Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
File: hksOE88nr_Zr5zC-zpjgSwD9-54.mft (raw, json)
Hash identifier: OZBuFwqzLmQeJYz0GOkD3M8hCAdQ1eDGa9evLTtBJVM=
Subject key identifier: 12:FA:B8:BA:4B:B3:A8:8E:A7:CB:82:0C:DE:30:BA:B6:D3:B6:4B:88
Authority key identifier: 86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
Certificate issuer: /CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Certificate serial: 019685ED0E6B4F6483C3B91D236687A85DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 09:00:27 +0000
Manifest this update: Wed 30 Apr 2025 09:00:27 +0000
Manifest next update: Thu 01 May 2025 09:00:27 +0000
Files and hashes: 1: 00pWEbLK8tLsnjW5pg2Nz8G-zMw.roa (hash: aMgYbVg4QnX7hEPLeHEda/b4JrNnLv1+waEJzECfh2Q=)
2: UNDXrDbQNDGfw9Atw8J1Rhg9324.roa (hash: wsuYDSHLl9ueT9Z/8hPQn0p6GzwP0XVwWj6eE/OeB10=)
3: hksOE88nr_Zr5zC-zpjgSwD9-54.crl (hash: 53xGSuaAS/0sLSsJoRukVYjfmf89vnQzWl1JWaTyRYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:0e:6b:4f:64:83:c3:b9:1d:23:66:87:a8:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=864b0e13cf27aff66be730bece98e04b00fdfb9e
Validity
Not Before: Apr 30 09:00:27 2025 GMT
Not After : May 1 09:00:27 2025 GMT
Subject: CN=12fab8ba4bb3a88ea7cb820cde30bab6d3b64b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:34:f4:7b:03:95:19:00:ad:bd:df:73:86:
44:39:43:78:81:f5:f6:c8:30:bf:10:c3:3e:3b:32:
f9:08:fe:22:f2:7a:9c:12:36:0e:0c:ee:40:ba:90:
74:41:ec:61:a1:f2:22:6b:7e:f3:78:e0:87:13:cf:
ef:9d:07:82:f2:f6:d3:8e:4f:1e:89:9b:15:ad:08:
75:b0:5f:b3:58:19:d3:5a:5d:9b:99:a1:cf:0f:fc:
9d:3d:07:28:96:bf:55:8c:3c:dc:ac:a2:dd:8b:ae:
5e:66:a4:49:35:7e:63:c1:d4:af:93:b4:c3:b5:9b:
6c:a8:2d:48:81:1e:ca:3a:25:c1:fd:3f:a8:ec:2f:
bc:cd:95:1d:3b:42:67:60:2a:93:fc:a7:41:9c:48:
0e:89:f6:29:79:0c:99:da:0a:cd:2a:48:d2:44:d3:
51:99:a1:ce:24:59:d6:fa:bf:67:ab:84:89:33:69:
14:a5:59:64:ae:08:24:2c:0a:3b:84:fe:ec:8a:2c:
77:29:c2:54:1e:6d:62:df:49:ac:db:f0:33:cc:e5:
82:1c:f4:5f:39:f8:84:b3:6b:80:3a:95:34:2b:a1:
51:b6:5f:5c:f7:9f:4c:0b:36:73:6c:0d:4d:7f:5a:
bc:26:d6:3c:87:d5:8a:e5:ff:45:33:cb:28:94:1e:
ac:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FA:B8:BA:4B:B3:A8:8E:A7:CB:82:0C:DE:30:BA:B6:D3:B6:4B:88
X509v3 Authority Key Identifier:
keyid:86:4B:0E:13:CF:27:AF:F6:6B:E7:30:BE:CE:98:E0:4B:00:FD:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hksOE88nr_Zr5zC-zpjgSwD9-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/302863-5689-43fc-872f-fc44a8ace370/1/hksOE88nr_Zr5zC-zpjgSwD9-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c8:da:18:4e:4d:7a:a1:3a:52:8b:74:0c:08:6e:bf:d8:41:
05:cb:05:8d:6d:43:c4:45:37:6e:d3:11:d4:82:eb:d8:bf:c4:
d9:ac:0a:60:7b:b0:90:16:fa:79:fe:95:d3:a0:d2:1a:06:07:
52:f2:28:37:de:2b:45:6e:cb:b4:7a:84:d8:77:2d:c8:1a:1f:
56:df:b6:19:0f:ac:c5:c1:fb:4a:80:fd:53:d5:a7:ec:3b:8c:
c9:fe:d3:cf:1b:71:17:82:b9:b2:69:27:8e:15:0b:01:e2:f6:
ca:cf:e6:a0:24:c8:2b:b3:e5:cd:e8:0e:d2:42:4a:d8:04:46:
cc:38:e8:0e:27:a1:da:28:46:20:b5:c0:58:ec:0b:f6:14:41:
05:f1:eb:be:ad:5b:a3:fe:7a:11:53:51:d9:37:22:ee:45:bf:
bf:56:2c:a6:ed:0d:b1:e0:05:16:b9:dd:db:7f:80:79:73:79:
55:ba:e0:09:5d:c5:b2:51:45:0e:3c:db:26:12:b6:ee:aa:85:
1e:9b:8b:dd:6f:74:e1:92:17:10:3e:eb:93:2c:1b:89:7c:82:
74:c6:a2:a3:ec:5c:51:07:1a:99:7c:e4:1f:cf:a9:2a:44:b1:
64:64:76:c2:f0:f1:6a:b0:79:66:3b:48:00:8d:3b:ea:4e:d9:
2e:23:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:22:12 2025 by rpki-client