Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
File: HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft (raw, json)
Hash identifier: 3OxUNTzqopltgU8zHNN8GaLPhTznqSgDj0iAkTYQLR0=
Subject key identifier: 5D:3C:37:CF:68:D7:C1:6D:80:3E:0B:0B:90:7F:30:D6:A6:33:82:84
Authority key identifier: 1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
Certificate issuer: /CN=1c766b058c096753a34ad625d53275cd2dba5b33
Certificate serial: 01967D8EF68AEFE13B60EEC2DB954F14C0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
Manifest number: 1257
Signing time: Mon 28 Apr 2025 18:00:43 +0000
Manifest this update: Mon 28 Apr 2025 18:00:43 +0000
Manifest next update: Tue 29 Apr 2025 18:00:43 +0000
Files and hashes: 1: 3xjGI42bQNLx70HTJ7kXgEwsSsw.roa (hash: GpJV9iaqS5V9Mqcyg97TbadTb1FKNWn4xyXU6QZ9kGs=)
2: 8NRfsUTuURGgy6LvURHgXAUYZ-g.roa (hash: 1qJKisnCOTNkYdR9Qi95p8WJ2QZapPEQJWApMHtlHz0=)
3: HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl (hash: etO3WHxt+kfJK43Rvw2UGrl3nEmsCTma1hNl/kniW3U=)
4: NP32WyfLeYLas1Z4fKTZriuHjvY.roa (hash: 4h/Yftv2raMAxvFI+CPfL3bUOHVTko1YvlzTzC+9xKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:f6:8a:ef:e1:3b:60:ee:c2:db:95:4f:14:c0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c766b058c096753a34ad625d53275cd2dba5b33
Validity
Not Before: Apr 28 18:00:43 2025 GMT
Not After : Apr 29 18:00:43 2025 GMT
Subject: CN=5d3c37cf68d7c16d803e0b0b907f30d6a6338284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:b9:e2:f5:3c:65:8b:02:47:c2:7e:10:18:
16:2a:15:d5:96:a5:12:69:80:6b:d7:eb:99:f7:01:
25:a3:7a:6b:92:14:6f:53:22:b3:23:db:64:97:c5:
e8:ed:cd:9f:98:17:b1:e9:9c:8b:2f:a9:1e:4e:ab:
b9:53:39:34:da:af:80:52:3d:f8:7a:81:3c:d6:4f:
bf:fc:8b:cc:e5:94:36:a2:7b:e6:3c:76:41:28:d1:
af:fa:9c:9c:28:da:fc:87:23:ae:30:70:e6:31:75:
34:a3:31:ce:ee:78:49:83:44:39:9c:b8:79:3e:9c:
91:30:7f:03:de:4f:9f:3f:22:65:42:8b:25:b5:46:
e6:df:2c:3f:70:9d:6b:e3:d2:41:b6:d4:c6:97:a8:
8e:e7:c4:85:0e:59:bb:e3:b9:9e:b0:62:21:cb:17:
dc:e4:d8:21:5f:62:d0:01:15:bf:d9:cb:af:d3:88:
ff:d6:9f:06:aa:97:15:b2:f7:dc:ad:7a:b3:f9:16:
27:e1:d4:76:e2:cb:ec:65:3f:ea:28:de:67:62:6c:
a6:73:dc:bb:6b:8c:80:88:af:fa:16:8b:f9:c9:5f:
3b:f9:3b:66:df:b4:33:9c:0b:b5:c5:72:39:1c:9c:
61:02:e9:25:d8:20:ef:18:83:48:54:7b:2d:fa:d9:
b8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:37:CF:68:D7:C1:6D:80:3E:0B:0B:90:7F:30:D6:A6:33:82:84
X509v3 Authority Key Identifier:
keyid:1C:76:6B:05:8C:09:67:53:A3:4A:D6:25:D5:32:75:CD:2D:BA:5B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHZrBYwJZ1OjStYl1TJ1zS26WzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ab83dc-c0e7-4ec3-af72-81917dffdcd7/1/HHZrBYwJZ1OjStYl1TJ1zS26WzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:bb:f5:b3:ff:12:65:fc:eb:26:15:ac:93:14:bc:3c:a7:4c:
86:38:4f:cb:d4:79:4b:dd:2e:67:de:fc:9e:73:b8:47:c0:3e:
5b:57:38:82:27:e5:c2:fa:e4:8b:72:6f:b2:08:58:e8:84:79:
f7:05:19:ad:3f:72:a7:ec:ff:b5:f4:c5:a9:fc:0c:60:b0:95:
ad:a6:5f:b4:09:c2:0c:9a:83:d0:c5:a7:0d:5f:bd:8b:2d:2c:
36:5f:61:47:58:4b:43:44:e7:96:4d:76:ae:11:58:92:30:b2:
ff:13:b0:3a:00:38:0e:ea:c8:87:3e:2f:2c:b5:fa:3a:07:53:
07:c6:56:d7:b0:b2:31:da:2f:6c:47:04:be:3c:39:5d:e8:1c:
8e:0d:7f:d6:e8:92:f6:3a:da:44:1b:d9:33:04:63:42:fd:24:
61:80:fd:88:4e:e0:50:90:0f:dd:41:9c:58:c6:d8:0d:d1:73:
c6:21:b5:19:e6:b2:c2:8e:ae:58:99:2b:7a:6a:47:e8:18:ab:
5c:01:41:0f:f0:52:18:bd:22:d4:d0:a9:92:19:da:65:f9:2d:
82:2b:fc:2f:a2:e7:98:ef:bb:17:20:f4:78:e1:d1:b8:13:6e:
7e:d3:4f:03:5e:e8:20:51:4b:1c:a4:65:9b:8a:2e:d0:b3:63:
ae:28:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:33:32 2025 by rpki-client