Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json)
Hash identifier: SdFitfdzoW9ueFkjxpOhcEQXXLXKygtawWQsrkL0MfM=
Subject key identifier: D4:DF:EA:1B:CF:8E:43:BE:98:EF:F0:73:17:9D:F3:E7:B6:6E:FC:66
Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3
Certificate serial: 0196789F38EBDFE0D57D8C7184AA8034FE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
Manifest number: 151D
Signing time: Sun 27 Apr 2025 19:00:22 +0000
Manifest this update: Sun 27 Apr 2025 19:00:22 +0000
Manifest next update: Mon 28 Apr 2025 19:00:22 +0000
Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=)
2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: paiPszsgtgtaGQ6841zhW4K0n5A4MEqPINVyqrjyPQs=)
3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:38:eb:df:e0:d5:7d:8c:71:84:aa:80:34:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3
Validity
Not Before: Apr 27 19:00:22 2025 GMT
Not After : Apr 28 19:00:22 2025 GMT
Subject: CN=d4dfea1bcf8e43be98eff073179df3e7b66efc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:96:6a:dd:65:e3:0a:1c:bb:45:0d:16:c7:
86:16:84:da:bf:0e:c2:83:c6:68:dd:62:96:a5:36:
42:ec:38:96:d5:6c:4e:41:79:27:c3:69:d9:7a:ea:
ec:df:ec:19:a0:4a:7d:1a:0d:8a:15:80:66:4e:6d:
fe:ec:2d:d5:9f:32:f2:51:e5:89:f3:a0:d1:e7:da:
a1:b5:05:b8:7f:1c:f9:72:f6:9b:e0:b4:bc:6d:a9:
2a:de:34:71:60:28:bf:0f:be:29:c6:8b:24:c4:cb:
49:01:e7:59:bc:f0:e8:6c:2c:74:5b:43:92:46:50:
8b:7b:8c:cd:5a:fa:28:ca:2f:a1:82:95:ab:e0:45:
f6:ca:08:da:17:a8:dc:50:de:01:90:05:4b:9e:ab:
e6:b3:45:89:d2:5e:b0:0b:0d:6c:62:29:a1:9f:19:
22:ef:ba:d2:63:c3:5d:4f:db:54:b8:9d:2a:9c:97:
6c:57:63:53:e8:5f:8d:f6:2d:8b:50:67:f1:29:5d:
63:f1:b0:6c:fe:07:23:59:de:f3:95:fd:3c:a9:27:
ae:d4:b7:4a:57:50:94:7e:b9:1f:e6:a5:75:cc:fd:
e4:6b:00:d5:b0:89:4f:a9:6e:39:e8:c4:fd:a3:c8:
bf:81:3f:f0:e5:46:6d:8c:2e:7b:ae:ae:d0:9e:04:
77:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:EA:1B:CF:8E:43:BE:98:EF:F0:73:17:9D:F3:E7:B6:6E:FC:66
X509v3 Authority Key Identifier:
keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d4:4e:4a:10:df:03:e0:28:84:bb:a8:79:be:f7:a3:cd:2f:
12:98:79:1a:ae:33:1c:5d:98:1c:89:4c:29:49:c3:41:33:e8:
f9:ac:7c:d8:bd:a0:c2:fc:ca:b8:72:6e:f0:dd:39:b1:03:fc:
b3:84:6d:8f:b0:b4:90:c6:7a:5f:b8:3b:fa:d1:49:61:dc:ad:
49:30:8f:fb:34:34:cc:17:ae:39:fd:c5:10:64:9b:1a:e4:bf:
84:c6:9e:eb:fd:83:53:4e:f7:55:21:de:60:e3:96:01:42:23:
38:6f:98:ea:2e:6e:3b:9d:51:6b:1c:f5:ea:d0:04:ad:69:b6:
83:3c:20:93:e5:d5:9a:7c:45:57:36:c7:93:0b:a3:6e:91:05:
d5:30:fd:51:e3:b3:48:75:fe:07:b2:ca:90:a4:9d:87:1f:7e:
3d:3f:ef:16:57:5b:85:08:92:da:80:03:dc:7b:9f:25:cc:7f:
39:81:f5:6a:f5:df:ad:98:d3:5b:03:1c:f8:d8:59:aa:49:0e:
7a:e2:ec:9b:cb:69:0c:8c:18:88:86:c1:fa:77:9b:ab:60:9c:
d8:20:58:84:70:5a:40:46:64:3f:0b:3b:1b:2a:df:3e:fc:24:
d9:00:ed:4d:99:c8:b5:ac:6c:f3:eb:4f:73:cb:8d:09:0f:62:
8d:df:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:11:08 2025 by rpki-client