Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
File: hRJy5OgYa5zz0etCZlxTznFPTUs.mft (raw, json)
Hash identifier: PkVyCYZ9zMbRB/lHxY/tWK74C8n5GuEGVVxGTygBnnA=
Subject key identifier: 57:D4:E1:1E:4E:01:CC:75:4D:40:6E:B6:93:2F:CC:BA:73:40:2E:58
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 0196A578316CB418A7C007A7BF73B6B01794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
Manifest number: 11BB
Signing time: Tue 06 May 2025 12:00:39 +0000
Manifest this update: Tue 06 May 2025 12:00:39 +0000
Manifest next update: Wed 07 May 2025 12:00:39 +0000
Files and hashes: 1: KIolqJ5Rs9ZhvtnGtDf7moJJ2_E.roa (hash: d0kz1GVWlhFBJRVBQyJqX/EmCfxG7jLUjxwkYTyT+k0=)
2: OIw1IENePZ-upkTKRtn8rlZjiKY.roa (hash: zOqnUi4pX1IWvLYQ+EBAhcXccgQfhAY/XDiO0iIVI4U=)
3: hRJy5OgYa5zz0etCZlxTznFPTUs.crl (hash: GW3WH9zQNoSdI7U5GAAVt8TihcKB9Rk7KKsS0rUsif8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:31:6c:b4:18:a7:c0:07:a7:bf:73:b6:b0:17:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: May 6 12:00:39 2025 GMT
Not After : May 7 12:00:39 2025 GMT
Subject: CN=57d4e11e4e01cc754d406eb6932fccba73402e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:f9:e9:c1:b4:67:93:11:6e:02:d8:29:c8:
b4:8a:c1:30:c4:1f:55:de:b8:73:dd:e2:88:e9:09:
4e:68:8b:7e:f4:ef:c2:29:b7:5a:f8:e8:6e:6c:18:
df:ce:4e:33:a2:dd:12:98:6d:51:58:d0:c6:f8:f8:
da:49:b0:84:74:d5:96:9a:51:c1:d9:78:35:ec:1d:
d7:6a:49:3b:69:17:07:22:b7:26:ef:8e:5b:8a:b2:
ee:a6:eb:74:7a:f5:f1:79:59:ae:b0:d1:91:88:bc:
5c:ee:b3:62:4e:2b:1f:be:34:2b:d6:b2:a2:9d:38:
df:35:a1:d5:a0:08:f3:2b:8f:0f:07:0f:59:9a:e2:
f7:92:44:90:6f:ce:22:6d:dc:fa:2b:3c:8b:d1:9e:
8a:7f:a2:98:18:6e:e1:93:a9:53:2d:78:07:e6:67:
c6:b3:b3:f3:56:32:5b:55:f9:ca:76:de:13:09:29:
36:b3:a4:c8:81:84:17:03:c4:b4:ba:09:d0:11:d0:
ca:71:6a:c3:8e:f1:7e:95:ca:54:bf:80:b5:83:b6:
1b:e7:79:57:40:ac:f2:c1:f9:ab:e3:cc:9c:a6:75:
8b:cd:3a:5f:6b:f0:fd:60:97:ba:17:a7:6e:67:6d:
5a:f1:2d:6d:7c:19:58:54:d7:74:00:65:69:c2:9a:
41:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:E1:1E:4E:01:CC:75:4D:40:6E:B6:93:2F:CC:BA:73:40:2E:58
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:10:ea:b2:ca:5c:98:38:c5:e8:b7:06:3b:cd:51:30:91:b3:
63:4a:cf:ec:0e:c9:4e:86:c3:06:da:63:cb:cc:e3:40:d4:ff:
38:49:30:0b:fc:ac:fb:f3:11:38:71:d1:86:24:40:2d:19:02:
10:9e:08:b2:71:79:4d:08:8d:de:72:44:91:ed:ae:c2:e7:e4:
6a:84:db:1e:5b:fd:ff:73:e8:e8:b8:62:96:25:f2:01:ed:44:
a0:3e:50:ae:13:cc:75:7d:db:99:cc:52:36:18:90:97:df:49:
70:af:ef:02:ef:15:09:56:ee:cd:ea:78:d7:b0:85:9f:c4:a7:
01:3b:f9:d4:c1:7b:6f:93:50:c1:d7:af:ce:46:19:65:b5:d3:
1d:6e:d1:90:47:b6:35:01:1e:23:4c:aa:f9:28:41:af:e7:ef:
b6:72:d8:cd:ae:63:12:c5:67:e8:38:cd:24:8c:55:4b:54:48:
3f:d5:b1:65:ca:57:89:a9:18:55:3b:35:68:45:6b:c1:28:69:
a1:df:4a:93:4b:4d:54:4a:cb:3e:83:a4:20:b3:12:81:d0:5d:
d8:0a:48:26:ff:1d:0f:04:2b:40:3e:d3:09:d6:25:55:26:01:
3c:c6:ff:da:66:b8:a8:27:c7:93:0d:3e:d9:37:61:63:3e:60:
6c:93:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 21:03:40 2025 by rpki-client