Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json)
Hash identifier: /G8SITc9WUwXNPkkFsMDcLGXXIZxCfHxExMPJc4sM1U=
Subject key identifier: B3:29:4B:05:DE:66:ED:4C:4B:38:23:51:ED:9E:59:63:9F:99:BF:40
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 0196729E033484A24BB7624CDF116124ED65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
Manifest number: 1510
Signing time: Sat 26 Apr 2025 15:01:20 +0000
Manifest this update: Sat 26 Apr 2025 15:01:20 +0000
Manifest next update: Sun 27 Apr 2025 15:01:20 +0000
Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=)
2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=)
3: 80uZVWp_iWFE8vdma8FvwSsz-Uo.roa (hash: pm27AxcsLfVMm1BA5QNNe0QMO134e9SV+S+h9WFlZjs=)
4: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: VJq5LWvq9qdutvIDtVjFsDX3+XHloSQ+xhJ+iWd8isk=)
5: Mxsx50Ph9_qr5vUqU-Gjhz8TFEo.roa (hash: r/sY/VoJqmcdsNcKGmTBnZbt3tc9vj95Qx95jR+/+BY=)
6: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=)
7: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=)
8: _3NlYGtAccp6zaeP-Zhm_oVq4fE.roa (hash: 7Ai+yD0w7Uc4wl5Kdh07MB6GvX74tuDak744pWBhJkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9e:03:34:84:a2:4b:b7:62:4c:df:11:61:24:ed:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Apr 26 15:01:20 2025 GMT
Not After : Apr 27 15:01:20 2025 GMT
Subject: CN=b3294b05de66ed4c4b382351ed9e59639f99bf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:3c:f1:22:8e:83:0b:20:fc:b3:ca:de:26:
b0:79:d5:fe:ce:6a:61:d3:8c:c8:52:d1:71:a2:d1:
ea:57:f7:2a:51:29:fc:08:4a:f0:87:06:ea:0c:fb:
59:16:35:a7:f7:0c:00:07:29:d0:e6:87:11:40:ac:
4d:0d:5c:86:56:51:bd:c9:f4:5d:b7:ea:ae:49:5d:
8c:1d:6d:6b:15:cb:84:fc:1a:28:6a:bd:2d:d3:19:
62:71:a2:84:68:a1:46:37:29:6c:a2:5c:66:0f:e6:
f6:87:e2:f8:46:e9:ee:b5:8b:53:ee:17:e5:63:b1:
2b:b4:23:96:e5:48:72:21:43:9c:6f:5f:ab:2d:30:
36:49:fd:e2:7d:04:68:8a:0e:bc:6a:22:f2:86:f6:
3d:41:e2:65:44:66:e8:10:8e:9f:68:fc:a3:2f:41:
93:ab:07:14:f5:4b:1a:25:76:fc:55:99:7c:89:19:
28:d3:74:64:06:13:63:33:f7:b5:e8:b4:14:cc:86:
35:38:2e:b2:77:f5:df:08:2a:54:4d:a4:d2:2a:88:
a0:59:1c:8e:dd:ad:51:27:88:41:4b:36:eb:69:4b:
da:90:62:be:99:e6:50:22:05:1b:41:62:97:0d:bc:
89:55:21:ed:73:48:e6:36:65:c7:a9:29:9b:3f:55:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:29:4B:05:DE:66:ED:4C:4B:38:23:51:ED:9E:59:63:9F:99:BF:40
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:01:fb:c3:38:c9:6f:d2:d6:76:24:ef:cb:db:76:2f:6e:40:
72:c1:3d:88:c8:e8:2a:03:6d:03:51:42:cf:73:ec:b4:53:3b:
83:b4:18:0f:36:74:a6:32:10:b4:2a:d5:e4:ee:28:a5:2d:a2:
74:5b:a9:07:fa:01:43:ea:e8:66:10:9a:2a:70:f4:0e:3e:33:
6b:a2:fc:df:4c:36:07:c0:34:b9:24:75:4e:ed:a0:fa:ac:8e:
96:9e:70:7a:28:20:3e:34:ae:85:aa:fc:15:6c:73:51:d1:14:
ba:61:c3:6a:62:bb:fa:68:e5:2d:62:97:3f:20:50:8e:c3:df:
8e:2c:50:38:a2:9d:b6:25:55:a0:63:e5:b0:55:59:13:f7:c0:
14:52:a1:f4:ad:0f:ba:af:e5:cb:26:74:1e:fc:ed:bb:13:3b:
37:c5:35:b0:f9:ef:c4:3c:ea:33:49:33:41:d6:89:97:02:da:
6f:cc:aa:c1:4e:d4:fc:90:df:db:b2:76:2a:48:ba:28:d6:42:
44:41:10:63:f6:c4:53:33:aa:be:a8:ed:be:6e:c4:55:74:29:
77:6c:8a:6d:45:f5:ab:66:bc:09:25:4b:40:68:09:48:b7:08:
a5:15:ab:af:d3:04:02:b8:93:72:18:4e:b4:9c:fa:f1:c6:7e:
21:e8:2c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:25:10 2025 by rpki-client