Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
File: HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json)
Hash identifier: A8pj0PP8orDVGuO5dENjWwjfK60mXiSTJiRzRt2uUz8=
Subject key identifier: B7:A9:3A:7B:DC:FB:D2:20:C2:D2:1D:82:B2:DD:F5:C6:08:02:F3:D9
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial: 019671F843B3CB9E737F8549568C7A1C1083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
Manifest number: 0217
Signing time: Sat 26 Apr 2025 12:00:17 +0000
Manifest this update: Sat 26 Apr 2025 12:00:17 +0000
Manifest next update: Sun 27 Apr 2025 12:00:17 +0000
Files and hashes: 1: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=)
2: 1XXrB12LRdMGqs-GeS3cAximpqI.roa (hash: QvMP+g9vxMZ3cjLKa1foWvZXJz5KMsBVO3RZBZhceVg=)
3: 7oayGcY3Qdt9R-HR-VvUkK4tdUQ.roa (hash: JBF3Cz4Y9X2mzfXIi45uJ7vNKUzCzYVEwRnol0zS7Q4=)
4: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=)
5: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: 8l2WEv1SIOSXlH9LZS7C+xqR8QoPKKpUjEUgrKim3t4=)
6: K5H9J-OAc8ll4c6vgE8iPlmXFGA.roa (hash: CuPpoOyCcIww5/+3+pdtgh8blZSDt1yjsk5707ldvp8=)
7: Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa (hash: Rc7LlFZsQD6UtspfP1hY2HJq001uYyMfvHYShOgLlRs=)
8: pUDcLqhd8k-OHqhDTMHEWLFxtNI.roa (hash: zmsnQNHG6rnZC/5WP217xaq98ZpVSxzIVkPlWZUUiFE=)
9: rplcEHwnzrs9ea4yV0c2pW2uUSU.roa (hash: F6kcOWEqyk9+Z0k9BnSlsmaw3fMe2/8X0jrKTuWJCk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:f8:43:b3:cb:9e:73:7f:85:49:56:8c:7a:1c:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Validity
Not Before: Apr 26 12:00:17 2025 GMT
Not After : Apr 27 12:00:17 2025 GMT
Subject: CN=b7a93a7bdcfbd220c2d21d82b2ddf5c60802f3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:cf:c2:26:88:5f:f9:51:57:e8:99:7f:15:
cd:3b:60:8f:5c:5a:8a:cc:d6:b3:66:a2:f2:9c:90:
e4:eb:92:ba:7b:29:32:ba:ea:e7:d2:7b:04:08:49:
39:31:c0:2f:8d:11:0b:ff:dd:34:47:7f:2e:32:dc:
90:9c:f8:d7:64:56:ce:c0:fa:fa:da:1e:dd:df:fa:
fb:20:17:c6:f4:9a:9e:6a:6d:e5:5c:55:c7:a8:a5:
99:b5:d3:26:03:24:cf:5e:29:6c:4a:32:5e:55:63:
74:ba:69:35:d7:e9:b7:1c:f9:3d:54:4a:f4:a2:dc:
8d:ad:33:31:85:76:96:3b:24:79:01:a0:58:85:82:
f2:8e:fd:4f:4c:92:e2:86:5f:66:89:fe:ac:cd:53:
54:a6:a1:21:85:dc:99:07:65:3d:de:d3:ad:7b:f6:
e8:34:0b:9b:ec:c9:56:82:e9:08:e5:4f:89:4b:c9:
88:07:ce:42:a7:9e:b8:a1:8f:a6:b6:6c:53:f6:94:
ee:c7:f6:5c:62:e9:6e:06:88:5b:3b:52:08:65:e4:
a3:79:46:85:7f:f7:c2:9c:79:6e:b4:70:e3:2e:ff:
3a:81:ab:2f:07:69:1e:2f:bb:ee:f7:13:d4:76:71:
18:86:e5:cd:ff:8e:6a:40:29:d3:22:7b:52:fc:43:
89:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A9:3A:7B:DC:FB:D2:20:C2:D2:1D:82:B2:DD:F5:C6:08:02:F3:D9
X509v3 Authority Key Identifier:
keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ab:cb:f8:93:57:5f:7c:11:1c:d7:cc:56:ca:b3:86:ab:54:
1c:b0:a4:d3:9c:f6:09:83:fb:f3:af:d0:98:6d:e7:0e:4d:cb:
01:a4:a8:80:b7:99:f3:0c:28:7e:8c:4f:8f:e8:1e:9f:39:ee:
dc:1b:bb:47:39:0a:bb:e3:cb:eb:ce:6e:1f:0f:92:5e:03:d5:
57:d2:dc:32:87:c6:5d:da:39:8d:3c:fc:b5:01:e1:93:00:b5:
c7:29:d0:ce:6b:ce:f8:1a:18:39:80:5f:cc:95:dc:15:4e:0b:
a3:7e:ab:dd:a1:ba:ef:91:23:98:66:87:c7:4a:eb:ea:68:8d:
0d:8c:3c:6a:d9:73:c4:ab:8e:ae:32:9e:44:7f:fc:c3:0f:5e:
ea:d5:a6:62:89:69:00:56:33:05:ec:60:14:24:fe:3c:45:dc:
1b:71:ed:d7:54:0a:f1:68:9d:30:83:b8:ed:0b:73:54:d2:13:
68:b6:af:43:ea:44:56:6b:93:fc:6a:af:e9:e0:aa:db:a8:62:
9b:bd:53:73:5d:da:f8:5f:d5:5e:f2:1b:ea:65:f4:1b:8f:30:
0a:b6:45:56:ed:89:09:98:1e:0b:ef:61:e3:97:6c:b3:e7:6a:
50:55:32:5c:b7:3e:50:34:3d:47:ee:75:73:f5:1e:24:b7:f2:
0c:dd:4f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:00:54 2025 by rpki-client