Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
File: HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft (raw, json)
Hash identifier: xo6X+E7DekmFFHuUhZd2/7dn5NJxTVJt14MUQXTpw30=
Subject key identifier: 65:BE:1A:B5:65:CE:78:82:5C:2D:3C:B8:39:14:3E:B6:C2:50:D7:7C
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 019675D5102FCF9023CAB69A42207955CED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
Manifest number: 016F
Signing time: Sun 27 Apr 2025 06:00:19 +0000
Manifest this update: Sun 27 Apr 2025 06:00:19 +0000
Manifest next update: Mon 28 Apr 2025 06:00:19 +0000
Files and hashes: 1: BCpGmAAybEKlV3wOuVSBe587d6A.roa (hash: OMYJrykGqoEHSJmtTAAKG/WGPSWVW40cgEc5tVnY4H8=)
2: HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl (hash: S7b2sZLQp3lzXbYzu7GHC5grEcnSMW6lKPP8Ae7dt3I=)
3: Hz-bNjOewKosqvkhbdq7wllugqY.roa (hash: Wg09CLCh3LKvZ9uP5X7eZQr1mwx5+JIzjmdsHdfrN+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:10:2f:cf:90:23:ca:b6:9a:42:20:79:55:ce:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Apr 27 06:00:19 2025 GMT
Not After : Apr 28 06:00:19 2025 GMT
Subject: CN=65be1ab565ce78825c2d3cb839143eb6c250d77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:f2:05:f6:ef:ee:7b:26:27:9a:4c:92:84:
24:e5:14:5a:97:da:69:cb:92:3d:61:47:9b:5c:91:
cb:17:79:3b:fb:ed:8b:a3:6e:f0:88:19:16:7b:fd:
a8:a1:aa:ba:73:11:54:88:44:03:20:c7:ad:54:dd:
41:7a:9d:bc:6e:af:ab:3a:cb:51:d7:88:ca:19:9c:
5f:ef:6c:c6:0c:be:39:7b:cf:a2:9e:f7:5b:82:2d:
88:55:c4:f7:34:47:4d:e8:13:7a:8e:02:25:25:8b:
93:0d:67:f9:e7:9b:91:c9:5e:1b:f3:c6:51:96:f3:
d8:7d:6d:46:48:17:75:b4:f9:ff:fd:e7:d1:ff:15:
f2:73:a6:4a:da:ce:5b:25:60:8b:63:9b:d5:f6:7f:
eb:7e:b0:b5:98:9c:4b:63:90:15:2e:f1:8d:e2:10:
71:36:85:45:e9:41:bd:9f:0e:ba:39:a5:4b:81:a6:
1d:6c:a9:e2:59:48:ee:27:9a:e5:5d:4a:8d:32:92:
67:a7:12:51:6f:5c:c2:5d:f9:58:d8:fe:10:d5:39:
14:ef:e5:0e:fa:25:be:6d:7a:87:ed:11:b0:bb:c2:
9e:04:9b:fe:18:b4:b5:0e:a0:e9:0e:d5:dd:00:be:
82:7b:65:28:6f:72:37:d8:96:f9:6b:e1:c9:17:35:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BE:1A:B5:65:CE:78:82:5C:2D:3C:B8:39:14:3E:B6:C2:50:D7:7C
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:99:df:96:a9:d9:69:f9:c9:d5:f8:97:4d:48:0c:5e:41:81:
2d:84:29:05:91:52:82:54:7f:34:3f:0d:f7:06:ac:94:7e:2c:
73:bc:b6:67:7f:22:37:64:97:0a:ee:22:ef:a8:7d:95:86:b5:
7d:a1:28:7a:5e:39:a6:78:f9:69:49:b3:ab:ef:31:40:75:ea:
09:73:2f:5b:9b:77:7f:e3:e2:1d:2c:d1:73:88:34:b0:57:54:
6b:10:e2:30:0e:ef:08:b1:3d:53:54:dd:81:01:0a:9d:8f:bb:
cb:d7:4d:4a:08:71:8d:2d:24:31:3a:14:94:bb:df:27:8b:d9:
22:d9:bd:fc:eb:af:be:73:81:e3:7a:40:58:de:0e:16:8e:b9:
9e:a1:99:37:b7:df:f7:5c:7a:19:70:e1:76:1b:e4:83:73:d0:
c1:64:f1:08:2b:99:a8:5d:a8:92:09:8f:78:1f:ae:7e:47:5c:
00:f9:a9:41:82:58:f8:d6:e1:0c:82:83:54:d5:fb:42:cc:aa:
c0:42:f1:b4:0d:82:a1:86:c0:7b:ae:95:ad:10:00:21:b6:a6:
dc:41:a0:43:15:71:df:ec:75:fe:cf:cd:77:f5:9f:44:d7:48:
cb:d2:7f:8a:a1:bc:94:a8:c4:2f:d9:0a:ce:78:d9:64:66:21:
68:f3:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:34:50 2025 by rpki-client