Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
File: HhH4prKDtSYE2TKiWJO4ZAQSHos.mft (raw, json)
Hash identifier: ekdLAbsq922HGITE/TZvFZNGo/xDNULKl9bf3fuWSHk=
Subject key identifier: 34:AD:FA:9C:8B:02:20:87:3B:9F:48:68:B5:7B:9D:41:5D:26:8C:F7
Authority key identifier: 1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
Certificate issuer: /CN=1e11f8a6b283b52604d932a25893b86404121e8b
Certificate serial: 019683912D709480C18581A4740581C53984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
Manifest number: 0B1E
Signing time: Tue 29 Apr 2025 22:00:51 +0000
Manifest this update: Tue 29 Apr 2025 22:00:51 +0000
Manifest next update: Wed 30 Apr 2025 22:00:51 +0000
Files and hashes: 1: HhH4prKDtSYE2TKiWJO4ZAQSHos.crl (hash: gBo7erPyRLRn6ZFGRzRQVd+z2AfxZJ/UgjI49G1gqD4=)
2: JnfPzURw0o3uQEVpLXDzJLYPYKM.roa (hash: vCq1v3b4A28A6WJQ+8UTZcjdnixh0uM58yrXzgu7llI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:2d:70:94:80:c1:85:81:a4:74:05:81:c5:39:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e11f8a6b283b52604d932a25893b86404121e8b
Validity
Not Before: Apr 29 22:00:51 2025 GMT
Not After : Apr 30 22:00:51 2025 GMT
Subject: CN=34adfa9c8b0220873b9f4868b57b9d415d268cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:2d:37:c5:6a:7a:08:ff:7f:cd:76:62:6d:
e5:eb:03:7c:d7:ca:8f:5e:6d:da:e8:59:84:61:01:
05:f3:d6:8a:fe:18:93:d6:02:1a:9c:db:c7:de:6d:
0c:54:a5:bc:64:c1:db:e3:3f:1e:e1:e9:a6:42:fa:
8c:e6:f4:88:c4:6e:8a:a8:60:f1:f9:09:49:9a:32:
31:72:7f:5f:0e:15:a1:6a:2a:b4:83:97:12:3d:26:
6c:fb:f5:e9:7e:16:47:0f:fe:bf:58:78:d7:73:08:
11:5b:33:e5:59:55:24:36:07:cf:f0:09:b2:86:27:
ae:20:a8:e1:8d:46:16:32:1b:61:03:29:75:e4:05:
69:12:8d:b0:60:69:8b:c0:74:ff:a2:72:0f:18:2a:
1f:55:9b:1b:ea:ff:38:93:fe:33:3b:ad:a7:9b:68:
34:aa:a4:2e:c1:33:ea:a1:f8:d2:f6:98:cc:1c:61:
ec:0b:a0:3b:61:76:e4:cd:0e:e7:52:e9:1a:84:ba:
f6:5b:f9:fe:c3:aa:50:2a:52:ab:e2:7f:43:0a:01:
b1:91:d1:60:53:3f:88:e8:e6:96:98:2b:93:03:0a:
da:3d:3d:09:c0:ac:72:89:70:92:25:28:03:cc:4d:
35:59:38:7a:0e:b3:ac:35:00:fb:f2:ad:91:03:32:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AD:FA:9C:8B:02:20:87:3B:9F:48:68:B5:7B:9D:41:5D:26:8C:F7
X509v3 Authority Key Identifier:
keyid:1E:11:F8:A6:B2:83:B5:26:04:D9:32:A2:58:93:B8:64:04:12:1E:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhH4prKDtSYE2TKiWJO4ZAQSHos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c9eb55-e593-4cd7-8714-1a593194c798/1/HhH4prKDtSYE2TKiWJO4ZAQSHos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:21:8d:4c:b0:57:e3:28:1d:77:07:b5:86:13:fe:90:b0:f0:
f2:75:87:db:cd:4c:c7:a0:87:6f:88:22:21:25:e1:fc:c3:9b:
d7:cb:e2:95:4f:2d:cc:04:52:0c:25:cf:d4:e0:f0:39:c3:90:
a5:61:db:0b:2c:6b:d2:e6:60:b9:15:36:f6:7e:89:52:e1:bc:
33:bb:3f:81:a9:5b:7b:b1:c4:11:9d:a1:55:34:fe:2b:05:dc:
38:ef:3d:d6:f1:19:f1:59:b2:f9:2a:7a:91:0a:98:1d:45:6c:
b7:18:11:69:dd:91:da:9a:ff:dd:54:e2:9b:66:bd:18:92:da:
8d:5f:ef:36:8d:b7:f7:94:f9:b4:71:b2:b1:a7:cd:28:04:45:
5b:9e:f6:9f:00:8f:0a:e2:73:18:b0:75:ba:86:f7:8b:3e:15:
81:55:09:ec:7b:4b:d1:4d:a2:d7:a4:28:2b:30:b0:41:00:9f:
d8:f5:91:c7:06:08:c2:5a:db:af:eb:52:3f:17:17:39:fa:c4:
9c:a0:86:43:81:f1:4b:be:cc:06:fb:fe:1d:61:2d:3e:76:75:
8e:23:e8:96:82:dc:dd:e2:52:20:ca:04:be:d2:d5:4a:37:df:
92:03:30:61:b7:af:a0:68:0f:5d:85:49:b2:34:e9:8a:62:00:
83:b5:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 01:54:41 2025 by rpki-client