Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
File: hEcK8NideFuhi6YX3Anj9yxZlvM.mft (raw, json)
Hash identifier: AwP7Ay0Ynd50vGTRvRbhBVVlVt67O/t/2DHZ50CUa9M=
Subject key identifier: 3B:73:06:9E:2B:A4:2C:86:C6:D3:D5:79:EC:78:43:D5:68:7C:32:83
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 019675D519ADAE4C1258B7204DED8ECCE9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
Manifest number: 0695
Signing time: Sun 27 Apr 2025 06:00:22 +0000
Manifest this update: Sun 27 Apr 2025 06:00:22 +0000
Manifest next update: Mon 28 Apr 2025 06:00:22 +0000
Files and hashes: 1: 9ZZlEoJ6DOwFDIJbfzBhtXucSCo.roa (hash: e3MsAliQl7R+w6WCs9Je3nF/3YOrMW2JU+QDq2FQ+FM=)
2: hEcK8NideFuhi6YX3Anj9yxZlvM.crl (hash: lzIWtgOvNv8xIYE8oFIJm5S52GL3tOwkYosySUhCVJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:19:ad:ae:4c:12:58:b7:20:4d:ed:8e:cc:e9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Apr 27 06:00:22 2025 GMT
Not After : Apr 28 06:00:22 2025 GMT
Subject: CN=3b73069e2ba42c86c6d3d579ec7843d5687c3283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:07:3a:5b:6e:d1:b0:75:95:0f:80:2a:b3:5c:
c8:ab:b9:81:10:2a:cd:16:02:2d:44:47:98:92:4d:
f0:46:6e:35:03:54:55:59:27:4d:02:e6:70:2f:43:
de:86:f5:c1:ab:e3:8d:26:66:38:96:8a:4a:b9:1a:
99:06:a8:06:75:2a:61:c5:07:09:73:2d:07:57:a7:
dc:e8:bb:05:b9:a0:34:ba:f1:76:8c:7e:0a:31:9d:
b0:9a:91:dc:88:e3:ed:a1:06:53:90:09:a0:68:33:
cb:d3:6d:4a:14:02:6b:1d:83:d9:dd:0f:bb:fd:15:
ab:41:c9:e7:69:ae:a2:37:0a:e2:7d:b3:a4:45:7d:
be:68:43:d7:ee:18:c2:c9:c3:76:11:f9:bb:98:19:
6d:c5:a1:84:cb:ea:47:79:e6:3a:62:79:8b:16:18:
be:37:97:2f:ce:b9:c8:6b:70:df:34:bc:44:7b:06:
55:3f:64:8c:d8:d6:a7:7f:94:64:04:e8:37:d9:ed:
15:f4:5c:9a:13:99:04:8e:1e:fa:eb:7d:37:ce:5b:
71:37:c4:59:c5:85:ba:f6:d1:b9:c6:06:83:8e:53:
a9:d7:bf:17:b8:6c:3c:c5:ce:65:9e:81:e5:13:32:
d3:c9:e8:96:3f:0b:b7:99:a7:8d:13:ec:9c:0f:91:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:73:06:9E:2B:A4:2C:86:C6:D3:D5:79:EC:78:43:D5:68:7C:32:83
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:54:0f:44:24:7e:37:41:14:10:ed:0f:46:4a:ce:50:67:9d:
70:c4:2f:66:3e:53:85:22:02:bd:45:09:7f:06:6c:ce:83:70:
b0:a0:a7:7e:44:b5:ce:1f:a5:70:78:95:88:98:8c:bc:1c:19:
3f:b8:4a:c0:78:c8:45:c9:18:0d:5c:44:cb:6f:01:38:61:61:
e0:93:bb:6e:6d:e8:03:a3:3c:6c:5a:e3:a1:de:8c:c6:c2:2a:
cb:d1:1d:18:ad:19:c1:13:39:66:da:79:f3:a8:99:61:91:cf:
bf:e3:69:9f:f1:2a:63:98:70:d8:98:40:94:17:5c:88:26:2f:
49:64:17:f3:83:5f:1b:34:fd:9c:2e:c2:f9:2a:da:e6:5c:43:
f1:52:ea:9a:2c:e4:71:5e:63:f2:f6:f6:e5:21:df:36:40:b1:
83:fc:8a:61:7a:01:3d:0c:07:1e:77:92:f8:d1:17:cd:59:b8:
10:1f:66:92:5d:d1:69:ac:9c:37:dd:02:c5:44:ab:76:87:bc:
3c:ee:15:3b:8a:19:82:17:9b:3f:02:ee:45:22:ce:90:6c:0f:
9e:53:3b:fa:24:57:bb:be:07:e1:b3:ec:8b:cf:90:5f:47:23:
8d:a7:1f:25:03:01:ce:be:2d:33:e1:af:9d:ae:65:da:ed:52:
15:2b:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:53:07 2025 by rpki-client