Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
File: HRUAB3Kzw_orvXcn09OJORoUYz4.mft (raw, json)
Hash identifier: k65Gn83br5V5lTOD2FOgQpUzjZqBuEIOffMQx2xF3+8=
Subject key identifier: C1:4E:EB:92:A9:63:51:C0:F3:49:C5:E9:6F:23:61:D4:2D:4E:10:1B
Authority key identifier: 1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
Certificate issuer: /CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Certificate serial: 0196900301E8FEBF74840CC3051ED0E8D416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
Manifest number: 033C
Signing time: Fri 02 May 2025 08:00:38 +0000
Manifest this update: Fri 02 May 2025 08:00:38 +0000
Manifest next update: Sat 03 May 2025 08:00:38 +0000
Files and hashes: 1: 94kIYfqeFgknlBrr_TOvpCgSdqU.roa (hash: 81jYnPOJR+qUf9stNF6tQ8TBm+nuWM6vD4G5gF21A04=)
2: HRUAB3Kzw_orvXcn09OJORoUYz4.crl (hash: DuUYNwHLneYOKy+c0uvkXNSCorG1x3RziSL4BC1aj60=)
3: l4DfAejnNf8QL8LGIhGHT7CKlPg.roa (hash: UVDw7ayj2zIkMp75EMvrYNj0kdy6A1Nen9DvYGACBW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:03:01:e8:fe:bf:74:84:0c:c3:05:1e:d0:e8:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d15000772b3c3fa2bbd7727d3d389391a14633e
Validity
Not Before: May 2 08:00:38 2025 GMT
Not After : May 3 08:00:38 2025 GMT
Subject: CN=c14eeb92a96351c0f349c5e96f2361d42d4e101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:ac:16:c0:64:d8:0d:b4:09:e5:80:58:b1:
30:c8:c0:6c:2a:b3:34:fa:fe:f7:a2:c7:2d:92:b6:
52:6c:52:c1:66:88:b4:18:6e:8a:e9:48:2f:c8:b8:
df:9a:74:a0:7a:5c:7c:8d:be:c3:fb:1f:83:22:3a:
56:e0:f5:16:77:9c:89:ac:0c:1e:1c:1f:46:ae:e9:
65:ff:6e:56:2d:29:f5:b8:17:ff:91:94:ee:84:02:
6a:ae:b1:0a:69:8e:31:3f:b4:dd:b9:85:ab:fb:59:
d4:40:72:d5:e5:0a:67:4b:16:30:2a:ba:f8:8d:6b:
18:37:da:4d:ac:31:40:2a:04:67:39:a2:70:98:03:
1b:fa:e1:c3:3a:8a:ed:d8:81:1a:ad:e9:01:8b:36:
ef:4b:9c:ab:e7:d5:38:85:31:16:12:72:45:65:aa:
8c:45:a6:8f:1d:4c:fa:b1:6e:24:b5:6c:4c:6e:44:
a2:98:74:52:65:95:2f:37:ab:6b:89:f4:40:4b:c5:
e5:d0:db:f6:5b:cb:e3:3e:b5:69:65:48:63:68:b4:
f5:1a:1a:a9:cb:7f:a1:b1:bc:ed:d8:61:4c:12:95:
8c:59:c4:ac:81:f7:38:94:03:44:b9:dd:f1:5d:a0:
7e:93:8d:72:c4:e9:92:d0:3f:8c:a3:d5:13:38:ee:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4E:EB:92:A9:63:51:C0:F3:49:C5:E9:6F:23:61:D4:2D:4E:10:1B
X509v3 Authority Key Identifier:
keyid:1D:15:00:07:72:B3:C3:FA:2B:BD:77:27:D3:D3:89:39:1A:14:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRUAB3Kzw_orvXcn09OJORoUYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/cd6478-cef6-4a70-b488-b2129fb4ca5a/1/HRUAB3Kzw_orvXcn09OJORoUYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c9:ce:f6:3c:35:52:2b:88:95:ab:1e:c1:ba:25:42:a4:54:
30:7c:c0:63:44:65:c2:d6:9b:08:7c:54:59:95:79:67:59:ea:
4b:a1:0c:23:6c:cb:9d:99:6f:27:36:cc:f1:c1:05:86:54:ed:
dc:99:9f:0f:b2:2d:b9:a5:66:d7:16:55:51:a5:eb:bd:c5:bd:
2d:30:33:34:ab:19:6f:68:4f:ae:48:77:63:4c:1c:ca:b2:4c:
d4:60:e5:63:2a:15:3f:ad:3a:2d:b8:b6:9d:d2:fa:40:6d:37:
05:24:e5:ee:b0:84:b6:20:f4:fd:b0:2e:23:bd:4d:f4:fa:65:
70:3f:a4:bd:58:8e:c5:d5:df:cc:fb:17:2d:26:d2:2d:25:0f:
63:f2:09:47:d6:db:cb:ae:f8:36:e3:f9:22:2f:75:66:c1:d6:
34:b3:a8:a2:df:97:c7:d3:c2:83:b0:d4:d2:a8:0f:2a:0d:ed:
9e:0b:64:db:3b:16:e9:24:90:69:af:f0:ba:9b:13:13:fe:87:
5f:a6:17:4b:c6:01:7d:e9:2a:29:d7:6c:28:f6:32:75:a2:08:
b0:6c:7a:23:80:ba:f6:f1:46:06:2f:85:82:c6:06:50:22:50:
7d:2f:d2:4c:34:f0:ce:38:c8:29:52:1d:9a:ce:a3:78:93:7b:
ea:b3:0d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:58:56 2025 by rpki-client