Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
File: hC4XioXWwwtXKyAmHET456S_wnI.mft (raw, json)
Hash identifier: os3oztI59UM4zN8G/KfegPC6z3eR8jJeyNj42+f1KP4=
Subject key identifier: CF:F5:8F:6A:C2:C0:44:0F:A3:60:7C:61:8C:17:7B:70:54:6A:6C:BD
Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Certificate serial: 0196A1D28B1DA95910ACEDE3D39D531B3C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
Manifest number: 0CB6
Signing time: Mon 05 May 2025 19:00:52 +0000
Manifest this update: Mon 05 May 2025 19:00:52 +0000
Manifest next update: Tue 06 May 2025 19:00:52 +0000
Files and hashes: 1: hC4XioXWwwtXKyAmHET456S_wnI.crl (hash: 0+9kz2/hAFTMQHbFBCgMQzstu/MyNLNofOva76v03mw=)
2: tpGVDM97XGpA5ofHLGA9otQIFM8.roa (hash: aWl1cnx2HDb3renuM7Fi/tYunaPtkTPWaRgrB19Lp4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:8b:1d:a9:59:10:ac:ed:e3:d3:9d:53:1b:3c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272
Validity
Not Before: May 5 19:00:52 2025 GMT
Not After : May 6 19:00:52 2025 GMT
Subject: CN=cff58f6ac2c0440fa3607c618c177b70546a6cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:9a:d4:95:9b:c2:42:cd:70:30:4c:60:3b:
9d:e6:30:33:3f:ba:1b:a0:40:39:ab:7b:25:31:f0:
9c:5f:b9:b0:66:ac:d9:41:02:7f:85:a9:ac:85:d8:
52:1f:94:5f:3f:3a:e5:5f:d6:58:38:fc:8a:81:79:
f5:d4:91:4b:09:96:c8:a1:a7:b1:8f:ff:4e:35:72:
86:14:17:6e:98:a0:25:63:a6:3d:5b:69:5d:87:d0:
7d:35:54:59:76:ef:8f:c0:9b:32:f7:12:f4:70:67:
d1:55:73:9b:4d:33:b4:86:8a:ad:7b:56:72:32:ce:
5a:fb:27:79:3b:b8:62:9a:f1:bb:0e:5b:79:08:37:
1a:f3:ee:88:4d:f2:6d:1e:ee:2e:4a:95:27:b5:be:
df:44:60:e8:c5:99:6a:84:78:78:b9:a1:c3:bb:4c:
34:60:86:ef:88:cb:7b:b7:4d:f2:3f:be:c9:04:59:
ae:3c:f3:a9:ab:62:c7:c4:31:4e:38:6d:ca:08:ea:
4b:87:4e:29:7d:bf:22:26:c7:5b:9e:1e:c2:ff:b6:
8a:47:a3:d5:54:6d:74:4b:cd:c4:5f:09:89:c8:5b:
01:cf:1e:cf:06:9f:a9:fc:2c:bd:13:af:9f:54:39:
e7:77:bc:74:3e:5f:91:18:cb:5d:27:a0:48:79:4a:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:8F:6A:C2:C0:44:0F:A3:60:7C:61:8C:17:7B:70:54:6A:6C:BD
X509v3 Authority Key Identifier:
keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:bd:34:3c:cd:f4:5f:98:3f:e3:ed:03:af:ee:e3:40:91:
e7:52:16:c9:e6:78:0b:db:ee:ea:34:fc:18:dc:12:ef:1b:fb:
e1:c2:18:d0:cc:2b:d1:63:b8:6f:b1:a4:1a:d1:3b:46:fb:e6:
50:a5:8e:e2:09:4c:06:a3:60:75:61:4e:23:fa:7c:2a:17:6c:
59:c8:ff:2b:91:91:85:ee:82:1f:e1:58:a9:29:ad:61:d9:7e:
0f:07:bd:ca:11:43:d8:e1:d0:90:52:77:b3:70:8e:4f:53:f7:
7d:28:eb:39:9b:15:ed:4c:1f:49:fa:dc:6d:da:21:6b:50:d2:
75:a5:dc:4e:76:c7:06:d9:ef:4f:3a:5f:f2:00:d0:28:88:2f:
fc:da:fd:1e:84:54:93:d1:f6:d5:a3:54:ae:f1:58:18:34:42:
01:41:ed:3f:84:9b:75:bc:96:e9:7c:b0:fa:8a:20:b2:75:75:
b0:6d:21:4d:9d:bf:7f:5c:85:c5:31:ca:ca:7c:b6:98:be:73:
e9:bf:86:36:1e:76:5a:e1:71:22:c1:b7:a5:88:c7:17:2b:f2:
a6:d6:e1:9b:dc:80:8e:5e:ec:47:81:5a:2a:8c:fc:72:0c:68:
3c:cb:a4:92:08:6f:60:e0:4e:fd:98:f9:88:16:2b:32:ae:c9:
8c:52:ce:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:12 2025 by rpki-client