Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json)
Hash identifier: U6ZHm7DtaeSJ/dkEgFOtQ9nb/zryGlCTRHBfWZic9PM=
Subject key identifier: 31:30:5E:4E:41:19:F5:6E:A8:F9:56:9E:96:98:88:18:F6:2F:5D:3B
Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334
Certificate serial: 0196790D7B0A2FC32A9D55DEC199371E138D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
Manifest number: 10F6
Signing time: Sun 27 Apr 2025 21:00:48 +0000
Manifest this update: Sun 27 Apr 2025 21:00:48 +0000
Manifest next update: Mon 28 Apr 2025 21:00:48 +0000
Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=)
2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=)
3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: EvU0sOaA/YzCp5+xBusr3+pY4lbSXiDOdHoVKu1Gaz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:0d:7b:0a:2f:c3:2a:9d:55:de:c1:99:37:1e:13:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334
Validity
Not Before: Apr 27 21:00:48 2025 GMT
Not After : Apr 28 21:00:48 2025 GMT
Subject: CN=31305e4e4119f56ea8f9569e96988818f62f5d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:08:95:83:39:91:e9:66:5c:79:34:ff:b8:
f9:2c:ca:5e:52:07:88:ec:a2:32:72:08:11:9c:a9:
fd:40:76:09:84:d3:da:30:5e:f4:47:af:b7:dc:9f:
e4:20:af:84:15:8b:ff:15:b0:26:21:cb:8d:5f:45:
3a:ca:20:88:3a:6f:76:d6:9d:80:90:13:84:d4:34:
af:3a:ed:f0:c6:4a:b5:3a:c0:36:f4:67:ac:cd:9d:
75:59:23:73:8c:f7:52:b9:25:b3:e9:bb:21:6d:30:
bb:67:d5:dc:3c:bc:ce:6a:fb:58:e2:64:59:95:86:
c7:2b:10:4f:86:fb:81:f0:c2:9d:4b:32:ad:2f:fc:
01:be:f3:90:18:82:f5:6b:e8:cf:9c:d8:32:3a:d0:
b9:bb:c4:c0:ee:14:0a:6a:2d:ed:2a:66:10:df:d4:
69:20:18:fb:87:b9:32:cf:e3:95:77:20:56:3c:c9:
3e:7c:f8:3b:9a:c7:07:f4:96:b5:2d:b7:a0:44:ef:
44:df:ae:b4:fd:cc:c7:73:9c:15:a3:bd:f9:be:b9:
b3:2d:fe:b3:ba:d0:30:d9:28:84:7d:4f:a1:80:ea:
ea:ee:b7:57:d5:b6:0a:f0:5b:e3:89:f1:44:36:f2:
52:7f:5f:c1:23:dd:14:b3:8f:05:52:80:f4:07:cc:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:5E:4E:41:19:F5:6E:A8:F9:56:9E:96:98:88:18:F6:2F:5D:3B
X509v3 Authority Key Identifier:
keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:51:15:02:9c:1d:3c:33:27:0d:b9:ce:e7:91:e1:46:6e:fc:
d2:f4:f1:1c:f8:03:67:27:aa:24:5a:22:e3:87:bb:08:da:5d:
e0:5e:74:f3:13:9a:60:13:47:0d:07:90:31:6c:7e:69:88:f8:
c5:6e:b6:25:2a:eb:0b:1c:95:ac:a8:32:45:65:73:2e:1d:e5:
b7:0d:ff:dd:74:f6:71:09:f6:6c:6e:12:3b:83:ea:91:3c:8d:
02:a1:81:5e:44:a8:ec:1e:ab:d8:8b:8b:2d:ab:a4:85:00:aa:
d6:ab:67:27:50:66:98:2e:d5:7d:14:37:86:09:2f:70:ec:16:
ec:dc:ec:c9:c5:35:ef:8b:35:6b:86:7e:df:b9:83:c4:53:d4:
02:0d:2e:35:49:8d:04:ab:95:f6:ce:4f:d3:aa:6a:39:7c:5d:
25:b1:e2:38:ae:8f:59:3a:84:f8:59:13:7a:1e:c1:0c:97:b4:
2d:83:20:00:94:c5:7a:9e:d1:98:53:79:98:cf:c1:57:d8:8c:
82:73:12:42:aa:e2:fe:85:71:e7:d7:39:d5:c0:c1:d3:46:82:
e5:1a:2c:92:6e:1d:8d:90:ef:bb:da:5b:28:7f:0c:4c:cd:b9:
c7:40:6c:27:da:74:f5:4f:68:3e:fd:f6:fd:81:5c:bc:3b:31:
4d:f5:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:25:41 2025 by rpki-client