Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
File: HGg_lcmNLP6dec3T247oE4uzV3I.mft (raw, json)
Hash identifier: ioSZc1VbX9WNKtKXv0b9Gya2Pk9QIOOOMYLu4vzIaPk=
Subject key identifier: CF:F9:46:C1:7B:5F:1B:4E:B7:47:B6:2D:47:60:81:31:1F:4C:2F:30
Authority key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Certificate issuer: /CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Certificate serial: 019673E6DBB5206D96756A38C2D6C397C072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
Manifest number: 150D
Signing time: Sat 26 Apr 2025 21:00:31 +0000
Manifest this update: Sat 26 Apr 2025 21:00:31 +0000
Manifest next update: Sun 27 Apr 2025 21:00:31 +0000
Files and hashes: 1: 2p9UhZ4f1RpCso5_KIEAEmFd_Cs.roa (hash: oRMeyyuTPK9dSZ9MmutE2TkHWIxlWdCs8LlZr1bRdaE=)
2: HGg_lcmNLP6dec3T247oE4uzV3I.crl (hash: anVfYc7ALELco38QPuwEGrOyZATHmTSDkCKo5ASDQ+U=)
3: IJNfARVzI865AIKgN_3yjxJwMgI.roa (hash: fusPL7W50hSr1S5X6R9RazY+w4yFVSYD9+IMtNP9M5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:db:b5:20:6d:96:75:6a:38:c2:d6:c3:97:c0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Validity
Not Before: Apr 26 21:00:31 2025 GMT
Not After : Apr 27 21:00:31 2025 GMT
Subject: CN=cff946c17b5f1b4eb747b62d476081311f4c2f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:f9:91:8d:45:ca:d7:5f:4b:16:36:c1:53:
c1:e3:65:e9:e9:de:dd:24:26:6a:55:38:09:3a:40:
94:28:08:62:87:8c:33:e1:28:77:7f:44:f1:9a:b0:
2b:22:c5:be:38:b5:fa:d3:39:ab:de:82:f3:d9:f1:
de:fb:3e:65:49:0a:0b:af:99:47:2d:8e:92:06:4c:
56:d7:bc:5b:fc:f2:10:35:37:33:11:9a:5e:f3:62:
2f:e7:cd:4f:86:49:a0:b9:bc:15:18:00:f1:49:92:
a5:f4:14:67:24:68:b2:ff:0b:46:cc:69:d2:cd:b2:
6d:e0:1c:6b:4a:bb:ed:ea:39:a9:66:26:e0:d5:ac:
cd:38:2e:2f:c7:25:58:2f:ee:5c:9a:1d:23:40:c9:
31:3e:3d:52:6a:9d:e3:4f:e5:9e:13:96:0a:6a:0a:
0d:f8:7a:43:94:17:54:bf:e5:7a:84:6e:89:72:c1:
d2:e1:5e:9b:00:58:44:64:00:30:ae:d2:5e:95:f7:
7c:cc:3e:85:0d:41:6c:a2:da:eb:12:6b:b4:e9:ae:
74:0c:eb:93:c2:14:66:fb:e1:bd:3b:91:a4:1d:47:
fa:88:e2:d6:d3:18:0c:3a:7b:39:05:50:2b:60:7b:
3f:5d:a1:3a:eb:da:e6:cb:57:a3:16:5b:64:c3:14:
5c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F9:46:C1:7B:5F:1B:4E:B7:47:B6:2D:47:60:81:31:1F:4C:2F:30
X509v3 Authority Key Identifier:
keyid:1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ee:6f:c8:f9:f1:5c:44:f8:6a:d6:00:26:20:09:fb:7f:14:
3d:78:34:6a:cb:7b:f2:df:75:8a:1d:81:76:8f:be:52:3e:3c:
b8:0f:d5:2c:e9:cc:48:85:c2:7c:2e:1f:cc:a6:46:5a:80:7e:
59:13:f9:0c:8c:36:23:36:08:63:1a:a9:9f:0a:ff:a2:20:98:
d9:e5:9f:b4:60:81:36:5b:54:2c:8d:e5:b7:4a:9f:26:7d:0d:
ba:1f:d5:ae:b1:b8:80:14:56:e5:1c:54:d2:58:aa:cc:a1:a2:
5c:20:db:a5:ae:fa:ee:e0:41:84:9c:6a:7d:2f:80:52:63:66:
75:33:e7:51:c0:5c:3f:ee:66:f2:43:12:e8:be:1f:f5:4e:3a:
69:57:e8:4d:d4:20:30:85:06:ab:e1:ae:2c:eb:7c:dd:aa:8b:
26:aa:12:cc:85:ad:b5:ae:5b:76:4e:b6:33:36:3f:c1:77:cc:
76:de:29:d3:f4:b1:74:a6:95:3d:af:73:00:9e:5c:c6:8c:fe:
a6:9b:d1:ee:1b:88:38:45:d9:77:8b:5c:22:68:39:c8:55:14:
43:82:f4:70:83:15:ce:5d:02:24:8d:ea:a6:f2:c2:1c:b6:1d:
ff:b6:f5:08:42:8d:e2:66:46:5c:ca:97:bc:cd:58:d6:f1:dd:
0e:6f:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:19:05 2025 by rpki-client