40:41:60:89:35:c0:
de:2a:51:1f:6a:d0:24:a3:1c:cf:c4:f9:07:ba:80:
4f:f5:f7:ef:50:a5:70:2e:55:8f:f3:17:4f:a6:46:
ac:f7:ab:73:c9:84:db:33:f4:ea:a3:ba:e7:8a:9e:
bb:2e:dc:23:0a:ba:54:69:53:43:2d:4a:5f:8b:b0:
9f:05:0c:7d:0f:da:84:68:27:b2:cf:dd:5d:b0:c3:
20:64:02:4b:7c:88:ed:d2:ba:a4:f9:80:e6:85:41:
2a:6c:bb:42:ce:e3:e3:da:d5:79:5c:8b:c8:b2:5e:
a0:24:d2:26:e9:9b:21:88:2e:d3:d4:4d:83:71:73:
be:60:a9:44:04:e5:10:fa:eb:2f:89:35:58:4a:2e:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:83:D0:F7:DD:A4:D4:3C:A6:72:10:B2:A5:1F:8F:30:70:F1:18:52
X509v3 Authority Key Identifier:
keyid:1C:27:16:EF:09:FA:E4:90:CC:7C:DB:D3:60:94:DB:5F:3D:0A:1C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HCcW7wn65JDMfNvTYJTbXz0KHHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6a7ea2-abfd-44d2-a7ae-14d1ac34a5f2/1/HCcW7wn65JDMfNvTYJTbXz0KHHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:49:2c:01:f3:a9:11:49:da:ad:50:cc:28:f9:9e:7a:79:
04:f1:c5:d7:fe:f9:ad:84:6f:92:f4:e0:d9:60:13:2c:31:6a:
8b:65:ba:51:b0:63:e9:31:e1:58:35:e6:75:1e:93:68:ae:27:
83:9b:f5:e4:6c:c1:11:1b:63:d7:96:29:fe:ab:94:7c:a5:2d:
0c:95:7f:6d:f9:66:73:c6:9b:f5:da:42:c5:36:70:e5:2e:b8:
f9:33:d4:c9:d0:b8:07:fa:83:e9:f4:61:93:f2:f5:02:fd:08:
97:0d:94:7e:cb:aa:07:3a:7c:5a:cb:2a:29:2e:a3:36:31:e2:
eb:11:06:43:5b:a0:26:b0:02:f2:8d:53:b0:e2:a7:94:bf:48:
ad:b1:e7:97:e9:fd:22:3d:c8:7b:bd:96:e5:cf:33:f4:77:e7:
aa:85:e0:10:56:72:39:ef:99:0a:33:29:34:a8:ec:01:56:d8:
58:e3:e4:67:87:14:97:74:af:24:1c:56:e6:a0:4e:ba:e7:2c:
e3:71:2e:b9:77:8d:ea:6a:b0:f8:4e:07:fe:8d:72:06:9d:cc:
d9:bf:46:3c:59:19:9d:99:ed:96:a9:b3:d2:eb:30:76:ff:d7:
c2:b1:8e:68:f5:db:28:54:da:9a:64:ce:21:49:10:df:43:fa:
98:13:1c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:59:59 2025 by rpki-client