Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json)
Hash identifier: 9Agcjm2w81CiC7n6he4kJ35PDVH+i9IFPvanKQRxtJY=
Subject key identifier: F3:F7:0F:19:3D:3B:CA:94:F3:28:00:DC:25:BB:B3:B6:7D:21:E7:3E
Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Certificate serial: 01967868DB0DF861E70B7074F3825223C6E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 18:00:59 +0000
Manifest this update: Sun 27 Apr 2025 18:00:59 +0000
Manifest next update: Mon 28 Apr 2025 18:00:59 +0000
Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: 1pJEFM3yfd80uDd1jK6gdBJ77WOSKNoXzPn8ip30VZQ=)
2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:db:0d:f8:61:e7:0b:70:74:f3:82:52:23:c6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8
Validity
Not Before: Apr 27 18:00:59 2025 GMT
Not After : Apr 28 18:00:59 2025 GMT
Subject: CN=f3f70f193d3bca94f32800dc25bbb3b67d21e73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:2a:73:b4:75:e5:d2:53:7d:43:36:f3:ef:
6d:af:57:df:d1:a4:31:70:13:74:ca:25:62:11:79:
c2:e0:08:47:c8:52:d9:b1:5f:2b:43:99:3b:30:64:
86:79:6c:37:16:16:9c:bb:f2:2d:9b:8f:66:23:03:
eb:30:43:c0:2d:42:17:1a:7d:3a:b8:c1:c7:cb:ac:
fd:95:92:c4:60:4f:d5:ff:dd:d7:3a:93:4a:a3:96:
b2:fd:cf:73:c7:ae:91:56:03:02:9d:e2:59:87:82:
a4:fb:5e:58:ba:ce:87:8a:15:96:83:76:66:fa:e0:
9b:09:2a:ae:d4:41:c3:bf:75:86:56:34:bf:93:2c:
c1:a6:d3:b0:64:43:61:4a:01:2f:4c:64:e9:5d:6b:
94:8d:5e:91:10:86:c6:3a:c6:b3:e4:bd:6b:2e:70:
b3:80:cc:f5:a9:c7:8a:4b:c8:8a:51:38:de:59:14:
37:80:83:f8:22:7d:e3:11:31:87:93:ac:4a:c3:49:
e0:7e:9c:be:1c:6f:63:aa:e6:db:8a:32:19:2a:ac:
8c:10:05:8c:ff:a2:59:e3:d9:01:2c:26:13:0a:66:
13:b9:50:0b:af:50:a9:42:42:36:f5:2b:fd:5e:da:
64:07:98:98:23:5f:45:b9:df:70:22:07:58:ae:df:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F7:0F:19:3D:3B:CA:94:F3:28:00:DC:25:BB:B3:B6:7D:21:E7:3E
X509v3 Authority Key Identifier:
keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:94:2f:c5:ec:a7:3d:56:5b:86:55:8d:f9:7b:4b:1a:1e:c6:
9d:a8:5e:09:0b:dc:f9:bb:0e:11:bf:55:28:28:f0:07:1f:4e:
94:3d:08:d4:e9:a5:55:5e:3d:04:2f:9d:35:13:f9:d1:f2:73:
4b:19:67:54:a0:a4:19:b4:17:aa:c7:cc:86:6e:4c:47:74:14:
fe:92:16:35:bb:6d:e4:50:7f:a4:fe:14:f8:ee:41:9c:dd:48:
4d:54:e7:78:4f:57:1e:47:c5:66:8b:fd:36:cf:a0:dd:3d:08:
1c:a3:ff:20:e3:42:49:eb:c6:84:57:6d:07:02:e9:2e:3e:62:
9e:c6:92:9c:a8:cc:e6:f4:65:1f:75:ec:a2:1c:03:96:c2:18:
f3:16:f4:94:82:30:d2:88:91:a2:39:a5:fc:77:46:20:3b:eb:
5c:e7:38:2f:a2:82:a2:dc:b5:07:65:7c:0d:dd:7b:05:78:6c:
bf:e5:ed:0c:ff:68:a9:d2:b8:f0:8b:c8:36:cd:2d:38:d4:99:
9d:31:65:1f:38:99:23:fd:77:70:bf:0f:b4:ab:66:d4:f2:a4:
fc:b3:4a:13:ee:1c:2d:fc:6c:53:e2:fb:70:95:77:17:b3:d8:
b5:dd:a1:cf:4c:b8:e6:14:34:55:1f:5a:2b:70:a8:ef:70:6a:
36:7e:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:26:12 2025 by rpki-client