
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json)
Hash identifier: mdzZtEvt7SHOfvfde4YU99WUhGWJtzucJ90d7+FbzMg=
Subject key identifier: 1B:5B:AB:6C:59:3A:5B:AA:C2:E2:2A:14:69:5F:74:E7:A9:37:CF:E9
Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c
Certificate serial: 0196760CF26E993AB4A4D9DC488F0BE22E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 07:01:22 +0000
Manifest this update: Sun 27 Apr 2025 07:01:22 +0000
Manifest next update: Mon 28 Apr 2025 07:01:22 +0000
Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=)
2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: n7Gce21GNJt18hziz7SBJzR7zh4AJXoWYsTkCkRRI1M=)
3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=)
4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:f2:6e:99:3a:b4:a4:d9:dc:48:8f:0b:e2:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c
Validity
Not Before: Apr 27 07:01:22 2025 GMT
Not After : Apr 28 07:01:22 2025 GMT
Subject: CN=1b5bab6c593a5baac2e22a14695f74e7a937cfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fa:46:fe:40:57:11:e6:9a:d0:0d:d3:9b:e0:
6c:ae:c0:a8:92:21:08:ad:a5:21:d0:cb:37:33:bc:
1b:84:ec:95:6e:ec:d4:a8:94:a3:0b:6c:37:2e:9d:
b3:a8:4e:f1:83:79:13:d5:ef:b8:08:42:0a:1e:04:
53:59:95:e9:e2:04:84:10:af:e2:6a:62:b1:3d:70:
ea:e5:b6:29:51:a0:bf:ac:c9:f8:2f:26:c6:7d:82:
37:6d:65:d7:83:b7:75:08:20:4e:08:8b:70:4e:98:
fc:d3:81:67:d6:b6:60:de:be:bb:d8:74:08:ca:3d:
14:65:5e:1f:de:fe:fd:1d:e0:12:ea:e3:21:88:14:
a3:19:87:3e:a7:ac:4f:19:eb:a8:8b:06:80:d9:44:
5b:d4:74:47:aa:2a:25:05:2f:fc:00:3f:69:8b:14:
62:07:6f:f3:e0:4a:a9:66:9c:2f:ff:96:4c:58:58:
40:1a:bd:79:d6:af:0d:ca:18:84:52:99:ca:87:e4:
73:94:c3:45:fd:14:10:4a:7e:42:3a:18:89:1c:c1:
b0:f7:ad:fa:8a:2e:1d:fb:19:e9:50:b4:e2:05:91:
c7:ff:f2:52:02:a6:29:ee:ae:e9:86:04:2e:65:14:
cc:7c:47:e0:66:01:d2:e7:29:73:15:3e:e9:1c:3c:
08:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:AB:6C:59:3A:5B:AA:C2:E2:2A:14:69:5F:74:E7:A9:37:CF:E9
X509v3 Authority Key Identifier:
keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:8f:d1:55:70:24:00:f7:55:40:34:86:21:53:87:04:d9:29:
46:c9:f9:a8:fa:84:54:08:93:f7:4a:4b:f8:18:a8:86:9f:5f:
99:e3:84:d9:e7:a9:f8:62:c5:7f:3c:39:97:e3:3c:66:87:ee:
02:46:b0:ed:6a:5e:86:ee:4c:d7:d1:41:d5:e9:b9:41:f2:d5:
ad:2a:ce:8c:31:b4:67:4a:19:a4:9f:11:e0:35:d2:f4:c6:6a:
0f:7c:40:fa:87:c7:ec:09:40:59:b2:15:f4:7c:3d:e2:43:d6:
b2:f1:b1:97:97:b1:d5:a3:5c:87:fd:39:41:34:98:4d:4e:5a:
ab:5d:8c:fc:e5:78:9e:b1:2a:5c:32:b4:e2:ea:f3:8a:0d:45:
a9:ec:4c:70:0a:5c:64:ca:6c:d1:cd:58:2f:6d:fa:cf:58:b6:
4e:a4:1e:c2:38:f5:d5:c6:1d:c0:0f:e9:35:54:71:03:27:8e:
68:5f:07:81:83:ec:95:c7:31:87:e4:f4:74:01:e7:a7:9c:2c:
0f:d7:30:67:02:48:64:99:98:64:2e:4a:ae:28:37:d4:4c:06:
7b:c1:60:d5:02:e6:22:4f:f6:3c:ca:32:6d:9e:db:a9:09:92:
a0:65:50:3e:6a:d1:c7:51:b8:d4:51:b7:72:ed:24:87:a4:32:
a2:49:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:33:23 2025 by rpki-client