Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
File: hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft (raw, json)
Hash identifier: hF+EYh8G5Qt3eBnGC0StYZIhy2M/w0nJmRu391vcGmQ=
Subject key identifier: D5:FD:30:67:C0:E2:77:B0:89:41:AE:A5:49:66:F6:B7:59:0F:E6:2C
Authority key identifier: 86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
Certificate issuer: /CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Certificate serial: 01967AFBB3DF44790A62733D332D3CF08F2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
Manifest number: 05D9
Signing time: Mon 28 Apr 2025 06:00:37 +0000
Manifest this update: Mon 28 Apr 2025 06:00:37 +0000
Manifest next update: Tue 29 Apr 2025 06:00:37 +0000
Files and hashes: 1: EKLQu7iYylRaZbkh51ntRdvQ1sc.roa (hash: RK+Kru3PnFxl9Ll91ljugGNNYfjxqJD6II7naH011aw=)
2: hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl (hash: iu9uwsDyFFOR4AGeFkIhhyhG9leW6UBBSl6yyjwXQHo=)
3: lO9lnjMKShKR1lmHSBZdeXnPEkY.roa (hash: c7CjjG3dW9IskX6aNGKT3OeAaVeTmT4gSZizwrVUurs=)
4: maJ8CmpVji7iExXaEzUUxHgibH8.roa (hash: JObe+le+P4uoJGOeOZ+4H+wfXfvsZKVWkXVTp6TQq5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:fb:b3:df:44:79:0a:62:73:3d:33:2d:3c:f0:8f:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8636a4e14a71ddd510164b8631ad99bbfc75953a
Validity
Not Before: Apr 28 06:00:37 2025 GMT
Not After : Apr 29 06:00:37 2025 GMT
Subject: CN=d5fd3067c0e277b08941aea54966f6b7590fe62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:a2:5a:b6:13:38:38:f9:c2:e0:9d:c1:21:
e5:b8:f5:e5:c9:9a:a1:69:14:38:fd:1c:6f:05:1b:
4e:ad:8c:d0:a9:26:95:e8:cf:51:61:2d:76:1f:93:
93:0a:83:de:b2:e4:e2:30:09:81:6a:00:3b:b9:e7:
9d:68:cd:c4:4a:08:bf:11:20:63:48:52:a8:dd:e5:
a1:52:18:fe:bc:cb:d7:31:2c:c2:06:86:94:8b:c8:
f9:84:db:89:79:2d:09:37:b9:db:2c:91:e8:ef:d3:
74:9a:36:8f:e0:f0:32:11:59:16:ec:49:f9:d2:74:
27:f5:8f:56:bd:54:9d:a8:a8:b9:34:25:af:5d:80:
6c:88:de:d7:10:eb:aa:3c:37:5d:f6:5d:b6:35:9c:
a3:25:bb:88:87:bb:f5:de:b1:31:db:3b:85:03:3a:
ee:34:53:ff:de:49:5f:f5:db:5e:e2:ee:ff:20:b8:
22:86:17:d5:4d:29:6d:15:5c:1c:7d:2d:4b:90:fb:
e6:fd:05:fa:d1:e3:31:e2:97:aa:9f:e3:d2:1d:fb:
e9:65:c9:11:11:7d:f2:62:3e:dd:c7:83:50:18:c5:
cd:7c:3f:39:92:c0:c1:de:45:bb:85:6b:3d:7d:bd:
61:d1:51:17:00:58:86:d2:ec:db:88:01:e3:c2:b6:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FD:30:67:C0:E2:77:B0:89:41:AE:A5:49:66:F6:B7:59:0F:E6:2C
X509v3 Authority Key Identifier:
keyid:86:36:A4:E1:4A:71:DD:D5:10:16:4B:86:31:AD:99:BB:FC:75:95:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjak4Upx3dUQFkuGMa2Zu_x1lTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cdeca3-4ef1-45ad-8922-2f7cf8446a31/1/hjak4Upx3dUQFkuGMa2Zu_x1lTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:dc:eb:f5:91:c3:dd:05:71:f8:fc:4f:58:18:4e:81:5e:12:
e6:2d:90:f0:b7:80:ec:89:80:78:7c:2e:30:ca:c6:ac:90:94:
f6:11:1c:28:af:e5:9a:c3:a1:83:f0:11:8e:be:a3:33:f2:e7:
d3:b4:0a:f2:fa:20:99:b0:72:c1:52:8a:85:8f:36:60:7f:3b:
de:9b:8d:89:d0:7b:8c:8c:9f:dc:fa:ab:3a:7c:c2:2e:9f:6a:
82:a3:e1:a4:27:2a:bc:e4:75:26:a4:0c:c8:ac:17:33:24:78:
bf:63:3a:8d:7a:17:58:4e:dd:5e:9e:04:14:57:51:1d:78:38:
98:1b:6d:d1:e1:19:3c:b8:5b:4d:71:c2:7b:df:2d:5d:09:ce:
95:79:a8:46:86:09:6f:9e:b2:5d:0d:53:cf:9e:80:dc:b3:b3:
04:ef:c6:b3:6c:c1:d6:35:aa:8d:b5:1f:73:60:09:5a:b0:0f:
e2:56:a4:79:33:a1:a9:70:00:50:33:f4:d0:dd:0f:2b:bb:cf:
5f:79:de:b4:a7:1c:1a:89:a8:44:05:fa:04:75:aa:e4:62:b8:
e9:cb:d1:a5:a1:dc:e0:34:60:5c:f6:15:50:15:37:20:85:ba:
50:6a:fb:d5:53:ba:f3:54:4d:f6:05:f6:d1:ae:ef:96:7b:85:
68:ab:a6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:33:35 2025 by rpki-client