Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
File: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft (raw, json)
Hash identifier: SisIHM3J7VtfM8h7/C5MKWq82dzK613LLI4lavNjYY0=
Subject key identifier: A2:27:2A:22:CB:2E:BD:5D:11:9D:F2:F8:58:55:8E:E8:4F:17:C6:91
Authority key identifier: 86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
Certificate issuer: /CN=86c62c6962ea33029b480260989e1851c3252171
Certificate serial: 019683C7C971666BF24A09900F722A350280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
Manifest number: A6
Signing time: Tue 29 Apr 2025 23:00:30 +0000
Manifest this update: Tue 29 Apr 2025 23:00:30 +0000
Manifest next update: Wed 30 Apr 2025 23:00:30 +0000
Files and hashes: 1: hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl (hash: VfocJe11aQrZ/1xHiURQtRi9iw3jdiu9TCBlvVA2tSo=)
2: is7DkK81PMh7JZG7-MMXvu0KAJc.roa (hash: 5AryV0mRq30AxQOgSKEEzO83i7o3Dx9gPE05wVnrsnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:c9:71:66:6b:f2:4a:09:90:0f:72:2a:35:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86c62c6962ea33029b480260989e1851c3252171
Validity
Not Before: Apr 29 23:00:30 2025 GMT
Not After : Apr 30 23:00:30 2025 GMT
Subject: CN=a2272a22cb2ebd5d119df2f858558ee84f17c691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:f1:72:31:71:db:4d:de:0a:b8:69:db:21:
73:4e:6a:7c:4a:97:0d:a6:d3:45:19:47:d3:c2:b0:
1d:0b:07:9b:eb:b4:7c:67:1b:51:9c:65:43:bd:3f:
c9:e3:ac:19:bd:12:16:6c:f2:4b:b3:bb:bf:db:ae:
af:7e:61:ab:eb:ec:b4:9f:9a:9b:4f:9b:ba:5e:66:
8c:22:f6:9e:e6:d1:f9:19:4f:9a:74:08:b0:a5:cb:
38:2e:4d:4c:9d:70:6e:04:f5:e1:f1:ce:21:1b:7b:
f5:b8:4d:c4:9c:ab:65:0a:b3:d6:86:09:16:11:8a:
d7:04:a6:df:a3:fe:47:6e:82:1f:80:54:57:c7:7d:
4c:69:a2:58:5f:c9:bd:b2:70:a8:fe:81:29:85:b8:
c6:ec:b6:94:31:95:9c:ff:47:5b:b2:1e:fd:9b:23:
e7:bc:77:04:5a:c9:90:95:5f:b4:8b:bd:75:cf:f1:
c0:54:3c:f1:08:42:f1:83:a2:fc:b8:e6:df:3b:57:
da:34:15:00:5c:91:99:fe:9d:85:d9:30:2e:21:d2:
7d:9d:4f:f0:1a:37:d5:66:4c:bc:42:02:fd:ac:82:
90:82:e9:25:04:92:73:aa:11:04:b7:81:8f:50:1d:
dd:c4:83:34:66:43:8b:75:f3:6b:f8:4d:f0:f8:55:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:27:2A:22:CB:2E:BD:5D:11:9D:F2:F8:58:55:8E:E8:4F:17:C6:91
X509v3 Authority Key Identifier:
keyid:86:C6:2C:69:62:EA:33:02:9B:48:02:60:98:9E:18:51:C3:25:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/375f04-3eb2-4d9b-90fd-249bb461ba5b/1/hsYsaWLqMwKbSAJgmJ4YUcMlIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:5b:d6:14:56:9f:fd:ad:45:55:ec:80:5d:f8:f0:98:38:c0:
cb:76:26:15:bb:0a:3b:ba:22:05:ed:47:33:cb:20:3a:fd:f4:
ee:37:f9:0b:77:6b:d3:82:66:3d:66:47:37:e8:d9:80:72:a6:
52:ec:cf:aa:bb:3c:01:21:51:e5:8b:75:87:a1:d8:7c:26:b6:
27:3f:5a:92:ed:92:37:1d:8a:3d:b8:ca:2d:f2:d0:15:89:58:
51:db:82:61:22:02:7d:11:52:d9:0e:36:ec:f4:c3:a8:8d:0c:
86:32:ec:4a:76:db:54:fa:f6:bd:eb:d5:4e:c0:fd:0d:ff:27:
8c:64:6a:9d:6d:46:49:df:02:f1:86:98:41:9c:9c:05:b2:80:
de:d9:40:c4:a9:72:2f:e0:17:18:db:57:5a:3f:0c:ea:93:ec:
cb:b5:da:2a:98:80:41:1e:42:f3:c3:75:06:af:f5:2e:0e:16:
26:d7:72:4e:d3:46:62:80:5c:47:73:b9:28:59:ba:e0:59:33:
c6:8e:00:f8:aa:0d:eb:c7:a0:b1:c0:9e:df:8f:ea:6a:15:1c:
fc:f6:45:7b:8f:7f:d9:be:62:9a:76:4c:84:c7:31:1a:92:eb:
e5:cb:c6:2c:50:6d:99:fa:32:5c:a0:5e:8c:39:23:f8:b6:72:
8c:d3:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:03:09 2025 by rpki-client