Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json)
Hash identifier: atvBDCaEZPsu/UIwqlq2jCGn89wHqkZB9glXVzyxyxM=
Subject key identifier: 50:D8:F9:32:9D:83:70:2C:B2:57:BB:3A:1E:F4:3D:06:3F:77:33:41
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 0196B0A0D4C468DFA389AE0B7106443E4AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
Manifest number: 0CF0
Signing time: Thu 08 May 2025 16:00:52 +0000
Manifest this update: Thu 08 May 2025 16:00:52 +0000
Manifest next update: Fri 09 May 2025 16:00:52 +0000
Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=)
2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: NXPawqAaPFHY64eZgHyBSNkEMRP+rCDX+dyhARRzfAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:a0:d4:c4:68:df:a3:89:ae:0b:71:06:44:3e:4a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: May 8 16:00:52 2025 GMT
Not After : May 9 16:00:52 2025 GMT
Subject: CN=50d8f9329d83702cb257bb3a1ef43d063f773341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:a4:86:53:8a:9a:2b:64:55:92:3a:f9:a1:
ba:c5:8f:fa:68:03:e2:4d:bd:ba:16:0c:a2:b1:d7:
90:2d:d8:fb:4c:c3:ef:d2:fe:c0:9d:3d:db:fc:2a:
e0:b8:ba:c2:b3:51:2c:c9:cf:90:4e:5a:d1:da:0c:
11:21:27:b1:c6:1b:65:34:9e:ce:bd:14:7c:87:8e:
14:8d:e5:b9:39:e7:2e:ff:b8:13:b9:44:c4:ce:eb:
1d:85:84:9d:a3:3c:27:8d:9a:af:42:9b:dd:82:47:
94:73:b1:27:ac:9d:86:0a:2c:c8:8d:01:d0:98:b4:
5d:84:2c:27:f1:21:56:db:9e:86:e5:b6:61:52:54:
c5:2b:93:a7:92:2a:e9:3e:20:3e:52:93:b4:e3:51:
27:e0:4d:d8:ad:a5:9d:9a:20:87:9d:47:af:ac:2a:
d8:32:26:ef:a0:61:c0:30:07:49:0a:cd:26:de:27:
de:e3:c6:64:ee:c2:64:74:a5:85:68:9a:c0:22:aa:
99:65:c4:8e:90:88:85:83:82:7a:a1:78:c3:1e:2f:
f1:7e:0e:ef:9a:8e:0d:e7:78:b9:7a:28:f2:58:2d:
ab:7c:3f:18:13:80:a3:48:e6:ac:c5:27:f1:cd:90:
e9:82:a3:8d:09:20:28:0a:0f:79:b5:91:06:51:6b:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D8:F9:32:9D:83:70:2C:B2:57:BB:3A:1E:F4:3D:06:3F:77:33:41
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:89:73:d8:f7:ae:69:02:7b:a3:e0:93:7a:f6:b1:ea:ce:1b:
5a:e5:27:c9:11:72:c0:fe:7c:cd:8e:a2:14:70:25:63:06:1f:
d0:fb:7a:18:a2:55:fe:06:d5:f8:bb:f9:c9:f8:7e:ed:02:0d:
5e:21:98:cb:72:84:af:36:37:a1:d6:01:ea:60:3d:a8:1c:a8:
d3:af:fd:5b:8d:13:ee:22:cc:ba:09:21:61:9a:5d:1c:82:ab:
cb:b5:57:17:a4:42:31:20:0e:32:9a:22:0c:56:de:7a:23:fe:
68:fe:18:d4:5b:94:22:3e:83:4a:c4:1c:a2:aa:97:fa:be:90:
0b:75:43:53:e6:18:f9:04:05:b9:4e:5a:ec:af:23:36:96:13:
ce:c7:b4:ba:f1:b3:1e:99:3f:34:f1:02:cb:30:b3:e9:13:1d:
00:b4:6a:db:6b:d4:6e:f4:91:45:a6:1d:7b:a5:81:ae:b0:09:
76:9c:7b:1c:e0:93:09:ef:38:3b:0a:2f:a5:d2:cf:90:65:61:
54:01:83:00:9f:02:aa:e9:7a:17:eb:fc:8e:93:4a:2e:a4:dd:
13:62:9e:b1:bc:47:60:55:49:bc:fe:f0:57:74:d8:8a:5a:7d:
fc:24:74:95:49:46:92:97:c9:66:5e:04:a2:a7:99:ab:2a:fd:
69:1f:20:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:03:20 2025 by rpki-client