Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
File: hst0KgO8nIVQcheiUgTf_4L8zfk.mft (raw, json)
Hash identifier: mA7nau4BJDZYDgIUuDyqcmAqdfHkKSCiL9fCwhtloj0=
Subject key identifier: 94:46:5F:3D:33:7C:DB:5B:B7:51:51:C2:07:FB:CF:56:9F:CA:80:0A
Authority key identifier: 86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
Certificate issuer: /CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Certificate serial: 0196B5FE0A4759F5DEAEA0B4CEC4E39BB2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
Manifest number: 0E3B
Signing time: Fri 09 May 2025 17:00:46 +0000
Manifest this update: Fri 09 May 2025 17:00:46 +0000
Manifest next update: Sat 10 May 2025 17:00:46 +0000
Files and hashes: 1: 1-TKHNCKbZE8g4XJcuPLU9wUNwXw.roa (hash: 4YE3N5IWvrJIb1gbK5UKUvbBqNqAEHWjC5reIu6mjb8=)
2: LbhZMBeDnr1qMQnMxvTged4AkBg.roa (hash: emzGjVkdxSZb/ajPZYnZYJApon4Jb9kZGLpvd1zwrzU=)
3: P4l18X0E6wGAiypR58C2CsBAfew.roa (hash: V35a2kBLapjAgjmC/NuotWMp7OBF1Qv4aZCQYf/dZTg=)
4: YfG3Zer9S1-dTwVZ058bt2jGz7A.roa (hash: 2aerzGz5WDeQmLCPvnO2oE90pi2KsboywKSSiTQQgEI=)
5: hst0KgO8nIVQcheiUgTf_4L8zfk.crl (hash: c4j5jepmLatDw1Aldo2AiTNNwldGctYI5cjBTveLglA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fe:0a:47:59:f5:de:ae:a0:b4:ce:c4:e3:9b:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cb742a03bc9c85507217a25204dfff82fccdf9
Validity
Not Before: May 9 17:00:46 2025 GMT
Not After : May 10 17:00:46 2025 GMT
Subject: CN=94465f3d337cdb5bb75151c207fbcf569fca800a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:27:eb:75:8c:d5:be:9d:c8:9a:f5:23:9d:
37:54:c3:66:74:75:24:1b:34:1b:d9:1e:1e:f9:24:
cd:6f:d1:33:ae:b9:d5:30:38:2e:3e:a4:4b:67:37:
45:cc:94:23:19:31:2c:ee:ea:8b:8e:ec:8a:ff:46:
3e:34:bf:d8:05:06:3e:9c:5b:a0:57:ca:e8:a2:f2:
0b:e6:89:39:86:d5:fc:9e:87:44:3d:1c:b5:c0:a8:
63:db:e0:f2:55:c7:34:fb:a3:c7:f9:50:ed:54:50:
02:0a:28:c1:b0:eb:76:31:a4:a5:93:c6:d4:24:95:
76:f9:23:9e:5e:cf:e7:af:94:96:a2:1a:fa:cc:0d:
ec:35:bb:32:13:f4:4f:54:a7:c6:36:f7:1a:48:0a:
16:f7:3b:f3:3e:6f:4f:8f:a4:6f:bd:85:d7:1f:4f:
87:fe:ff:8c:46:1d:e3:62:18:e5:86:72:a9:d9:a1:
da:7e:70:50:36:fd:fd:72:c0:62:b2:fb:27:31:35:
f0:55:59:aa:99:f8:09:1c:41:2d:5e:5f:60:30:21:
b1:cb:b7:2a:e6:00:3a:ff:1d:5f:f0:75:3f:fb:f1:
d3:63:62:d0:34:04:ec:d0:56:bd:ce:d5:49:b5:84:
b7:b6:12:bd:b1:1e:63:60:b7:a1:49:66:d0:4f:6f:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:46:5F:3D:33:7C:DB:5B:B7:51:51:C2:07:FB:CF:56:9F:CA:80:0A
X509v3 Authority Key Identifier:
keyid:86:CB:74:2A:03:BC:9C:85:50:72:17:A2:52:04:DF:FF:82:FC:CD:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hst0KgO8nIVQcheiUgTf_4L8zfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/767ae5-b9a2-4993-81a8-05f18fc212a7/1/hst0KgO8nIVQcheiUgTf_4L8zfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:84:f3:83:fa:9e:a2:75:06:c1:41:11:95:72:38:41:cd:97:
e3:79:c6:3a:5c:a9:dc:83:23:95:9b:36:fb:67:bc:80:f7:df:
20:5d:3a:7e:9d:8b:da:03:22:56:f7:b7:a6:3f:12:7b:c3:e2:
79:93:77:b6:4b:96:9b:18:50:2c:e9:50:31:7f:13:21:5d:1c:
06:73:f3:54:c1:3c:d5:2c:33:d3:48:54:28:1c:75:b6:85:31:
f9:d2:14:ff:e6:89:a0:86:40:a6:f3:66:ab:b3:25:43:ea:24:
77:23:c7:93:4a:79:04:64:37:60:52:d7:c1:a1:c9:04:10:55:
88:e6:1d:ef:21:c6:0d:e6:50:96:f7:17:4b:72:74:0b:e5:33:
1b:43:8e:ee:14:e3:fb:e5:ad:7e:58:e0:42:74:17:2b:44:6b:
8d:37:74:fa:b3:7a:05:3c:af:f0:8c:63:ac:f9:42:1d:9d:ff:
57:6d:ac:75:a8:c7:7c:f9:80:c5:2d:bc:06:e5:18:de:f8:3b:
ba:d4:df:c6:2c:3f:c8:31:2d:b1:14:95:c0:10:a4:23:c1:de:
a2:cd:e7:7c:d2:f3:1f:0c:98:02:3e:76:5d:78:16:db:1c:11:
66:94:a8:72:df:30:34:3d:11:e4:37:90:a7:c1:e6:cc:7e:9e:
d1:79:21:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:48:42 2025 by rpki-client