
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json)
Hash identifier: vYHOItjdSPO3qagwi1zUrBbzpD9UnlFEuUtG+E6MYMA=
Subject key identifier: 64:95:24:CE:F9:6C:BD:8F:5C:45:C2:58:55:3A:15:43:94:16:B3:3E
Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Certificate serial: 01968134D65F119D4AC0E6C31FDA739E7451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
Manifest number: 1256
Signing time: Tue 29 Apr 2025 11:00:45 +0000
Manifest this update: Tue 29 Apr 2025 11:00:45 +0000
Manifest next update: Wed 30 Apr 2025 11:00:45 +0000
Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: ZkHMNPAngTs8AbSgj96oikrhj+W04oYImYCiVAujL40=)
2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:d6:5f:11:9d:4a:c0:e6:c3:1f:da:73:9e:74:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4
Validity
Not Before: Apr 29 11:00:45 2025 GMT
Not After : Apr 30 11:00:45 2025 GMT
Subject: CN=649524cef96cbd8f5c45c258553a15439416b33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:22:d5:d1:e6:0e:c2:55:00:d2:3e:98:bf:
39:f2:48:5e:99:93:a2:e5:e4:82:a0:f7:83:2f:83:
2a:06:2a:22:6b:fd:bc:15:fd:86:7a:3e:e8:a4:f5:
20:17:ac:b0:b4:b5:10:e4:d6:80:fe:c5:0e:88:cf:
be:d4:54:d7:b0:89:ba:07:98:a0:80:71:80:e4:69:
ad:25:3e:9c:ab:b5:55:fe:d1:cc:4d:48:0c:e9:66:
1c:97:46:83:de:6a:c8:67:a4:ac:48:9c:75:90:0f:
06:11:e8:2f:e5:3f:95:73:72:f0:22:8a:78:68:ab:
3d:9f:88:30:1d:99:70:ed:cf:4c:71:70:d6:f6:2f:
02:f5:b5:e5:46:a6:f6:15:ff:eb:93:ed:60:cc:48:
5d:f4:4b:87:13:8e:87:f2:b3:0b:be:bf:1d:c0:10:
1d:72:f1:ad:b2:7c:3e:7f:db:01:5c:6e:9a:8c:de:
f4:7a:b0:90:67:7d:5d:b5:a2:54:27:7b:df:ba:c0:
0b:10:b2:5c:6f:c3:6b:cd:8b:6c:f6:09:a8:ca:d9:
e1:d6:0d:10:7f:53:66:04:68:67:4b:f2:91:1f:ef:
fe:1e:04:c3:db:af:8d:95:b5:38:7d:3e:73:e3:38:
cd:30:89:e5:5d:14:3b:a8:fc:d1:f8:b7:70:c9:8f:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:24:CE:F9:6C:BD:8F:5C:45:C2:58:55:3A:15:43:94:16:B3:3E
X509v3 Authority Key Identifier:
keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c1:b1:08:d6:8b:19:79:22:2f:dc:8d:a4:f8:c0:a9:b6:87:
b7:23:90:eb:01:0d:f3:dd:56:11:de:83:14:8f:37:b6:45:ee:
1f:f9:7e:3a:fc:f0:ab:52:c0:63:06:84:ff:24:29:62:6a:d2:
af:ac:b5:93:2a:83:f1:31:0f:1f:2c:69:9f:b6:08:0a:73:b9:
56:07:4b:78:4c:44:8a:f4:68:3e:fb:aa:4b:c9:9f:1a:5f:8e:
f2:06:c5:03:39:84:ea:2c:ee:ed:3e:d4:67:7c:2d:bc:e3:3b:
99:1a:95:a3:89:ba:ef:88:bc:27:fd:f3:3b:28:95:37:de:e3:
d5:6c:7f:27:fc:f5:6c:27:6f:52:1a:f2:e3:43:df:dd:42:06:
28:00:a2:00:96:1d:29:bb:e1:85:85:cb:21:ad:83:9e:ca:52:
54:60:91:e1:73:58:1f:f4:65:04:0d:30:35:be:fb:3d:41:58:
4b:25:d8:28:64:a8:71:88:81:5b:d0:6b:6a:1b:88:4e:61:59:
bb:ba:88:0c:ad:24:07:90:43:9e:fe:d0:ca:1d:7d:88:2d:42:
55:1e:ac:12:12:b3:8d:ab:70:11:a8:5a:6c:b3:69:b9:e1:19:
7e:c9:d9:23:b5:e0:05:f5:4b:d9:5d:4c:7c:ac:f0:86:98:9f:
1f:ba:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:29:59 2025 by rpki-client