Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
File: hhxnvbbYwjD820J6n3G4ATWHL8I.mft (raw, json)
Hash identifier: NKjdIgS0PXn3zKJmMFqPHT/8lzHqTF/k3xjRiW3qFDY=
Subject key identifier: DF:19:66:8F:5F:B7:B2:72:80:FC:09:4B:9E:58:B1:78:CC:EF:88:24
Authority key identifier: 86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
Certificate issuer: /CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Certificate serial: 019675676DF4BFB47D76C892AF26C645E72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 04:00:34 +0000
Manifest this update: Sun 27 Apr 2025 04:00:34 +0000
Manifest next update: Mon 28 Apr 2025 04:00:34 +0000
Files and hashes: 1: fY3YUzeQR4J5mSVlYztPydyoN5Q.roa (hash: mNZawaVbKUAZ9lV1chbhqIOQeYk5Gz7JPB6mT6lLW4o=)
2: hhxnvbbYwjD820J6n3G4ATWHL8I.crl (hash: VHMdVNTlHgDHl6iDs+2OJMDPOb0WTm9XyQmel1t+Yr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:6d:f4:bf:b4:7d:76:c8:92:af:26:c6:45:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=861c67bdb6d8c230fcdb427a9f71b80135872fc2
Validity
Not Before: Apr 27 04:00:34 2025 GMT
Not After : Apr 28 04:00:34 2025 GMT
Subject: CN=df19668f5fb7b27280fc094b9e58b178ccef8824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:07:56:72:65:a8:d6:ba:28:ff:83:43:53:
cc:58:f9:ee:a2:81:bb:21:52:38:06:1b:fe:ad:a3:
3d:55:cd:07:66:96:e7:a6:aa:13:bd:a3:e8:81:d7:
6f:02:b6:a5:8a:2f:46:b7:5c:27:1a:40:c9:2e:94:
65:ed:af:d3:2e:b9:a3:a7:8c:ac:ab:c1:32:34:ee:
bc:b6:1d:ec:9c:fb:44:c6:be:2a:74:5a:25:fb:e4:
e1:7c:68:5a:e1:c7:ce:7a:b2:6b:c1:bf:1d:9b:c6:
45:5c:4f:45:84:ec:ad:47:a2:e5:69:c2:d7:ac:e2:
57:c1:5e:a4:e5:82:44:aa:85:f4:58:e9:95:2c:46:
b2:01:06:3d:aa:eb:2d:50:e3:96:b1:80:a0:d7:bf:
a1:af:a0:89:4d:5a:ea:4b:c2:52:f7:da:2a:f2:aa:
90:7c:45:46:b2:89:44:52:ec:71:8b:3d:2c:95:72:
f4:36:4f:b7:3e:a2:17:6b:0f:67:dc:7c:00:66:a0:
ca:6f:bc:2b:8a:7f:4d:a8:b7:05:72:e9:52:a0:f4:
09:84:f2:c1:17:d8:d5:41:d0:61:bf:38:93:b3:c7:
05:ba:11:51:64:6a:f5:5d:c9:1d:f5:8d:ed:68:8c:
d3:75:18:b9:8b:6e:ea:87:04:30:eb:4f:c0:93:61:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:66:8F:5F:B7:B2:72:80:FC:09:4B:9E:58:B1:78:CC:EF:88:24
X509v3 Authority Key Identifier:
keyid:86:1C:67:BD:B6:D8:C2:30:FC:DB:42:7A:9F:71:B8:01:35:87:2F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhxnvbbYwjD820J6n3G4ATWHL8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/8a115b-3859-4759-85ae-fb853c65334a/1/hhxnvbbYwjD820J6n3G4ATWHL8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:29:84:41:08:41:3d:51:8c:ba:c3:5c:35:ac:67:34:23:cc:
23:c4:f5:d7:93:b8:7b:64:e1:fa:68:76:81:f3:6a:a0:4c:08:
73:53:1e:73:e0:65:e7:c8:97:99:a3:08:73:44:f5:11:01:22:
8e:5d:60:96:3d:61:cd:eb:7c:7f:96:53:76:02:08:26:a7:13:
9e:af:4a:14:9c:f1:e5:f5:b5:c7:08:76:30:23:d7:cf:32:b7:
36:18:92:4c:b6:ec:0a:f3:bb:0d:67:82:cb:50:75:64:dc:40:
26:34:f6:fa:74:68:b8:48:eb:83:5a:c0:03:2c:12:76:f4:a0:
31:2e:0b:f7:38:7e:82:79:26:63:d5:e9:ba:9c:20:78:e0:ee:
bd:95:ce:9b:40:4b:c7:f7:81:3b:c7:51:06:38:5f:95:60:b9:
9e:0f:2b:73:82:91:62:58:f1:fe:86:9b:7f:b1:1b:d2:9a:f3:
c3:85:74:71:b7:cf:b6:e6:40:a4:0f:cd:29:08:45:d3:a4:31:
20:65:3a:90:e6:d4:19:af:76:c8:f4:82:c9:e7:e1:aa:fa:d3:
67:9c:23:95:ce:39:ff:d4:1a:47:bf:75:32:22:12:71:4a:18:
a7:44:32:8e:a6:e5:af:61:4d:79:44:74:b3:67:b9:b3:f6:0f:
07:3f:f6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:45:26 2025 by rpki-client