Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
File: HC03VaNQG5yw1euqSZ5eoUm88Is.mft (raw, json)
Hash identifier: 36udcIo8ridS4pcviQvZXISyEpJ5ciI9PuaNUYZXPVU=
Subject key identifier: CD:B3:E7:8F:FA:7B:0A:4C:81:4D:9F:BD:AD:F0:D7:26:DF:4C:26:5A
Authority key identifier: 1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
Certificate issuer: /CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Certificate serial: 0196741D82733195AE6F2F92F75664625924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
Manifest number: 05EC
Signing time: Sat 26 Apr 2025 22:00:13 +0000
Manifest this update: Sat 26 Apr 2025 22:00:13 +0000
Manifest next update: Sun 27 Apr 2025 22:00:13 +0000
Files and hashes: 1: HC03VaNQG5yw1euqSZ5eoUm88Is.crl (hash: 2FRr2jBfxopPcBPu2f5i/ipkAtN2q8I3XKmDx4pEa9Y=)
2: zBo_iKzjdrZH1koNuXflz2DEVFo.roa (hash: oSU216GFvs9sVu0bzYiGAj3iuq0J8sZNKxXjgiMItjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1d:82:73:31:95:ae:6f:2f:92:f7:56:64:62:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c2d3755a3501b9cb0d5ebaa499e5ea149bcf08b
Validity
Not Before: Apr 26 22:00:13 2025 GMT
Not After : Apr 27 22:00:13 2025 GMT
Subject: CN=cdb3e78ffa7b0a4c814d9fbdadf0d726df4c265a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:31:be:61:7d:a7:18:29:39:7e:3c:44:d6:40:
22:47:e2:ab:bc:a0:60:69:9d:ff:b9:2f:b4:f1:33:
09:be:28:2d:bc:79:db:53:54:0a:fd:c1:83:c6:50:
ba:8f:c3:2d:4d:84:44:0a:92:62:15:fb:24:33:ad:
7a:bc:ad:78:0c:c6:76:17:1f:63:a3:9a:80:f2:07:
9f:7d:0c:03:87:6b:6a:e6:c3:8e:90:4c:a6:59:3e:
f8:a9:57:88:1a:f1:aa:39:14:cf:cf:87:20:11:b8:
f4:c6:94:c9:28:1d:6d:25:6d:da:87:6f:e1:42:3b:
6e:53:ac:20:67:d0:56:13:54:58:7d:ad:55:cb:65:
2d:9a:7d:1f:6f:6b:4b:f5:7d:98:bf:6a:ef:2b:74:
3e:e8:93:79:81:fd:19:60:6c:a5:ba:ff:c0:af:28:
2f:7e:40:53:19:1e:a7:84:db:53:74:29:77:6f:db:
e2:46:01:3e:23:15:76:10:91:e4:bc:89:8a:72:d2:
a1:c0:cd:2a:49:f3:69:b3:1c:2f:ca:04:5b:29:82:
2b:2e:7f:cd:c0:52:31:91:fa:1d:ac:48:c1:e8:03:
f3:06:fd:02:7f:4d:51:b6:46:0f:10:8b:08:8f:ec:
de:8e:f0:11:d4:66:4d:48:8e:93:37:c5:8f:7e:68:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:E7:8F:FA:7B:0A:4C:81:4D:9F:BD:AD:F0:D7:26:DF:4C:26:5A
X509v3 Authority Key Identifier:
keyid:1C:2D:37:55:A3:50:1B:9C:B0:D5:EB:AA:49:9E:5E:A1:49:BC:F0:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HC03VaNQG5yw1euqSZ5eoUm88Is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/67c605-010f-4592-a919-9ece0b25658e/1/HC03VaNQG5yw1euqSZ5eoUm88Is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:40:31:91:7d:f5:3c:af:ff:7a:61:f7:ae:8f:0d:f5:5d:43:
99:bf:d3:3b:f4:e0:f1:2c:b1:55:e1:c7:c3:6d:f0:d1:02:12:
41:2d:63:fb:16:34:25:84:29:09:52:78:75:32:4e:33:3d:6e:
3e:34:2b:2a:a2:85:9b:57:c2:69:77:e7:7a:b0:5b:fd:95:41:
73:14:83:2e:57:bb:f6:43:9e:e5:1e:27:0c:2f:8b:6a:22:15:
a1:f8:22:42:7b:a3:01:84:85:2c:5f:82:da:81:bf:a0:cf:44:
72:db:1a:14:dc:8f:f2:72:8f:cf:0d:b5:0f:64:37:5b:b7:a0:
ba:d0:5b:ac:03:fd:0c:71:3c:9e:70:37:77:b9:71:66:ac:7c:
72:fb:6d:a1:13:c3:0d:48:c5:eb:d1:87:84:1b:54:1c:33:72:
bd:a4:0a:d3:7f:58:98:29:67:e5:e4:69:cb:3e:3d:1d:27:07:
a8:6f:c6:af:3a:93:e2:e1:b1:31:49:6f:c6:c1:55:ad:61:55:
ba:7f:c8:0c:78:d8:ef:a1:01:b2:2c:f5:93:06:e1:f1:ad:10:
4e:7a:2f:66:2c:2e:45:b0:0e:dd:8b:46:6c:5a:02:39:ab:fd:
c4:4b:e3:cc:f5:9a:7f:73:96:32:eb:7e:08:f5:48:bc:fd:fa:
82:b1:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:20 2025 by rpki-client