Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
File: hbfVzNrwMwl0l0V2QgCnJydkcwo.mft (raw, json)
Hash identifier: 3r7G+N8zD7fWNZGAnsBZb4tiyPlkB3Lag7o/Fm8mfqk=
Subject key identifier: C3:C3:F1:CE:9C:8B:2E:DF:97:9A:89:B0:63:5A:B5:DA:03:18:A5:F8
Authority key identifier: 85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
Certificate issuer: /CN=85b7d5ccdaf03309749745764200a7272764730a
Certificate serial: 01967A56DF109AE3B2A417F36FF70CE9429A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 03:00:35 +0000
Manifest this update: Mon 28 Apr 2025 03:00:35 +0000
Manifest next update: Tue 29 Apr 2025 03:00:35 +0000
Files and hashes: 1: bo9Zt5WveGJLmto-uiWetgZCX7Q.roa (hash: zzs00ivzGHR02cC1o3Qz5YlQGqmECC+fSU4iyTugi54=)
2: hbfVzNrwMwl0l0V2QgCnJydkcwo.crl (hash: TR0cZj118j4gogypufXR539pPvHogZ2PsokzysuAGRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:df:10:9a:e3:b2:a4:17:f3:6f:f7:0c:e9:42:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b7d5ccdaf03309749745764200a7272764730a
Validity
Not Before: Apr 28 03:00:35 2025 GMT
Not After : Apr 29 03:00:35 2025 GMT
Subject: CN=c3c3f1ce9c8b2edf979a89b0635ab5da0318a5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:4c:44:98:d9:90:55:cf:1d:64:43:f5:74:
81:ca:d6:bd:72:3f:8c:a3:2c:a5:0e:c8:87:06:91:
81:9a:58:9d:ea:4f:48:ac:a1:75:58:cf:33:7f:93:
e8:21:e9:72:b4:7e:fa:37:46:70:43:4a:99:bc:45:
39:5d:a3:a3:74:aa:05:18:3f:a4:da:dc:fd:21:58:
ab:fa:4f:e2:2f:c6:92:59:99:2c:16:7b:bc:35:b6:
82:2d:74:e8:5d:0e:00:3e:e9:99:04:03:4d:c2:d6:
d1:23:d0:60:bc:02:c1:69:cb:a0:69:96:1d:70:31:
74:ac:e2:ab:8d:cc:41:8c:d6:d9:e2:38:89:7a:e6:
12:59:27:82:bd:6f:9c:c5:5b:4d:62:32:a5:54:a0:
7b:b9:07:df:98:16:d5:55:6c:8c:5e:0c:85:a8:af:
40:a2:fa:9f:d3:74:ca:57:2f:db:53:b7:8c:fb:f3:
98:e2:56:dd:04:35:3c:82:f6:87:dd:43:25:f2:2d:
7b:0d:82:f9:40:41:d5:13:8c:19:5e:a1:46:27:47:
74:a0:8a:7b:b9:f2:e5:75:d2:86:74:17:68:e2:6f:
c1:f0:12:1e:a6:73:a3:3e:34:eb:b1:11:92:09:60:
79:7f:56:8d:a0:09:4c:22:03:c7:02:14:8b:de:22:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:F1:CE:9C:8B:2E:DF:97:9A:89:B0:63:5A:B5:DA:03:18:A5:F8
X509v3 Authority Key Identifier:
keyid:85:B7:D5:CC:DA:F0:33:09:74:97:45:76:42:00:A7:27:27:64:73:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbfVzNrwMwl0l0V2QgCnJydkcwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1137d8-1d36-41bb-b7fa-409493694a52/1/hbfVzNrwMwl0l0V2QgCnJydkcwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:97:85:d8:68:6b:10:f2:d4:c4:51:15:57:68:0b:ef:95:ae:
49:ef:ed:40:b6:a6:0d:7b:a9:90:fe:65:a4:5c:8f:15:00:90:
8c:8e:35:a3:3a:d9:05:e6:52:1b:9d:6d:4b:b6:53:89:7f:40:
a5:83:c3:59:7d:50:43:b1:7c:72:b6:29:2b:29:70:90:fb:45:
a9:ec:b7:4b:3a:6f:ed:87:aa:9f:55:d2:ab:04:93:ca:0d:53:
7f:6f:ec:0e:56:0e:6b:b4:12:29:cf:f2:9c:71:d1:29:39:1d:
ec:86:62:fb:80:c6:62:fd:ea:27:9c:15:c6:26:4f:22:91:f4:
cc:b1:02:7a:27:1a:3e:c6:2e:de:72:8c:ca:ee:b7:bc:38:f0:
61:04:23:26:13:e0:03:a8:8c:72:dc:75:ea:12:e1:cf:aa:56:
55:e2:bc:89:05:57:3c:dc:20:27:a3:28:eb:cb:ee:10:75:a0:
71:44:97:74:fa:e7:5a:25:d0:f8:1c:20:53:29:1a:c9:d5:ec:
81:5e:7a:d8:a3:77:b5:e2:6c:26:6f:05:b1:c8:e2:53:3b:94:
42:89:35:e1:16:68:85:5d:42:9d:3d:75:7e:c8:5d:67:af:42:
84:0d:c3:5f:76:c6:f1:38:0d:06:32:25:7b:24:f6:e2:aa:1d:
31:bb:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:01:53 2025 by rpki-client