Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
File: hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft (raw, json)
Hash identifier: RWXReG0RxvFLjYPBEDVmhzuPN+oVDnlupo0XqIhptm0=
Subject key identifier: B2:D8:E2:B5:6B:D8:B5:B1:B7:23:A5:FB:15:5B:65:C3:36:15:E0:6D
Authority key identifier: 85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
Certificate issuer: /CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Certificate serial: 0196B935E81E2CA7E7599D758CAC8DDFC149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 08:00:39 +0000
Manifest this update: Sat 10 May 2025 08:00:39 +0000
Manifest next update: Sun 11 May 2025 08:00:39 +0000
Files and hashes: 1: 4NKKaipkT34nKtWhfa19D74f25c.roa (hash: YTaiys0RSHABRCWEassKEE2Fqko+03tYIMHlBHkZyig=)
2: hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl (hash: lica1BS8tzeTGyqwA+3fDAW45CE6DMMXYyM7C1hOhTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:e8:1e:2c:a7:e7:59:9d:75:8c:ac:8d:df:c1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8504ebf9db1710a47bae4508cdaf8131e1674a54
Validity
Not Before: May 10 08:00:39 2025 GMT
Not After : May 11 08:00:39 2025 GMT
Subject: CN=b2d8e2b56bd8b5b1b723a5fb155b65c33615e06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:2f:42:af:96:8d:f8:3b:4a:86:d1:a3:21:
a3:a8:36:30:40:84:7f:28:43:57:49:1c:f1:4f:95:
df:ed:ae:a2:52:ec:63:35:5f:47:04:17:1a:85:e6:
ad:2a:75:35:df:43:db:37:d8:fd:10:cd:76:da:50:
e4:d7:4f:75:29:53:bf:e4:3e:36:f4:50:8d:4e:48:
1b:19:2b:ac:c5:51:63:5f:fd:34:7f:78:ae:10:86:
54:87:3c:b9:0b:f6:4f:3e:ca:fd:0e:3b:47:8b:57:
1f:af:d5:09:0d:1f:11:0a:bf:f0:60:18:13:f0:d5:
f7:a2:ea:9d:1b:6b:65:8b:7e:b0:4e:ce:6f:ec:75:
eb:e6:cd:ec:1e:6c:af:27:c5:e5:a0:2e:d9:0c:ef:
0f:b9:86:ef:78:1a:0a:09:36:a8:af:83:f1:dc:04:
88:26:04:45:c6:4a:dc:00:5c:96:23:2b:26:87:a0:
f7:ad:30:1a:7a:40:8d:cb:67:7a:f9:88:48:f2:e0:
aa:c5:6d:91:a8:5c:68:87:b8:f1:b8:df:3a:05:19:
48:eb:19:a3:4b:b4:f4:0f:9a:9f:64:fb:dd:3f:da:
52:68:d3:d8:91:0b:16:3e:7e:69:bb:1a:f3:ac:5b:
20:05:3e:88:42:2a:47:03:28:49:bc:46:5a:87:73:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D8:E2:B5:6B:D8:B5:B1:B7:23:A5:FB:15:5B:65:C3:36:15:E0:6D
X509v3 Authority Key Identifier:
keyid:85:04:EB:F9:DB:17:10:A4:7B:AE:45:08:CD:AF:81:31:E1:67:4A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hQTr-dsXEKR7rkUIza-BMeFnSlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7efe01-ec74-40ac-a238-a9b1df44ce2f/1/hQTr-dsXEKR7rkUIza-BMeFnSlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:b8:79:58:e0:a3:a3:60:bc:8b:43:c2:86:3c:d0:13:65:60:
e8:da:99:68:c2:9c:49:a5:75:35:95:d6:ff:65:e3:5e:05:1d:
01:f7:fd:c6:d9:91:6b:95:3f:4b:ed:0f:38:c0:06:54:53:48:
89:48:85:a1:eb:e7:4f:b9:aa:5c:c1:90:2e:22:75:28:de:f7:
a5:2d:70:ff:fc:e5:da:60:d1:cb:6a:53:36:1b:2e:ef:26:85:
95:7c:14:70:21:53:af:ee:97:76:85:5a:aa:69:a1:17:45:d1:
3c:6e:81:71:f2:b7:de:93:2a:ce:1a:2a:3e:d5:3b:31:ff:42:
2e:bc:ae:8a:71:13:bf:1b:0f:38:4c:a1:5a:3b:b5:d8:61:85:
6d:95:e8:75:33:97:25:e6:3f:43:51:0d:c5:1e:7d:f2:2c:f1:
6d:a2:9d:3d:f6:17:6d:e2:77:cc:b0:19:5e:76:c6:19:e7:cf:
2b:2f:f3:22:8e:b5:8a:ad:56:07:74:34:38:2f:2a:35:09:28:
da:1b:89:78:78:96:ff:cd:fd:49:d4:07:38:33:a4:4d:1a:83:
0e:9e:59:32:cf:8c:7d:49:1f:15:cf:74:14:4d:29:6c:02:f6:
f3:4c:f5:35:39:54:71:87:b0:26:d4:43:a2:80:4e:97:0e:1f:
0e:6d:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:14:36 2025 by rpki-client