Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json)
Hash identifier: U2mYgc7eGBwPuGOhR4wkFThs/dsG+Gvc2lEPSjUx8gA=
Subject key identifier: AD:DA:39:E8:E1:3D:E5:0D:81:3E:5F:F4:70:90:40:E2:13:83:F8:C1
Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Certificate serial: 01967B32430C3A2F498FB7ED11701654402A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
Manifest number: C6
Signing time: Mon 28 Apr 2025 07:00:13 +0000
Manifest this update: Mon 28 Apr 2025 07:00:13 +0000
Manifest next update: Tue 29 Apr 2025 07:00:13 +0000
Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=)
2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: m5Nz+/YT1pse+Zen+70UgjBOt7aJg+JvFTR10sA0gVQ=)
3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:43:0c:3a:2f:49:8f:b7:ed:11:70:16:54:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808
Validity
Not Before: Apr 28 07:00:13 2025 GMT
Not After : Apr 29 07:00:13 2025 GMT
Subject: CN=adda39e8e13de50d813e5ff4709040e21383f8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:4c:1c:bf:37:92:53:61:04:49:c7:2c:88:
f1:51:2b:dc:ae:15:df:e4:23:8e:a2:da:ad:1d:cf:
92:35:3d:53:a1:2c:c6:a1:c8:f0:4b:f6:f6:42:f4:
71:55:62:8a:85:76:4a:9b:12:7a:5a:75:aa:b5:e2:
75:8d:a7:1c:5f:a9:b3:9d:21:10:4c:54:7d:1d:f5:
58:e7:ab:cd:2c:aa:f3:79:63:be:1c:6a:67:be:27:
58:f0:a9:b8:23:c4:68:e2:75:c8:b0:00:79:da:97:
33:6d:ef:fe:88:39:d3:f4:e9:50:b7:9e:f3:0e:74:
11:cf:5d:f9:fd:ff:80:0d:eb:43:03:26:45:96:37:
d0:02:00:73:4c:84:3e:fa:03:1b:c2:65:6b:c7:0f:
ff:c0:b4:23:c0:43:41:7b:f6:98:5c:92:45:b4:f6:
e8:47:c3:22:94:5f:f5:a4:29:d5:d8:44:5c:99:83:
e9:bb:62:93:be:fe:f2:aa:e1:37:61:22:71:80:5f:
eb:09:ef:a1:47:fa:03:01:54:b1:b0:97:1d:d2:0d:
e0:46:a1:19:a7:2f:76:08:12:81:14:a3:d0:fa:96:
d0:bc:5c:c5:7c:e7:02:ac:a1:12:69:48:63:24:27:
62:06:06:46:63:9d:a9:29:9d:de:74:89:58:c5:82:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DA:39:E8:E1:3D:E5:0D:81:3E:5F:F4:70:90:40:E2:13:83:F8:C1
X509v3 Authority Key Identifier:
keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:42:ee:57:9e:4a:f1:f7:27:07:51:d9:0a:58:e8:ca:6d:c1:
78:6a:66:e0:6e:fd:6a:7b:48:f9:04:de:ea:03:4d:6b:79:52:
c2:e8:05:74:02:05:26:fe:97:a4:5e:f3:d9:c4:d7:79:f7:87:
21:e0:af:02:66:7c:5a:73:7f:70:68:f4:56:cc:e7:34:f9:45:
bb:e1:8a:7b:14:e0:a7:c1:d9:db:6c:7e:6b:a3:a0:8a:dd:82:
f7:2b:56:73:8b:7d:5c:b8:1d:3b:92:f1:6e:fe:af:69:03:be:
97:6a:ee:46:4b:88:08:0d:03:e4:2b:6b:a0:f8:b1:14:1c:6c:
ad:7a:80:35:54:8e:76:03:97:c8:07:4a:27:58:bd:f2:f0:68:
8b:a0:77:08:a1:07:9d:5f:89:00:d3:1f:08:8c:14:05:22:ea:
27:b2:1f:70:63:22:b6:3e:11:56:c8:ac:45:65:5d:ee:d1:b7:
37:59:da:05:69:c9:78:85:66:81:12:94:6e:e7:c6:c8:0e:78:
15:b3:e1:22:13:b9:02:21:a1:4f:06:82:bf:75:37:7f:7e:75:
48:75:c6:43:fa:8f:f1:be:c8:a4:ab:20:d0:48:5c:7a:6c:7f:
d6:d4:b6:7e:c7:07:bf:16:93:c6:8f:7a:34:6c:c6:2d:ce:51:
ad:f9:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:48:41 2025 by rpki-client