Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json)
Hash identifier: kOQ8y3sMaU0lSb9mt9ocVLtIkdkD1siIRBOzvERuev8=
Subject key identifier: 83:1E:8B:2A:64:9D:13:2B:B1:A4:0B:76:0B:7C:FE:6B:D8:B0:C2:13
Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Certificate serial: 0196711D0BE872008F791D2B4A449D34CCE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
Manifest number: 11A1
Signing time: Sat 26 Apr 2025 08:00:51 +0000
Manifest this update: Sat 26 Apr 2025 08:00:51 +0000
Manifest next update: Sun 27 Apr 2025 08:00:51 +0000
Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: UsrHiEuRgu0yVGZxQmVlH1r5N1btpBAkT3eRKTaAYYs=)
2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:1d:0b:e8:72:00:8f:79:1d:2b:4a:44:9d:34:cc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f
Validity
Not Before: Apr 26 08:00:51 2025 GMT
Not After : Apr 27 08:00:51 2025 GMT
Subject: CN=831e8b2a649d132bb1a40b760b7cfe6bd8b0c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:0f:9e:5e:3b:86:2b:9f:c7:1e:46:cb:23:
c1:9d:25:2a:c2:43:e7:bd:30:18:d6:1b:8a:97:47:
3f:bb:74:32:81:be:10:d0:5f:9e:5f:07:02:0b:43:
eb:6d:5f:3c:15:8f:96:10:ef:8b:5e:1e:1e:78:94:
b1:5f:46:93:b0:52:80:8e:d3:f8:8d:4b:ee:0c:51:
09:f1:c4:97:80:a4:9a:63:c6:8d:2f:d0:40:ae:d0:
49:fc:8e:a0:df:f5:aa:00:7b:0f:76:bf:15:3d:00:
db:74:67:8b:da:fe:5f:01:cd:dd:bb:d1:93:e8:e0:
78:ad:2e:9a:b6:0a:91:94:7d:59:10:ca:00:c7:5e:
0e:d3:f4:e9:9a:fd:7e:ab:38:99:b3:9f:f0:c5:f8:
2f:33:31:b6:8b:ed:fb:c8:6f:b2:a0:de:09:2c:dc:
c8:5a:66:ae:e6:39:97:41:81:47:06:d7:28:fb:ae:
83:5f:1c:b7:f1:fc:af:e4:6b:f5:ae:8c:ec:5b:c2:
fd:1e:d5:90:9d:39:e8:82:f3:53:45:34:d6:50:3a:
51:a2:2c:43:c5:e5:56:3c:02:c8:a0:03:42:3f:4a:
28:3d:6c:c6:fd:2f:5b:19:45:79:eb:a7:f8:f1:5a:
05:74:94:93:97:e0:ad:c8:ee:5f:20:74:ab:2c:68:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1E:8B:2A:64:9D:13:2B:B1:A4:0B:76:0B:7C:FE:6B:D8:B0:C2:13
X509v3 Authority Key Identifier:
keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:44:7f:ef:c2:6f:02:ac:10:d3:59:1e:c0:d1:a9:b2:03:7a:
35:4c:7f:18:94:ed:8c:0d:cb:e2:95:3b:53:cc:96:f9:a2:17:
fb:da:61:31:82:b7:c2:0f:94:2a:1e:5d:89:bf:e6:12:63:f4:
37:3b:bc:85:60:75:ee:61:40:7e:c5:c0:d7:3a:56:69:78:a8:
b3:b4:ee:14:ce:ad:e4:2b:a6:4d:14:43:0a:d2:f0:0f:bf:ed:
69:7b:0d:ed:ca:17:03:51:08:44:ea:29:f4:69:dd:98:0e:82:
2e:45:75:6c:6f:c1:88:3b:c3:32:24:bf:f0:8e:c6:64:9f:d8:
1c:09:c5:10:19:45:0f:8a:81:c7:69:53:0a:d1:af:44:cc:a3:
6e:61:df:be:26:5d:4c:51:4e:59:34:26:96:98:8a:07:9e:b3:
0b:4f:eb:9f:20:cf:97:cc:10:df:a2:20:28:2a:d4:2f:7a:05:
21:46:57:bb:ad:7e:39:5f:99:1b:c7:ae:bd:c2:5c:9f:ee:2a:
99:e9:b2:dd:50:58:4a:b7:3a:c1:a0:ce:2e:39:d5:3b:18:48:
29:db:02:42:e2:2d:61:25:63:ec:cb:59:8e:e2:86:0a:0d:5d:
f7:86:92:16:80:7d:82:53:ce:3b:15:80:42:2f:16:7b:d2:34:
94:72:24:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:22:20 2025 by rpki-client