Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
File: hleGx1_BZYSwJx_ye5cdcjQWYY0.mft (raw, json)
Hash identifier: 3IZTOxcViNczwhm5mwjP/3nLFDAtw8Sz2pY75RCXJ1A=
Subject key identifier: 47:1D:08:D9:F9:89:65:28:AB:9D:2F:E0:D6:43:4A:A3:36:4D:84:3E
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 019675D563EB2740DA0879C6E996F9990AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
Manifest number: 0D9A
Signing time: Sun 27 Apr 2025 06:00:41 +0000
Manifest this update: Sun 27 Apr 2025 06:00:41 +0000
Manifest next update: Mon 28 Apr 2025 06:00:41 +0000
Files and hashes: 1: hleGx1_BZYSwJx_ye5cdcjQWYY0.crl (hash: 6al/9XTre3URUWttGVGPWRnUW/oUmJTFtejsYgpNGr0=)
2: s1k4VuonWOZZPAV_JNyFAmc3QSo.roa (hash: cR7PeQtOyIJC20HWqCOMhvmrx9KSgQEbtA0y8RtkXyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:63:eb:27:40:da:08:79:c6:e9:96:f9:99:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: Apr 27 06:00:41 2025 GMT
Not After : Apr 28 06:00:41 2025 GMT
Subject: CN=471d08d9f9896528ab9d2fe0d6434aa3364d843e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:af:d3:8d:0b:1e:dc:ab:ee:2f:39:6b:0d:
cb:37:27:a1:55:72:37:04:19:54:2b:6a:7e:e0:a7:
cc:c5:61:fd:a7:8f:ce:56:fd:80:3f:d8:05:88:24:
d8:99:67:fe:10:36:65:06:5f:0b:8f:50:6c:5c:1b:
14:aa:68:40:bc:29:51:04:21:46:c0:b2:99:e1:47:
5b:8e:0c:76:a2:ca:50:8a:ed:cf:ab:9d:36:6b:1e:
55:8b:84:24:cf:0e:5b:2f:b3:f8:60:49:88:47:a3:
bd:23:96:18:41:31:b0:3a:14:f8:38:a1:b3:18:45:
f0:7e:0c:f7:cf:f7:83:57:84:d9:48:26:f7:e5:c1:
93:0d:40:db:4f:79:42:da:14:94:0f:1d:4c:51:cd:
54:c9:a6:44:1e:1c:0e:12:36:57:42:08:b0:27:38:
e2:a5:43:87:3f:35:23:09:ea:5e:2a:42:d0:c5:53:
0b:45:dc:39:01:05:0f:e1:6d:6c:d6:29:98:8e:ad:
f9:75:29:bc:f1:44:69:e8:64:91:5a:ff:45:74:6f:
12:f1:73:36:c2:41:83:ab:16:7a:03:db:3b:8c:09:
0c:a8:00:fd:85:9a:9d:33:73:92:ae:97:c4:37:9f:
79:4a:4f:a2:82:cc:13:7c:96:52:28:2b:26:48:86:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1D:08:D9:F9:89:65:28:AB:9D:2F:E0:D6:43:4A:A3:36:4D:84:3E
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:61:fb:09:ea:42:2f:42:91:1b:05:39:2d:bb:93:2b:65:cc:
9a:31:49:c6:99:24:b1:f7:55:32:38:c0:5f:6a:31:ff:c7:84:
4f:08:dc:f7:ea:3a:8c:1d:90:b7:2d:a1:a9:ca:74:86:61:4f:
de:13:bd:fe:77:24:a4:2e:ff:4f:4e:be:90:ce:b9:30:ad:84:
f4:3b:26:3e:c5:4f:ae:58:ed:3e:8a:99:c8:b4:86:b9:23:ae:
2b:62:50:f5:db:10:a5:a4:99:18:8a:69:cb:a0:ed:3f:07:1e:
2a:93:8b:60:d5:f0:ef:8b:fc:52:4e:37:51:6c:d3:c6:09:59:
c7:88:22:6c:47:10:1c:12:6e:20:3e:40:58:25:d3:33:74:23:
80:65:1f:a2:c3:3e:de:f5:ad:6b:63:77:4c:e9:53:58:21:08:
f2:7a:fe:a2:01:76:ae:65:7b:92:87:b6:b8:be:e9:59:65:5f:
df:42:d0:46:95:19:6c:4e:74:d0:99:66:46:af:79:d7:4b:37:
1b:c3:0e:f1:f1:68:d1:5e:6f:16:e1:8d:03:40:93:31:dc:cb:
ad:b4:bf:18:5a:4a:48:bd:7e:7b:02:69:2f:22:86:98:c7:e9:
9f:6b:d0:c6:01:40:dc:df:07:94:d3:63:f0:6b:11:6a:8b:b2:
4b:4a:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:56:43 2025 by rpki-client