Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
File: hcNSXWi2ERZWThbh3U5WywNcnIU.mft (raw, json)
Hash identifier: hEPUExpGKPKNrGdzEcU+LPoi/Cj0wfzSCLuoKEy6uQo=
Subject key identifier: 78:86:A3:52:9C:4C:A9:42:B6:31:7E:EE:1E:80:B1:9A:3E:D9:53:0B
Authority key identifier: 85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
Certificate issuer: /CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Certificate serial: 019673AFE85D564781A463A4816E7D8A5DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
Manifest number: 1514
Signing time: Sat 26 Apr 2025 20:00:30 +0000
Manifest this update: Sat 26 Apr 2025 20:00:30 +0000
Manifest next update: Sun 27 Apr 2025 20:00:30 +0000
Files and hashes: 1: hEPXQgU_4RM48GU6YHvdaeu2Uew.roa (hash: Y8wvnBW02yBGPfnw7ReZF8CB9IAoGOhz+Y/sJITIMzc=)
2: hcNSXWi2ERZWThbh3U5WywNcnIU.crl (hash: uwIxV/ou/T9wFBwb1CvpY8nHRhelfmG9wP/DzGNJHvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:e8:5d:56:47:81:a4:63:a4:81:6e:7d:8a:5d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85c3525d68b61116564e16e1dd4e56cb035c9c85
Validity
Not Before: Apr 26 20:00:30 2025 GMT
Not After : Apr 27 20:00:30 2025 GMT
Subject: CN=7886a3529c4ca942b6317eee1e80b19a3ed9530b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:45:65:ce:fc:e7:ce:8e:0b:f1:aa:f7:2f:
6a:ad:d4:69:b1:3d:52:a0:ee:aa:21:ad:de:84:ac:
23:1a:5a:60:75:be:d4:a3:88:71:1f:e4:3c:d1:62:
af:3b:37:a4:08:d7:bb:ef:55:67:2b:79:2c:fd:50:
e8:b7:83:46:87:7b:e5:b1:26:d1:e4:f7:ad:23:9a:
71:4a:7b:64:0d:02:84:17:e6:a4:6d:fd:5d:2a:d2:
3c:3d:9e:24:58:72:3f:d9:d5:25:3b:2f:d1:31:18:
49:c2:a9:af:f6:4b:2b:92:24:47:50:af:1a:04:d7:
bf:74:df:48:b0:2f:6c:3a:8c:73:eb:da:f3:cf:3b:
64:0d:81:26:07:5c:22:74:06:b9:3c:5e:e8:d7:af:
3c:77:d1:1f:13:79:6f:4d:4d:e9:8f:e0:d5:9f:42:
b6:96:42:a4:e3:32:0c:22:aa:f6:27:17:b6:7c:9f:
9a:28:fc:bb:6c:56:8a:e3:e5:b5:4f:80:b1:fc:06:
7c:59:98:cb:a7:29:9e:58:2f:a1:a4:c5:5b:01:8c:
e7:db:32:43:aa:7e:0c:9f:01:5c:27:9c:85:5a:72:
db:44:a3:40:97:07:e1:63:f7:e0:43:d1:9a:cc:8d:
a0:60:e5:fc:19:ba:b5:e0:bb:d5:e0:32:95:54:20:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:A3:52:9C:4C:A9:42:B6:31:7E:EE:1E:80:B1:9A:3E:D9:53:0B
X509v3 Authority Key Identifier:
keyid:85:C3:52:5D:68:B6:11:16:56:4E:16:E1:DD:4E:56:CB:03:5C:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcNSXWi2ERZWThbh3U5WywNcnIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9fbec1-ebd2-41ba-83d9-694dbfaddb8f/1/hcNSXWi2ERZWThbh3U5WywNcnIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:3b:4e:f6:df:b8:31:4d:94:f2:44:a7:f0:c1:59:3a:57:c3:
29:06:8d:f7:f7:88:05:25:d6:5c:89:ee:66:14:10:15:3a:06:
dc:50:dd:47:f3:b6:9d:7b:80:42:5a:71:3c:6a:5e:43:ab:81:
40:4d:07:ac:a5:e8:dd:8f:7c:3b:d3:4e:42:65:78:6b:88:a1:
c5:9a:44:ba:aa:43:12:81:b3:1e:8b:bc:e6:41:ea:93:07:cb:
dd:42:2a:cf:55:ca:fc:b6:0e:3b:99:f4:5c:36:00:9e:4a:73:
7e:79:de:27:a1:56:d5:d7:18:6d:b6:ea:1f:fa:1d:cf:79:a2:
f6:36:68:cd:02:38:97:e7:5b:3c:44:52:94:30:e5:85:5c:7a:
a9:f9:7b:c2:fc:4a:b3:b8:b1:cb:65:4d:81:a1:10:c4:b0:72:
23:57:16:df:6b:79:ed:18:85:47:52:a4:68:eb:83:37:7a:b9:
5d:c2:29:38:f3:e1:6e:cf:76:23:f3:b5:d0:b0:58:41:d3:61:
94:d9:07:b5:12:8c:68:aa:06:36:a7:b9:33:ca:81:74:07:a6:
a9:01:4d:8b:3d:17:88:e2:bf:83:92:db:b3:1c:2a:b2:f2:26:
d8:14:04:6b:74:e3:43:9f:ac:c6:b3:45:00:5c:2e:d5:24:df:
2c:46:84:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:43 2025 by rpki-client