Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
File: HgUGRdac54HkkMDzxJle5tTmB4s.mft (raw, json)
Hash identifier: 5z8yMhjblcdkeQN5QOoxcUcroozzVn3B3uKqxUTGLew=
Subject key identifier: D4:94:52:6A:65:B9:6A:EF:DF:7E:25:28:73:C2:42:13:82:60:50:46
Authority key identifier: 1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
Certificate issuer: /CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Certificate serial: 01967A56BE4C254E1EFA042FD1DDD69407E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
Manifest number: 06EB
Signing time: Mon 28 Apr 2025 03:00:27 +0000
Manifest this update: Mon 28 Apr 2025 03:00:27 +0000
Manifest next update: Tue 29 Apr 2025 03:00:27 +0000
Files and hashes: 1: Cng8TcnIXSMG5gaf3EVbnwwbQjk.roa (hash: SlPAu0/v+q9AU8NTLPmY4PB0nlmzfGz86P4I7oW5+Ns=)
2: HgUGRdac54HkkMDzxJle5tTmB4s.crl (hash: lrb9Isg9C2A//sCap8yzt4iYp/eLai5lmZzF/fs2pTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:be:4c:25:4e:1e:fa:04:2f:d1:dd:d6:94:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e050645d69ce781e490c0f3c4995ee6d4e6078b
Validity
Not Before: Apr 28 03:00:27 2025 GMT
Not After : Apr 29 03:00:27 2025 GMT
Subject: CN=d494526a65b96aefdf7e252873c2421382605046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a2:be:32:1b:a0:43:87:21:27:8c:a0:e2:c8:
25:9c:7e:9a:03:62:02:67:fa:da:ec:ba:26:4d:ea:
7d:a8:a1:78:ef:ef:83:d4:89:81:89:e9:1c:ae:a7:
54:84:4f:53:e2:81:63:a5:5a:f9:42:d8:4b:08:0c:
8c:65:5c:42:43:79:b5:38:fa:b7:e5:4e:8b:f0:2c:
1a:af:c1:e4:51:1c:d0:21:df:91:e1:18:bb:c0:b5:
54:d3:d4:97:7b:b2:d0:20:13:1a:39:53:d3:17:ff:
a5:77:b1:c9:b6:c9:2f:b6:28:9b:a6:89:3a:85:08:
65:95:72:9b:f6:37:7a:9f:02:43:a6:1f:0b:67:ad:
00:18:81:1f:e1:17:a0:34:1e:03:44:cd:5e:03:91:
49:50:86:d4:c4:1f:59:b8:a3:7c:db:8c:4f:ec:3b:
bf:a8:f8:62:ed:d6:3f:60:6f:5d:56:7d:57:61:68:
fb:00:a3:ad:81:49:d4:b0:65:fa:12:23:0c:01:3a:
59:41:50:a7:c4:8c:fa:d6:32:39:1c:86:fa:a4:f8:
cb:d8:ea:aa:03:26:d6:37:bb:0c:97:4b:87:46:ed:
06:01:c4:68:75:ce:d8:42:bb:b4:c9:f9:8f:69:9f:
8f:05:e8:7b:81:a1:30:44:1b:f6:60:a6:f8:55:01:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:52:6A:65:B9:6A:EF:DF:7E:25:28:73:C2:42:13:82:60:50:46
X509v3 Authority Key Identifier:
keyid:1E:05:06:45:D6:9C:E7:81:E4:90:C0:F3:C4:99:5E:E6:D4:E6:07:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgUGRdac54HkkMDzxJle5tTmB4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/cb3af0-056d-4277-a6da-227a86c472ce/1/HgUGRdac54HkkMDzxJle5tTmB4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:56:4f:67:56:a3:81:ba:9d:c6:8d:81:ae:47:8a:b5:bf:b5:
0d:96:52:69:47:c2:42:d0:8e:fb:05:6f:e8:5e:99:5f:1a:ad:
93:df:d5:f8:34:d8:84:17:37:16:e2:79:af:c1:90:7e:6f:69:
b3:d7:67:71:21:cb:2d:1f:a6:ad:56:4c:25:96:6b:56:26:86:
58:8b:ab:f2:3b:98:b6:5e:d1:0c:2c:5b:6a:5a:89:3b:ec:32:
08:8b:13:a4:b0:4a:b9:2e:71:51:96:5e:c0:e7:b2:2e:9d:94:
14:58:28:55:5e:b5:87:a2:7d:57:78:b2:e0:32:8c:0a:a0:ca:
44:88:59:09:5d:05:9d:f4:c5:cb:e3:6a:33:54:79:f4:b1:59:
92:fa:df:a4:4a:ac:4e:87:ee:66:10:cf:6f:83:bc:8f:57:33:
a9:71:a1:ae:a0:7a:49:c4:70:b6:93:a2:3c:14:e2:0f:f3:58:
d2:89:81:83:b4:b7:0d:d7:c3:9f:61:e5:45:ff:49:a5:08:1f:
09:b8:98:17:93:69:9e:19:6b:6c:29:86:34:73:2f:d4:e7:c1:
c1:6e:02:4a:a3:58:f7:8b:1b:e8:97:b7:e1:05:9f:00:e5:68:
86:85:3e:46:f7:f7:11:2f:08:30:cb:dd:c1:2a:d1:02:3e:b7:
d6:94:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:21:28 2025 by rpki-client